Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          8B38J26MA9I0GpkbKsD66vhGUY6jo5IrIhMqiIg+ic8=
Subject key identifier:   AE:72:2A:E7:2C:25:B8:80:CD:D4:D8:53:78:57:39:8B:C5:65:F9:24
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       019FDFBF743CB2EAA76092F87FDA80C29664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          0930
Signing time:             Sat 08 Aug 2026 05:01:34 +0000
Manifest this update:     Sat 08 Aug 2026 05:01:34 +0000
Manifest next update:     Sun 09 Aug 2026 05:01:34 +0000
Files and hashes:         1: 1j5UAP5H5otYm6pS4g0n1VzxxYQ.roa (hash: mM9qtiyOIDoLHT2ky1NvYHeN+2+g0FGedZNgPDVPiQY=)
                          2: 2XNigP1XX5v-b3FUJHAwFh0xXbY.roa (hash: Oo5YPE7FvlEd2/zNBUPSdHNjdbk39M4tT85PV9QMW+4=)
                          3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          4: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=)
                          5: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          6: FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa (hash: Lia6Niow9mvTIEp6IZQLMa57V883PVRlmqrb94CP8h4=)
                          7: HSZJOMMgqldMqXCQrjEqHsBDzGw.roa (hash: 9AQVGhxSXSd9IT7bQVwCvuQJIeCspjGvlwwEhQZYorE=)
                          8: L9vi7oaF7p0v7m8lMsP1-CSnn40.roa (hash: SjasMchH3XZ1XzHCHPI6noKvIxn92k+R3PPiC6LGtDE=)
                          9: LCFdxVlAtcLkcKUr0blTTKgZmEw.roa (hash: jGJaxEMPKFGeVP28YWJ4t2xMx4rPzI/ALe0dQ924UAc=)
                          10: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          11: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          12: YN2cQdjx8MfN4SpkIZWHdTD1gDo.roa (hash: O+9/V5QrptcdWsyQKkyNmQaV+rxkd0ZkMWeazSDlkK0=)
                          13: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=)
                          14: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          15: alomw2OsWHbd8tHr8rQUVSaTf48.roa (hash: /SgtQ+hB/USe7wR/Kp74UDlxjPB2bz9JIMvjDNTyblY=)
                          16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: O6I5jQRGvi6E8WAxLLns5KOLajqskk5uDdHlVbZD60o=)
                          18: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=)
                          19: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=)
                          20: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=)
                          21: yzHgZlCQT4Y7B8Y00NhRaB47xTk.roa (hash: FPbEBqFmlrQorlve4YibsVGnSYZoskFcy6Qs1bK0kdg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 09 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:df:bf:74:3c:b2:ea:a7:60:92:f8:7f:da:80:c2:96:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Aug  8 05:01:34 2026 GMT
            Not After : Aug  9 05:01:34 2026 GMT
        Subject: CN=ae722ae72c25b880cdd4d8537857398bc565f924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:7d:8a:f3:74:cd:b1:8d:2c:6f:fc:71:db:
                    ef:a0:59:db:b4:68:1d:ae:5d:93:20:d7:50:15:fd:
                    c9:1a:fd:bf:7a:b7:71:d9:8f:ba:92:db:e5:72:e5:
                    f6:3a:74:27:bf:02:d8:d5:07:6c:3f:cb:85:93:9a:
                    88:be:1a:a7:60:20:71:80:68:5d:70:d4:43:f7:20:
                    b1:47:e0:29:1e:a4:bc:55:00:54:fe:08:b9:63:e0:
                    d1:4c:dd:98:c9:0c:68:7d:b2:cf:95:7b:2f:e8:0b:
                    f1:c1:f2:2d:4a:6a:cb:87:c0:d4:e1:54:4e:73:3f:
                    cf:9c:32:10:20:e5:e7:d2:eb:2a:ce:6a:9a:2d:ac:
                    03:32:cb:2e:fe:ca:fd:9b:61:75:81:ad:e2:fd:d3:
                    dc:1b:e8:80:68:65:89:87:67:65:c8:30:a9:6e:dc:
                    f8:e1:39:58:fb:4a:b4:cf:48:92:f1:95:64:28:43:
                    47:b4:b7:ea:9f:33:3e:00:66:b6:3a:c8:fa:52:f6:
                    ce:be:10:94:87:6e:eb:31:4e:b4:b3:cc:8d:d7:ee:
                    35:c1:2d:97:0e:96:7d:7a:b2:22:be:d2:12:41:7d:
                    07:ef:2c:6a:86:b5:81:44:60:0f:3c:5f:bd:9f:40:
                    46:75:35:30:a0:c4:5c:ad:ea:29:97:18:38:91:47:
                    14:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:72:2A:E7:2C:25:B8:80:CD:D4:D8:53:78:57:39:8B:C5:65:F9:24
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3c:77:53:b1:a8:93:45:c1:78:02:e5:17:8b:52:c0:8a:37:
         45:3d:c4:d1:f3:b0:18:1d:01:df:bb:21:28:2d:0e:e4:73:84:
         b1:73:d0:6d:ec:ae:5c:70:27:f1:09:ec:9b:cb:61:40:ea:77:
         ce:fb:59:63:28:1d:5a:5d:6f:0a:ef:e5:28:41:d6:fb:f2:7c:
         1c:33:ce:99:04:13:61:a9:c2:54:40:61:2f:c7:f5:56:1d:fa:
         af:66:f4:80:83:39:ed:2e:95:8b:68:6c:6d:0a:59:e1:ab:77:
         51:55:79:90:b2:a0:64:7b:60:2c:79:20:4e:ce:95:ce:21:9a:
         fe:7f:0c:dd:8d:68:ea:f0:47:6a:92:f4:0d:71:91:db:19:33:
         00:f9:93:a6:f0:4e:ef:25:d8:81:aa:e1:e7:86:13:a3:c7:2c:
         e4:bd:a8:fb:33:34:c0:0e:a3:da:df:26:c3:37:65:e5:69:47:
         e1:05:6d:5f:a9:65:e4:b3:9e:de:e3:37:80:52:66:b4:33:b8:
         d5:02:ad:53:db:05:ab:88:c3:69:c9:76:ee:d9:bf:50:42:7c:
         35:6a:0c:b1:db:55:bb:40:be:82:d1:b2:c4:72:f9:ef:97:df:
         40:74:c3:4f:6b:35:26:af:c5:a4:19:32:1f:7d:62:7b:c6:e6:
         94:43:4e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 10:23:13 2026 by rpki-client