Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
File:                     fhVA_dWt1rd1SYwePyXJDiE6YS8.mft (raw, json)
Hash identifier:          sAgP6JcrrvIO0KNCozwsX1crCgPXqf4IRpoKWW5HaLE=
Subject key identifier:   65:1E:7E:8D:5C:77:BD:B9:89:2F:56:4A:BF:A7:F8:80:88:3C:1B:9E
Authority key identifier: 7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F
Certificate issuer:       /CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
Certificate serial:       01A0B7D350B028A982E058F9E1C4F30183BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
Manifest number:          1A60
Signing time:             Sat 19 Sep 2026 04:01:14 +0000
Manifest this update:     Sat 19 Sep 2026 04:01:14 +0000
Manifest next update:     Sun 20 Sep 2026 04:01:14 +0000
Files and hashes:         1: fhVA_dWt1rd1SYwePyXJDiE6YS8.crl (hash: FuUPSf2nbdQ4+2+SY5bukvr1BEL4eGs3afElIMGbgcU=)
                          2: vypF4u6T8pornEd354CldlnvJ5Q.roa (hash: X/qPs2fMpklVg8cmNTWhzWpJY0nHbNqBSCIvT5rmL0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 02:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b7:d3:50:b0:28:a9:82:e0:58:f9:e1:c4:f3:01:83:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1540fdd5add6b775498c1e3f25c90e213a612f
        Validity
            Not Before: Sep 19 04:01:14 2026 GMT
            Not After : Sep 20 04:01:14 2026 GMT
        Subject: CN=651e7e8d5c77bdb9892f564abfa7f880883c1b9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:08:a9:30:4c:00:ef:cb:34:11:c3:42:5d:
                    23:79:25:10:ee:30:7d:4d:9d:7c:63:b4:9f:d6:89:
                    d0:64:df:0d:2a:08:ae:bf:61:f6:0b:3f:3d:3d:18:
                    bd:1b:04:00:50:37:8b:66:24:de:ac:84:ad:25:f0:
                    e3:2c:d4:46:7f:14:a1:38:18:95:47:c5:61:75:af:
                    04:12:9e:7d:17:4a:7b:8b:bf:5b:68:1f:1c:78:ed:
                    93:56:3d:e0:b6:a0:fe:45:fc:29:57:fa:f4:1e:22:
                    3b:8c:ed:20:29:e6:48:d2:80:3a:1b:06:1e:08:38:
                    40:13:c9:4e:19:54:f6:e2:33:a9:76:1a:78:ef:31:
                    d6:99:12:98:57:8e:13:1c:b4:96:74:0c:a6:9a:5a:
                    f9:b3:74:d2:f1:be:97:de:27:6f:1d:82:a4:4a:35:
                    4b:41:68:5c:d2:07:46:27:10:ee:bf:8c:bb:59:c8:
                    38:c2:7c:31:31:f4:e5:03:b5:87:8c:79:c5:9e:12:
                    24:ee:87:69:f8:52:26:ce:58:04:e6:b8:96:f0:32:
                    f9:42:34:71:5f:85:6c:0a:50:60:b2:ea:ca:18:0f:
                    55:9b:88:37:7c:07:cc:51:7f:7f:c9:09:8e:35:3e:
                    11:fe:03:26:6e:d9:fc:9d:19:99:46:84:26:ff:fc:
                    0d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1E:7E:8D:5C:77:BD:B9:89:2F:56:4A:BF:A7:F8:80:88:3C:1B:9E
            X509v3 Authority Key Identifier:
