Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
File:                     tFrdzVeWSPw_YSTlWEee8LB_AYw.mft (raw, json)
Hash identifier:          nhBy0jdIoK3M7tn+zs1oUZb55tgkfHLmMR17bWf4lKQ=
Subject key identifier:   0F:41:78:DE:5F:12:38:4A:A4:79:73:18:15:0B:CC:4C:44:04:05:77
Authority key identifier: B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C
Certificate issuer:       /CN=b45addcd579648fc3f6124e558479ef0b07f018c
Certificate serial:       01A110E07665D731A68BE2C3BE140ED76AA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
Manifest number:          0809
Signing time:             Tue 06 Oct 2026 11:01:48 +0000
Manifest this update:     Tue 06 Oct 2026 11:01:48 +0000
Manifest next update:     Wed 07 Oct 2026 11:01:48 +0000
Files and hashes:         1: KtKgrqLsZRkrGS4es-oGTIqwVlw.roa (hash: UPj/hJOC1lHG60eBQqDh4t+3G4IYr9OwL7yonWIDfi0=)
                          2: aawE-pz8srrT5MJYzHNLBXRsTIo.roa (hash: q6aO+UEvoLi+uji805zaER2sJ0t42VLw5m+o0+yFdgw=)
                          3: ogf4LgzJ7S8eq2MvX-cwfI-TbGk.asa (hash: hBogqH7ehXoWO7PFlFUUc+GrTJY5N3NdPNiiN/ULU6w=)
                          4: qh7UtXFS8GM0jt3hkapz3mDCQ5Y.roa (hash: bK/ZSD9IopAichABUi1qk65QlYFISbXCl3LiF+vq1SQ=)
                          5: tFrdzVeWSPw_YSTlWEee8LB_AYw.crl (hash: HxMvHLtxLhbe0SR+d8NNdr2BTm3tFpgKS0ptjJE26XQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 08:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:10:e0:76:65:d7:31:a6:8b:e2:c3:be:14:0e:d7:6a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b45addcd579648fc3f6124e558479ef0b07f018c
        Validity
            Not Before: Oct  6 11:01:48 2026 GMT
            Not After : Oct  7 11:01:48 2026 GMT
        Subject: CN=0f4178de5f12384aa4797318150bcc4c44040577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:fc:1d:7e:a4:1b:c2:eb:a0:a5:ad:fe:c2:08:
                    ab:0f:ea:32:23:a5:06:9a:d6:d3:f3:83:05:77:51:
                    77:44:5d:3f:fe:e5:27:51:bc:e7:aa:9b:c3:83:3e:
                    b7:dc:6f:1f:20:5a:75:62:9d:a4:48:a1:83:d4:5a:
                    b7:28:b9:ea:4f:10:6c:c4:d5:b2:15:2c:5d:de:d8:
                    e3:82:7b:18:72:28:ab:80:6a:4e:8f:cf:2e:ac:25:
                    52:00:b6:89:05:9a:6e:97:cd:51:3a:3e:0a:32:24:
                    89:16:a2:b1:61:33:b2:d8:7d:8d:15:64:a8:fe:62:
                    cb:b9:0c:56:eb:55:ac:21:a8:a3:86:3b:03:cf:68:
                    98:9d:73:2a:2b:18:ae:1d:d4:d8:7e:2b:2c:6e:ab:
                    13:2f:da:40:02:e7:aa:85:06:4f:5d:2b:30:65:05:
                    81:4d:fe:55:b0:3b:d3:8d:36:c4:49:67:50:49:65:
                    0b:13:f3:cf:38:46:14:27:90:93:32:69:48:97:df:
                    d7:fe:78:6c:34:b5:90:0f:d7:1a:fd:b5:59:d2:b0:
                    97:4a:86:3d:3d:b3:dd:b6:9c:9e:a7:8d:52:c2:b7:
                    76:43:a6:0b:ea:96:8b:81:ef:87:6d:c9:b1:8c:d6:
                    71:79:83:26:cf:9f:63:44:e1:cd:64:9a:19:c4:1c:
                    f6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:41:78:DE:5F:12:38:4A:A4:79:73:18:15:0B:CC:4C:44:04:05:77
            X509v3 Authority Key Identifier:
                keyid:B4:5A:DD:CD:57:96:48:FC:3F:61:24:E5:58:47:9E:F0:B0:7F:01:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFrdzVeWSPw_YSTlWEee8LB_AYw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/f4f244-8c0c-4564-9c42-af60fd5f06b1/1/tFrdzVeWSPw_YSTlWEee8LB_AYw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:15:d3:f8:87:10:97:ed:0b:7d:df:35:32:f7:33:93:26:4c:
         ca:20:20:95:7c:2e:31:a3:b6:74:46:98:a1:40:7d:87:f0:73:
         6c:16:30:c8:f3:33:b5:84:5c:a3:e8:9e:5b:73:d5:e6:71:fe:
         5b:07:a0:73:dd:87:30:0d:d5:99:cd:09:ff:34:8e:4f:e1:00:
         48:a9:8d:21:33:13:c5:4b:17:b2:a1:50:94:72:09:9c:fc:1c:
         14:c4:62:75:d8:e0:71:b8:df:a1:db:4e:0b:d0:9d:17:fe:db:
         ff:31:65:fc:ee:c7:d9:89:f2:47:10:4f:2d:43:ad:d8:72:f8:
         bd:01:80:e4:7b:8b:a4:b7:68:8a:37:95:bd:b8:dd:47:06:51:
         ed:8c:4a:3a:94:13:cb:ea:03:2c:08:8c:04:6e:0a:47:8b:46:
         94:99:22:60:00:e8:9b:20:90:7c:0c:af:d3:a8:88:b6:21:60:
         3e:5a:cd:c2:25:82:f0:e6:04:ec:83:2a:99:35:29:1b:be:bc:
         56:30:8b:6c:67:58:64:1a:96:5a:6c:77:1c:ee:73:29:70:9d:
         37:a7:e7:72:5b:98:ee:47:fe:70:c8:cb:f6:81:50:c0:eb:71:
         d5:fe:dc:4e:6b:46:3c:7a:14:61:fb:3a:af:d2:a9:66:13:ea:
         3c:b7:f2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 15:59:51 2026 by rpki-client