Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
File:                     fgLiCr0iA7BXaGscrWzBJTREuLI.mft (raw, json)
Hash identifier:          iurdpVqHbAn8P68bvn4nOz5k5XflcnXGMn7OOxIuBf4=
Subject key identifier:   E7:5F:E9:D5:CC:5F:46:63:E6:1A:C5:D7:B5:7F:06:C4:C9:B0:A1:73
Authority key identifier: 7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2
Certificate issuer:       /CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
Certificate serial:       01A06EA7D583F10DB2DA4050DFA09F76E2C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
Manifest number:          03B5
Signing time:             Fri 04 Sep 2026 23:01:27 +0000
Manifest this update:     Fri 04 Sep 2026 23:01:27 +0000
Manifest next update:     Sat 05 Sep 2026 23:01:27 +0000
Files and hashes:         1: KP-ylf8ytthvJyIxnF220410W_w.roa (hash: C5HlcdAoo1o+AnwI6JDZzjVDacowCGaTh3ddFqxBD4g=)
                          2: fgLiCr0iA7BXaGscrWzBJTREuLI.crl (hash: xKVdWkFJfWruA+CyOUbNy4tjRg8JyQpwHMsh0zkC3uY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a7:d5:83:f1:0d:b2:da:40:50:df:a0:9f:76:e2:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e02e20abd2203b057686b1cad6cc1253444b8b2
        Validity
            Not Before: Sep  4 23:01:27 2026 GMT
            Not After : Sep  5 23:01:27 2026 GMT
        Subject: CN=e75fe9d5cc5f4663e61ac5d7b57f06c4c9b0a173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d0:40:78:61:1c:b8:5a:ef:25:bf:1b:b0:d8:
                    8c:bd:ff:0f:c3:80:54:e0:9a:e1:db:de:5a:c6:32:
                    70:24:d1:bf:9d:0d:60:49:4b:b4:b6:d9:d6:7c:5c:
                    dd:14:9a:21:72:1c:30:5d:9b:c6:48:9c:fd:fc:d3:
                    1a:76:6b:e0:11:da:bb:7a:45:a1:10:7b:7b:e8:07:
                    0b:1a:64:e4:53:31:ba:48:0a:b1:f5:c8:e9:9c:bd:
                    ed:14:13:ff:6b:a4:3e:9e:50:c6:65:05:64:4c:08:
                    34:ff:a5:f6:bc:43:8c:cb:cb:a8:63:97:e9:20:e4:
                    a4:45:3b:90:4c:63:5b:46:8b:b5:f5:d2:e2:d1:55:
                    4b:f6:07:a2:fc:00:de:51:78:3c:85:07:a3:c9:41:
                    e7:7f:e9:fc:ec:d4:40:2b:e6:37:e9:39:5c:f2:45:
                    24:50:22:6f:0e:7b:36:cb:b0:7c:b5:7b:09:57:be:
                    05:f9:76:16:4f:f1:11:3f:1e:03:26:2d:e3:d8:73:
                    c9:7b:38:86:6c:09:05:ee:5e:86:d8:19:8b:f4:c8:
                    d3:fe:5b:5e:b4:ea:ab:2f:87:d5:9d:81:01:d9:90:
                    2a:5a:b0:0d:9b:4a:35:6d:69:c3:ad:4e:c8:80:76:
                    01:b0:11:3e:9c:11:b8:4e:af:07:e4:95:50:6e:bb:
                    63:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:5F:E9:D5:CC:5F:46:63:E6:1A:C5:D7:B5:7F:06:C4:C9:B0:A1:73
            X509v3 Authority Key Identifier:
                keyid:7E:02:E2:0A:BD:22:03:B0:57:68:6B:1C:AD:6C:C1:25:34:44:B8:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgLiCr0iA7BXaGscrWzBJTREuLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e98a79-249a-4048-9581-f30709d9c379/1/fgLiCr0iA7BXaGscrWzBJTREuLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f2:ed:23:11:08:fa:77:8d:45:8e:75:f6:dd:89:d2:8c:2e:
         8c:2d:26:da:27:0b:cf:8c:9a:7a:df:b6:e5:4d:a5:28:da:a0:
         d3:d3:37:c9:92:37:1d:24:13:90:eb:0d:4e:0a:96:fd:d5:73:
         10:11:75:00:c0:40:77:e6:cb:61:15:e5:c3:ae:a3:c2:68:fe:
         7a:c7:3d:4b:4f:41:a8:58:e7:7a:49:33:49:73:b1:bd:5d:3a:
         ca:e8:24:69:73:62:aa:ab:7d:8c:df:69:23:af:3b:c8:17:27:
         8d:38:b0:32:d6:b0:91:76:29:14:ad:f9:d9:67:55:d3:e3:8d:
         15:2a:79:f6:7f:28:ac:89:75:ce:d2:8d:d4:ab:c5:13:cd:58:
         68:d0:a0:2c:7e:79:80:ff:c1:6b:70:2f:3a:9c:b0:74:27:f7:
         d7:ce:6a:c4:7b:59:eb:c0:89:e4:6b:41:60:23:4d:07:a9:3c:
         d9:a9:41:ef:5b:ec:03:28:d4:86:1f:ef:7e:24:79:6b:d7:d2:
         26:96:d3:98:14:43:0d:3f:67:0a:aa:73:ca:d4:4d:f5:db:90:
         4e:06:92:cb:9f:6e:0b:21:8e:a2:9c:d1:bc:ef:da:ef:dd:3c:
         04:ad:22:44:fc:b1:ae:c0:04:6a:7f:4d:3e:17:9a:82:20:a6:
         fe:4b:d3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:32:18 2026 by rpki-client