                keyid:7E:15:40:FD:D5:AD:D6:B7:75:49:8C:1E:3F:25:C9:0E:21:3A:61:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhVA_dWt1rd1SYwePyXJDiE6YS8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a4debb-27b7-4140-b27e-ea653824b1f2/1/fhVA_dWt1rd1SYwePyXJDiE6YS8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:97:e9:5e:0e:1a:b8:ca:92:ae:59:c3:46:e5:91:35:32:3b:
         6e:be:c8:bf:9f:8c:2c:85:ae:aa:4b:4e:0f:78:73:03:44:eb:
         fc:61:0e:74:f8:c4:76:51:3a:fc:b8:83:1d:c9:9a:b6:9f:0b:
         91:5f:9c:e8:73:91:b1:87:b3:fe:32:79:c4:f1:c9:80:2f:e1:
         bf:ca:72:51:eb:e1:2f:13:e0:de:df:9b:93:38:41:98:a3:d3:
         6e:67:02:62:d1:e6:f0:3c:98:65:44:d7:b2:6c:a7:8e:9b:0d:
         44:a4:c0:ff:5e:23:c2:aa:15:36:0e:a9:52:73:18:8c:74:91:
         ed:db:99:5c:72:fb:3b:53:78:ae:e4:63:38:2b:34:a4:f0:a4:
         2e:83:38:51:e5:5f:cf:86:d7:1c:c1:01:d8:19:93:f1:b9:09:
         09:91:78:63:c5:1b:da:83:3b:3b:02:ee:c6:b3:45:92:48:a3:
         37:81:24:71:7c:95:52:2f:34:d2:e1:22:8e:65:0f:28:28:bd:
         d8:a1:93:c3:7c:8e:7e:cd:b1:f3:67:b3:62:db:8b:3a:25:33:
         af:ee:dc:b3:e7:1f:19:71:1c:ba:05:b7:3a:f6:85:c8:c1:96:
         4a:18:17:ea:5c:f5:2b:0b:c5:1a:94:94:03:d3:d4:af:ca:cf:
         30:14:de:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC301CwKKmC4Fj54cTzAYO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMTU0MGZkZDVhZGQ2Yjc3NTQ5OGMxZTNmMjVjOTBlMjEz
YTYxMmYwHhcNMjYwOTE5MDQwMTE0WhcNMjYwOTIwMDQwMTE0WjAzMTEwLwYDVQQD
Eyg2NTFlN2U4ZDVjNzdiZGI5ODkyZjU2NGFiZmE3Zjg4MDg4M2MxYjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU0IqTBMAO/LNBHDQl0jeSUQ7jB9
TZ18Y7Sf1onQZN8NKgiuv2H2Cz89PRi9GwQAUDeLZiTerIStJfDjLNRGfxShOBiV
R8Vhda8EEp59F0p7i79baB8ceO2TVj3gtqD+RfwpV/r0HiI7jO0gKeZI0oA6GwYe
CDhAE8lOGVT24jOpdhp47zHWmRKYV44THLSWdAymmlr5s3TS8b6X3idvHYKkSjVL
QWhc0gdGJxDuv4y7Wcg4wnwxMfTlA7WHjHnFnhIk7odp+FImzlgE5riW8DL5QjRx
X4VsClBgsurKGA9Vm4g3fAfMUX9/yQmONT4R/gMmbtn8nRmZRoQm//wNwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGUefo1cd725iS9WSr+n+ICIPBueMB8GA1UdIwQY
MBaAFH4VQP3Vrda3dUmMHj8lyQ4hOmEvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9hNGRlYmItMjdiNy00MTQwLWIyN2Ut
ZWE2NTM4MjRiMWYyLzEvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9hNGRlYmItMjdiNy00MTQwLWIyN2UtZWE2NTM4MjRiMWYy
LzEvZmhWQV9kV3QxcmQxU1l3ZVB5WEpEaUU2WVM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopfpXg4a
uMqSrlnDRuWRNTI7br7Iv5+MLIWuqktOD3hzA0Tr/GEOdPjEdlE6/LiDHcmatp8L
kV+c6HORsYez/jJ5xPHJgC/hv8pyUevhLxPg3t+bkzhBmKPTbmcCYtHm8DyYZUTX
smynjpsNRKTA/14jwqoVNg6pUnMYjHSR7duZXHL7O1N4ruRjOCs0pPCkLoM4UeVf
z4bXHMEB2BmT8bkJCZF4Y8Ub2oM7OwLuxrNFkkijN4EkcXyVUi800uEijmUPKCi9
2KGTw3yOfs2x82ezYtuLOiUzr+7cs+cfGXEcugW3OvaFyMGWShgX6lz1KwvFGpSU
A9PUr8rPMBTe0w==
-----END CERTIFICATE-----
Generated at Sat Sep 19 09:51:26 2026 by rpki-client