Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
File:                     9FT4T3gIX46gOklonL43LnSsFTw.mft (raw, json)
Hash identifier:          VqaSTGNFAVcLbUi4gbDUYwFdq4P2EL/U2K4GLC4WiPE=
Subject key identifier:   7D:5A:08:9C:3A:59:EE:54:BB:CB:F1:07:50:CD:2B:F2:1A:64:F9:33
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Certificate issuer:       /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial:       019FFA2423C1673F6B0EBD27BD27071D46FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
Manifest number:          19FC
Signing time:             Thu 13 Aug 2026 08:01:40 +0000
Manifest this update:     Thu 13 Aug 2026 08:01:40 +0000
Manifest next update:     Fri 14 Aug 2026 08:01:40 +0000
Files and hashes:         1: 9FT4T3gIX46gOklonL43LnSsFTw.crl (hash: VgZASvkC6O5/YshjziiLp6sHnFQ2voHUp52p1oBNmhs=)
                          2: Y6ybWhEjwuda51l0uiaZjIT-fg8.roa (hash: 8LGe+xcRdI8B6zAIoBChynO4rGVdoYzlhKSA0vPLuGw=)
                          3: aEVMMMA5f1UmRI8NYOUQQuTtgsQ.roa (hash: pdfghptkrLhCdjHFzkd4R/q6hTlSpA/AvR6T+/fF+rc=)
                          4: sbz6OVH06vkYwN8qjWyWv5JQ98I.roa (hash: mqPWKkpNLvEdA2xxPfKh+1E+EB8NghsX64s1n44EHeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 08:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fa:24:23:c1:67:3f:6b:0e:bd:27:bd:27:07:1d:46:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
        Validity
            Not Before: Aug 13 08:01:40 2026 GMT
            Not After : Aug 14 08:01:40 2026 GMT
        Subject: CN=7d5a089c3a59ee54bbcbf10750cd2bf21a64f933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d5:ef:7d:a5:94:dc:a5:e3:1e:f5:6f:5c:2f:
                    9c:ca:de:85:3e:2a:14:63:5d:13:50:34:7c:5a:70:
                    d8:b5:69:ce:4e:6a:bd:dd:cb:ce:a7:84:e5:21:d2:
                    b6:75:df:b0:74:4a:39:11:a9:e2:09:14:63:10:f4:
                    7b:b3:c8:b4:ad:94:29:85:34:e5:41:96:b7:02:c0:
                    da:c0:0c:9c:f6:1f:d8:0e:3f:06:fd:a8:da:cb:2f:
                    45:63:da:73:aa:f9:45:af:02:18:23:bb:35:87:6a:
                    00:ff:d0:f3:73:cc:34:57:68:60:68:e5:46:5f:8d:
                    0c:e8:f4:1e:09:46:31:8b:e0:2b:fa:db:66:a6:9d:
                    38:1c:01:e8:32:39:19:a9:6a:1c:83:72:7b:4f:bd:
                    cb:c2:58:22:bc:9a:93:27:48:07:c6:17:fd:1f:df:
                    34:f1:d5:83:e3:0c:4f:2a:10:a3:d2:bd:89:f5:5b:
                    fa:49:b3:74:bd:68:f4:9b:07:27:16:6a:c1:2f:fd:
                    61:c1:d9:da:d0:6e:3a:8f:d8:5a:38:32:5c:aa:e2:
                    42:7f:b5:f7:37:35:9d:5d:b6:2a:71:e0:0a:fa:fe:
                    82:53:e1:d4:0a:56:b6:ef:df:e7:0e:9b:d3:75:23:
                    a4:76:14:90:51:16:28:08:72:d1:d0:5b:37:08:77:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:5A:08:9C:3A:59:EE:54:BB:CB:F1:07:50:CD:2B:F2:1A:64:F9:33
            X509v3 Authority Key Identifier:
                keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:3f:57:0a:27:fe:c8:7f:24:c4:43:06:cd:24:37:bf:70:62:
         3c:eb:b0:f3:15:6c:9e:ae:8d:ed:3f:70:b1:21:1d:62:44:cd:
         15:ec:f6:f6:0e:d1:ba:66:4f:52:ab:c9:fb:97:b8:bb:ef:4c:
         6c:bc:98:29:56:8b:cd:17:e9:8d:e5:a5:0e:c8:d4:7f:07:a8:
         b6:ef:c5:ad:8a:80:99:f4:59:0e:cd:46:ab:6f:36:a9:af:27:
         ce:70:98:0e:5e:12:3e:51:20:1e:33:07:84:2d:85:6e:a7:eb:
         94:8b:b2:a9:2e:ec:f4:61:b0:d1:8a:b2:62:92:00:78:99:bc:
         78:b5:c2:30:2c:aa:c0:bb:95:32:b2:1e:8d:dd:85:43:94:d6:
         86:3f:e4:32:56:6c:b1:25:97:e5:55:8f:9c:97:6f:b0:63:e9:
         8f:d7:1f:e7:ed:16:1e:9c:d8:70:b4:b9:66:9b:33:91:4a:43:
         42:89:a6:7a:f7:1d:7b:6b:33:ec:fb:af:d4:89:54:07:0d:93:
         4f:c1:2e:16:21:ef:f4:bf:7b:c6:bf:89:4d:82:1f:a6:28:ea:
         47:da:5a:55:e1:d5:57:22:7a:d4:10:4a:44:21:c7:17:67:60:
         bc:ce:9c:09:c2:21:f3:73:b9:d0:b4:ca:4b:7d:6c:e9:9e:15:
         d6:2e:da:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 13:40:32 2026 by rpki-client