Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
File:                     F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft (raw, json)
Hash identifier:          Cp5ct92q7a/XwcMCmgYEZFD9GjNH7THYx2+vo1UimII=
Subject key identifier:   D7:67:21:4F:36:3F:C7:7F:56:DA:73:C1:33:57:4D:F7:B1:36:F7:99
Authority key identifier: 17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21
Certificate issuer:       /CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
Certificate serial:       01A12D3255944E865AE9759A50677558AE11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
Manifest number:          0D16
Signing time:             Sun 11 Oct 2026 23:00:35 +0000
Manifest this update:     Sun 11 Oct 2026 23:00:35 +0000
Manifest next update:     Mon 12 Oct 2026 23:00:35 +0000
Files and hashes:         1: 1-2UtBiTjHsLQddCqGP3gVri-xW0.roa (hash: DJE2DUvAsy++YyvCOr1N7VjrxiOrJBdKXmpjw8gEGfk=)
                          2: 3Syacw0kA1-ynTLjhAFHVC60Ux8.roa (hash: U3SW2ZOoHktaoXakRfEn1+6KwZhVhuD7PQXG5yVZEPA=)
                          3: Esustr-nKce0GYWSsdcq1S7FWqk.roa (hash: 2zstjXpc+hHGR68Drzr0jQj4a47IKNLiUrHDnn0u3wk=)
                          4: F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl (hash: qlxJHGBH3Yf4ukJ6hc0WA6mt5PkINNTV89cpetTShhM=)
                          5: GnkphrOjuxTcnLnVByZAmcLPCW8.roa (hash: JM+qW4wdjiqLdb+xSRmHLF9aUafcLcAwlui6gPABGZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 22:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2d:32:55:94:4e:86:5a:e9:75:9a:50:67:75:58:ae:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17bbd60374bc23ed07d01c24e7cfd9178b8fed21
        Validity
            Not Before: Oct 11 23:00:35 2026 GMT
            Not After : Oct 12 23:00:35 2026 GMT
        Subject: CN=d767214f363fc77f56da73c133574df7b136f799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7e:2e:40:3e:11:f9:16:0c:de:e0:8e:aa:81:
                    fb:a8:d2:5b:47:74:10:f3:55:76:11:d0:f6:66:63:
                    30:d7:04:d0:bc:2c:00:14:e9:5f:b7:65:ce:ff:50:
                    b3:36:19:48:6f:ce:79:49:02:b5:2b:0f:7d:2c:80:
                    f0:0d:cb:aa:50:df:56:12:29:4a:03:d2:6e:39:0f:
                    b5:c4:97:32:47:68:33:ba:d0:0d:bb:08:5f:f4:41:
                    1b:8d:4e:dc:c6:80:7e:1b:21:55:fb:63:d3:ed:62:
                    e8:22:43:18:72:76:10:fe:55:d4:76:e9:78:65:9d:
                    a9:8c:97:85:d6:6c:56:ae:b7:5f:f0:73:2f:bb:30:
                    9a:1c:bf:7e:d8:c4:bc:cc:43:7f:70:85:3e:7e:ef:
                    76:48:0b:fd:d1:fa:aa:b4:1f:e0:3b:fd:24:05:c1:
                    4a:8e:f3:da:a5:8f:ee:23:9f:3b:48:57:2f:87:93:
                    c2:04:ad:1a:d1:9e:94:be:36:90:15:ca:a9:f8:2f:
                    9d:c9:27:b6:1a:5c:47:13:a2:69:6a:36:4e:92:2e:
                    d2:e8:32:9b:63:ab:f3:52:a2:2b:84:0c:de:a0:e6:
                    6f:79:30:9f:9c:25:26:e7:90:64:fa:24:1c:39:3d:
                    a7:cb:0d:f6:56:8d:01:ed:cb:b1:a9:f4:da:3c:56:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:67:21:4F:36:3F:C7:7F:56:DA:73:C1:33:57:4D:F7:B1:36:F7:99
            X509v3 Authority Key Identifier:
                keyid:17:BB:D6:03:74:BC:23:ED:07:D0:1C:24:E7:CF:D9:17:8B:8F:ED:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5b73d7-f1f5-4e8f-a4b6-cdf89683540e/1/F7vWA3S8I-0H0Bwk58_ZF4uP7SE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:b9:6d:73:eb:f1:be:a3:d0:a0:06:07:39:c7:77:9b:5a:14:
         a7:ee:c9:be:45:2e:50:05:96:53:48:97:41:10:67:b0:1c:1a:
         78:9d:3f:6b:89:12:78:e6:e0:49:74:23:4d:b9:f5:47:16:be:
         61:8b:72:0a:56:21:37:48:fe:f9:a8:7d:57:16:81:9c:19:2f:
         13:19:15:e0:c9:4f:ea:01:48:85:42:be:c3:73:af:29:50:8d:
         c7:50:eb:fe:75:24:57:80:88:68:26:43:d1:22:f9:00:09:10:
         7d:bc:9b:07:bc:5f:aa:7e:52:a0:cc:74:63:a6:10:5d:f2:10:
         7f:05:7b:56:9e:aa:99:3c:cb:8c:fb:b9:1a:f1:2e:cd:2b:e7:
         cb:e4:d3:0f:fd:f0:b1:49:49:55:b0:a0:07:27:8b:d3:b3:e4:
         ea:b6:6f:d3:2e:fb:bb:65:e5:3f:fb:e5:f1:8f:d1:7b:db:be:
         32:d1:2e:9a:9c:cb:b1:ea:ca:0d:01:ed:20:d2:9d:0f:0b:6c:
         9e:a4:97:b7:d6:56:44:45:f3:ce:1c:16:ff:d6:72:d8:b6:04:
         e0:cf:cb:cc:64:ad:c5:c3:de:85:fc:00:ef:21:37:a9:52:56:
         0b:a0:1d:ba:d2:11:2b:18:4b:b3:f4:11:99:1c:41:ac:bb:8e:
         e5:64:31:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:12:35 2026 by rpki-client