Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
File:                     fVexU-7RELy9FNx-M_1H8C4v4HE.mft (raw, json)
Hash identifier:          VJ8ahS9iTSsqF6zFGnGGN3NW4/NB1O4guM+S/uskCZE=
Subject key identifier:   47:D1:CD:FE:80:E2:F0:16:F7:4C:60:4B:7C:33:DE:96:3F:5E:70:73
Authority key identifier: 7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71
Certificate issuer:       /CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
Certificate serial:       01A073969B505EB209FE23F9820467F24CF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
Manifest number:          1A3B
Signing time:             Sat 05 Sep 2026 22:00:45 +0000
Manifest this update:     Sat 05 Sep 2026 22:00:45 +0000
Manifest next update:     Sun 06 Sep 2026 22:00:45 +0000
Files and hashes:         1: Gr2HNFebnqweKA8qaD2IyszWQgI.roa (hash: RegbgViGMcDrxCenuREVm4TdvOmQvNdOjtPl4uk6fVU=)
                          2: fVexU-7RELy9FNx-M_1H8C4v4HE.crl (hash: 8r8F24K2Kx/yiHW6FDQrxmRL0M2KQoAuCGiw8J7KnWU=)
                          3: wCh-pphXrFlnVedivymKoSdB-PQ.roa (hash: RWZ4wkHC1VRgI9WF5HxhbBtNjKgc6U0S8oWX6yGUEvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 19:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:73:96:9b:50:5e:b2:09:fe:23:f9:82:04:67:f2:4c:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d57b153eed110bcbd14dc7e33fd47f02e2fe071
        Validity
            Not Before: Sep  5 22:00:45 2026 GMT
            Not After : Sep  6 22:00:45 2026 GMT
        Subject: CN=47d1cdfe80e2f016f74c604b7c33de963f5e7073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:5e:b5:7d:d6:f2:df:52:18:d3:81:77:79:
                    dd:7f:0b:e5:e5:ac:3e:48:67:72:c4:eb:0b:54:5d:
                    77:b0:e1:f1:f6:e6:11:c6:e8:fe:10:4c:54:12:85:
                    f9:49:d4:4c:39:66:b9:27:24:13:ec:2e:25:15:7c:
                    72:82:c8:56:b4:48:28:94:52:00:ea:3d:2e:0c:b1:
                    d7:f7:a1:dd:47:31:8b:b0:fd:d0:0d:47:31:ce:94:
                    86:58:75:ac:1d:3c:8a:55:cf:ef:91:6a:c3:f6:4b:
                    64:72:33:03:97:0f:83:d8:02:70:cf:a1:bf:bd:f9:
                    21:36:97:c4:72:45:76:45:34:b8:1a:d3:67:da:b0:
                    e9:04:72:e5:78:b6:2c:91:88:9a:08:aa:db:74:f3:
                    1e:cf:c1:58:80:29:88:5c:eb:5f:12:d7:50:7d:b6:
                    33:4c:3c:8c:c8:68:f4:b9:6d:16:d2:8d:3f:3d:db:
                    81:37:95:5c:03:85:52:4d:3a:90:60:96:48:3e:3b:
                    fe:6d:97:50:8f:2c:cb:49:8b:d5:cc:2c:0f:5e:9b:
                    f6:7e:b6:af:92:92:7f:19:86:e0:c3:50:3e:fa:26:
                    57:02:c0:fb:ac:42:80:bb:21:ec:58:d8:2d:ed:b2:
                    20:74:70:93:95:ab:7b:fd:5e:a6:ed:4c:20:a7:f8:
                    ac:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D1:CD:FE:80:E2:F0:16:F7:4C:60:4B:7C:33:DE:96:3F:5E:70:73
            X509v3 Authority Key Identifier:
                keyid:7D:57:B1:53:EE:D1:10:BC:BD:14:DC:7E:33:FD:47:F0:2E:2F:E0:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVexU-7RELy9FNx-M_1H8C4v4HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a8d6d8-d2a5-4af2-bb44-0807091aa77d/1/fVexU-7RELy9FNx-M_1H8C4v4HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:2a:df:73:b9:76:36:73:99:61:be:07:00:8d:1d:55:9b:b3:
         57:5d:39:5d:10:ac:fc:79:5f:a7:85:a2:41:db:75:7b:d3:aa:
         fa:87:01:60:d8:3b:03:e5:19:c7:51:b6:a0:ca:d1:1e:53:fb:
         f0:27:e6:bb:75:fa:b6:5a:22:5f:e6:84:9c:62:07:30:7d:cf:
         08:73:ff:79:8b:d3:56:0b:10:ca:49:85:19:bf:13:4d:5c:0d:
         a3:5e:c7:5e:3d:88:71:39:de:03:f2:19:35:25:c4:c8:09:68:
         d9:a8:98:30:ab:42:7c:8a:58:b7:61:de:5a:80:b2:0e:d6:34:
         ec:cf:7d:93:67:37:23:61:f3:56:d6:ee:d6:ee:72:3b:a3:0c:
         9c:8b:9c:f6:a9:30:59:70:20:55:0a:12:c8:97:13:d4:ff:75:
         cc:88:29:68:28:a0:37:09:f2:bd:03:f6:70:09:3e:96:c9:34:
         9c:eb:c3:15:ac:28:8b:e6:e0:97:3a:b3:8d:16:22:f4:44:c3:
         e9:df:14:66:89:fb:a5:62:41:f6:8e:90:5e:c6:de:f2:84:4c:
         e8:9c:61:36:7f:92:79:fc:af:c2:93:68:9d:ef:51:63:65:e5:
         68:99:96:aa:c6:5c:e1:bf:c6:c1:89:a7:f5:b5:fc:82:ff:09:
         cd:d7:ad:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 02:08:09 2026 by rpki-client