Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
File:                     hfTuFPbTinzwcSed_3s5FwLjcTU.mft (raw, json)
Hash identifier:          mdba8+0/5nR2UAe8+axhSZKUDj45ocwF9Q+5ZXut7fg=
Subject key identifier:   75:01:C9:E5:87:69:01:77:8E:91:9B:17:DB:4F:4F:FA:20:4A:AF:BD
Authority key identifier: 85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35
Certificate issuer:       /CN=85f4ee14f6d38a7cf071279dff7b391702e37135
Certificate serial:       01A0916A68684A0AD7827ED13C762A36C4CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
Manifest number:          18E9
Signing time:             Fri 11 Sep 2026 17:01:04 +0000
Manifest this update:     Fri 11 Sep 2026 17:01:04 +0000
Manifest next update:     Sat 12 Sep 2026 17:01:04 +0000
Files and hashes:         1: Fbp_lxqUHehCSWbyl7sXqy6NV7c.roa (hash: 2HfCb9kniGEaBDNnHz9GBiRgabhJI0HLcxsnmcMaKY8=)
                          2: Kw8ydkhlfzZHeJTkr7mnY0TC51Q.roa (hash: A/++N69JbstSCEAobrMDwfyAGtA60/N4ZLrwg/2X2ok=)
                          3: hfTuFPbTinzwcSed_3s5FwLjcTU.crl (hash: nCSixIzQVU/a55EhJiYKjHm+nRiA0WNvq0WI24L3hIY=)
                          4: tTro6Q3OQALzLcA8FA4eU5RfBWA.roa (hash: jtcqT3NEeBB17kUbe2vD9a8c2cug0yjIQxz7WQqkvtg=)
                          5: vbHBtb2iPNz_qrAoEkpCxsaIZZc.roa (hash: OIkOu0+4El6Pg/y3PaYXt7py5eZ3TqMx4VnZc06tByw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 17:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:91:6a:68:68:4a:0a:d7:82:7e:d1:3c:76:2a:36:c4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f4ee14f6d38a7cf071279dff7b391702e37135
        Validity
            Not Before: Sep 11 17:01:04 2026 GMT
            Not After : Sep 12 17:01:04 2026 GMT
        Subject: CN=7501c9e5876901778e919b17db4f4ffa204aafbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:78:94:3b:81:f2:69:e0:04:e8:93:d7:ac:2b:
                    4b:a0:84:cb:a2:41:d4:43:c6:50:1e:15:c0:67:b7:
                    4c:45:51:5a:fc:7e:75:2b:55:43:95:79:a1:f7:48:
                    d3:4c:ee:d6:dd:49:d5:27:8d:a8:54:2e:37:b1:4e:
                    63:33:c9:e9:7f:da:88:40:76:82:a5:d6:54:9c:a1:
                    be:48:b7:e1:a1:46:b2:88:bf:ea:50:f0:29:bf:4e:
                    e3:fe:b5:87:47:99:1c:c3:ea:91:2c:df:2f:c9:d5:
                    a8:a6:82:e8:31:12:09:cc:5f:fe:7d:db:14:75:0d:
                    7a:68:90:65:55:3d:d6:8e:7b:b0:0e:6b:ce:e4:8f:
                    5a:ba:dd:9c:ac:5b:fb:ac:88:15:a4:7a:0a:04:33:
                    eb:d9:38:7e:07:3d:a8:5a:91:60:3b:55:b1:64:13:
                    42:d9:9d:a4:19:a4:de:ea:3f:c2:a2:64:be:f2:67:
                    a1:bf:a1:3f:b3:d4:d6:01:e7:87:50:50:e9:14:f5:
                    fa:2e:36:fa:fe:e2:d0:d6:92:bc:a4:32:d3:8a:07:
                    83:db:18:90:68:0d:6a:6b:a6:40:a1:18:bb:11:3e:
                    fb:47:9c:e2:d6:ea:b8:f3:86:a6:95:75:00:3d:a3:
                    de:d8:0d:4b:ce:4d:eb:46:f1:fc:a4:ad:3f:7f:23:
                    7e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:01:C9:E5:87:69:01:77:8E:91:9B:17:DB:4F:4F:FA:20:4A:AF:BD
            X509v3 Authority Key Identifier:
                keyid:85:F4:EE:14:F6:D3:8A:7C:F0:71:27:9D:FF:7B:39:17:02:E3:71:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hfTuFPbTinzwcSed_3s5FwLjcTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/4df39a-783c-4d7d-b1be-bfd95a9a6e64/1/hfTuFPbTinzwcSed_3s5FwLjcTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d2:cf:db:23:3a:ff:5c:63:7d:ee:4e:01:a7:98:92:ee:7e:
         b9:20:46:bd:de:13:76:96:5c:da:00:f8:b5:cb:55:e7:0f:fc:
         f6:ed:e3:d3:15:51:22:d2:ec:e2:79:57:b7:fd:7a:46:e3:67:
         bc:c5:30:2c:f8:83:5c:7d:bd:07:78:47:8a:d7:4f:08:c9:37:
         b3:ea:06:93:7e:58:b2:c2:66:ab:d0:c0:f5:43:b7:99:1d:0d:
         11:77:3a:02:1e:75:a1:5c:60:91:14:ed:97:85:ae:88:9a:1d:
         48:37:d2:77:f8:10:ed:3d:c2:95:97:67:91:83:54:bc:78:e1:
         d6:6f:3c:fb:4c:d5:6d:f3:0a:e0:55:e1:a1:c8:d0:a6:70:8a:
         d3:8b:a4:bb:5a:1d:a8:1c:1d:68:a8:6d:de:94:0c:76:ac:39:
         fa:1d:ee:02:89:d6:aa:8d:61:3a:ec:67:09:a9:5d:ce:df:25:
         68:e7:67:30:96:d7:56:0f:32:fd:0f:b1:bd:54:56:b8:ba:41:
         fc:2f:14:20:03:50:9e:f1:1b:52:fc:42:c0:b6:bb:85:bd:80:
         e9:2a:5c:3c:e2:3b:7d:78:e6:b0:ce:f9:3d:dc:b3:59:9a:44:
         7a:31:8e:a8:41:26:59:c1:46:d2:5e:3b:60:c7:4e:94:55:a5:
         ce:55:cd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 01:00:26 2026 by rpki-client