Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
File:                     M0-fg9LXTAwP0A2nNVePc33X2gM.mft (raw, json)
Hash identifier:          hJ+JCeyKlaOjKnYw1cdd1K5fg+iq0jq5VRKdNoJ0pr8=
Subject key identifier:   7D:F4:0E:41:0F:E4:65:70:25:22:E2:2B:76:53:83:86:29:32:12:C5
Authority key identifier: 33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03
Certificate issuer:       /CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
Certificate serial:       01A026573C787F75B7DACD25218CB7AA216D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
Manifest number:          0741
Signing time:             Fri 21 Aug 2026 22:00:46 +0000
Manifest this update:     Fri 21 Aug 2026 22:00:46 +0000
Manifest next update:     Sat 22 Aug 2026 22:00:46 +0000
Files and hashes:         1: 7nAXiiWwMrKC__gT-hUF2XA-Iso.roa (hash: vcK2N0Exej7cew/p43KdNyk4JPLcOKiM3s2+QDUjk38=)
                          2: M0-fg9LXTAwP0A2nNVePc33X2gM.crl (hash: ynOua4i005wvt53+S/SDxN+nfHYRjaXKJ4OHqyXGwi4=)
                          3: WqDS95-He-yk3t24qKJI-_SLkPk.roa (hash: CpUmTzZjgX7L+EURvDrJ6FpyIH+66F1QJtHPFgkqtLs=)
                          4: cgOqu4SdNiUsyvVgRsWy2IiSrRk.roa (hash: iyZz+ne5RBNmhJL+kkuEkW2psKX2xrbIym9fdJ+TVi0=)
                          5: faLPN_S_WjaTJHL5obkgUoA9YU0.roa (hash: 9SARb7qgti8Rdi1ymT3uP+n1nUwS+BiJv6V79V4Y0rI=)
                          6: tkxYbwLzW57rtbTL3HAb4gik620.roa (hash: gE/XZLF/hHQla0+c26dZTm+olAmW2YqbYW49t6axXdU=)
                          7: v0CmFjYdCus3aQO-8m8_ZmwT2WU.roa (hash: gPHxfBPLjS7r3KK8sjMCL/yxvco773JImBamks13aRg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:57:3c:78:7f:75:b7:da:cd:25:21:8c:b7:aa:21:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334f9f83d2d74c0c0fd00da735578f737dd7da03
        Validity
            Not Before: Aug 21 22:00:46 2026 GMT
            Not After : Aug 22 22:00:46 2026 GMT
        Subject: CN=7df40e410fe465702522e22b76538386293212c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a5:83:af:f5:a7:c6:5b:41:51:c6:a6:a0:a8:
                    86:70:cd:d2:81:5a:46:57:98:1c:9c:c3:6f:76:14:
                    55:48:93:00:f7:a3:2b:f8:41:58:55:bc:6e:a4:6e:
                    4e:dc:e3:71:4d:0c:64:e0:77:15:98:90:83:31:2d:
                    ec:fa:81:9c:da:f9:00:35:f0:e9:18:3b:d0:12:57:
                    2a:58:48:4f:64:9e:9d:04:c6:71:85:eb:44:6a:d5:
                    a0:79:97:05:2c:9c:96:6f:6e:0c:b3:fd:bf:14:99:
                    dd:b9:4c:19:6d:52:6c:b0:3e:31:74:1d:89:b9:55:
                    86:13:38:82:27:0c:fd:b1:83:6b:41:d6:5e:22:57:
                    37:d0:00:75:62:75:ba:0a:08:7e:57:7f:45:9e:54:
                    95:32:bf:e7:35:8c:ee:55:06:06:1e:d2:81:84:98:
                    79:ba:9d:ff:3a:e7:7a:da:df:47:80:f9:53:3a:f9:
                    f8:50:9d:99:c0:7d:c7:51:e5:ed:7d:5b:2f:4b:74:
                    23:e9:e6:59:3d:33:81:c3:4b:71:49:84:25:ab:c5:
                    f4:cc:3e:89:f8:68:b5:c4:b1:88:6c:3e:b9:e9:a4:
                    5c:8d:e0:79:75:96:a0:76:17:90:cc:52:2b:c5:20:
                    42:34:7a:85:7c:68:bf:24:32:12:5b:68:a3:c1:33:
                    5a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:F4:0E:41:0F:E4:65:70:25:22:E2:2B:76:53:83:86:29:32:12:C5
            X509v3 Authority Key Identifier:
                keyid:33:4F:9F:83:D2:D7:4C:0C:0F:D0:0D:A7:35:57:8F:73:7D:D7:DA:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0-fg9LXTAwP0A2nNVePc33X2gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/9c5f06-59a7-4588-ac28-efd20f6c2ec3/1/M0-fg9LXTAwP0A2nNVePc33X2gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:85:bf:06:b2:0a:c6:fa:8b:09:7a:60:fd:15:54:96:f0:49:
         90:6c:02:66:42:89:55:69:7b:1b:d2:9c:cd:e6:5f:48:a7:fc:
         ca:ed:9c:df:b8:56:6d:74:9c:18:27:64:13:97:2e:ac:fe:bf:
         a9:b6:29:f0:6e:5c:c1:56:65:1f:89:b1:66:e3:ce:7e:d8:45:
         ea:3e:1a:2d:b3:5b:2a:dc:d0:c1:1f:87:06:23:84:34:b0:57:
         bb:59:8c:72:03:a3:32:5e:c6:94:69:d9:db:f7:d4:dd:51:ed:
         02:6b:d1:19:da:ad:02:9b:ca:8f:b1:2a:2b:cf:08:9c:bb:cd:
         9c:63:da:53:a4:00:65:ad:43:83:9a:b4:0b:4d:e9:8a:f1:7e:
         7c:f2:bd:d0:32:55:f5:a4:88:17:5d:37:91:8a:f4:76:1a:44:
         bf:1c:b0:73:ec:2e:85:e1:64:f3:aa:f9:6c:f1:27:87:7f:e5:
         81:2d:e7:b5:7b:ec:33:38:a1:69:46:55:ee:29:bd:88:c2:c6:
         67:88:3b:39:e2:89:31:da:7d:31:80:43:e0:44:ae:b9:37:97:
         41:8d:f1:1e:4d:d9:da:dc:61:44:d2:62:af:3f:15:f4:73:1a:
         f5:07:f1:54:d9:97:c0:3f:d7:8e:f7:f0:46:13:35:09:f8:28:
         75:d5:fa:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 06:47:34 2026 by rpki-client