Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
File:                     iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft (raw, json)
Hash identifier:          y8Mgiu3rso+D7T6hHtKGZhoRCIpUtFMx+cghAYgU9PE=
Subject key identifier:   08:26:05:63:5A:79:7D:5A:DF:10:30:EF:15:10:9B:7C:71:F1:EE:F8
Authority key identifier: 88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA
Certificate issuer:       /CN=884b5e16490b9a68d09fbcb45574350000149afa
Certificate serial:       01A09A6D63B4DC5C4EAD474E177568A8120E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
Manifest number:          1A4F
Signing time:             Sun 13 Sep 2026 11:00:55 +0000
Manifest this update:     Sun 13 Sep 2026 11:00:55 +0000
Manifest next update:     Mon 14 Sep 2026 11:00:55 +0000
Files and hashes:         1: 6q90Ylcr_bTouVL-1y_wxNRsyCw.roa (hash: mNmL0Z1TdYTnC1LviNwI9MUlQwclOYrlF6P0bTcPytQ=)
                          2: iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl (hash: ujLhQOA75vrt3jz6d9BrpbsQ0cvw8JSxZ5t68nOwmEk=)
                          3: js6Pq6wBoWvKTyUwxz0skM29Qco.roa (hash: Y4NrXbk6igcwSNPM65V1DQWV2gXoGtbHhjuHToI9XM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 14 Sep 2026 05:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:9a:6d:63:b4:dc:5c:4e:ad:47:4e:17:75:68:a8:12:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884b5e16490b9a68d09fbcb45574350000149afa
        Validity
            Not Before: Sep 13 11:00:55 2026 GMT
            Not After : Sep 14 11:00:55 2026 GMT
        Subject: CN=082605635a797d5adf1030ef15109b7c71f1eef8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f9:a7:1c:cb:33:28:f9:31:5b:33:09:3d:e4:
                    6e:af:c1:19:06:2a:a7:34:20:7b:4c:1b:33:29:3a:
                    cd:6b:62:c4:65:6e:5c:7d:a3:59:69:c8:97:86:4f:
                    c0:ef:61:a2:04:86:84:07:cd:47:8e:ae:b7:ed:c7:
                    e4:21:9f:0f:2b:30:05:ad:fb:0c:e6:6a:fb:bb:90:
                    c1:83:c8:2c:df:83:b1:50:fd:83:68:a8:1a:b4:79:
                    8c:ac:f2:7c:2f:7a:16:54:44:b2:69:46:70:f7:67:
                    56:f1:f5:62:76:32:bf:c2:1d:5e:90:b2:ac:90:02:
                    80:c9:21:39:10:ae:32:f8:48:63:f7:71:83:5f:29:
                    5f:e0:e1:fb:cd:a0:a7:b4:51:43:5e:bb:d4:d9:bc:
                    eb:19:21:8c:30:ba:0f:91:0c:8f:21:ef:9c:3f:5b:
                    cf:1f:39:90:55:0c:ea:83:be:ad:35:4e:b6:f1:67:
                    cd:ac:83:fa:84:36:50:44:7b:fd:b2:9f:f0:f8:6a:
                    56:f0:06:2a:2d:d4:c2:53:2b:aa:80:1b:e0:52:aa:
                    3f:96:8e:e4:84:4b:15:f8:bb:eb:d9:b9:7d:04:9c:
                    10:b7:8d:3b:70:a3:91:29:22:44:f2:f4:9f:25:54:
                    86:83:9a:01:17:0b:3b:af:7e:50:c4:0b:ef:fb:40:
                    87:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:26:05:63:5A:79:7D:5A:DF:10:30:EF:15:10:9B:7C:71:F1:EE:F8
            X509v3 Authority Key Identifier:
                keyid:88:4B:5E:16:49:0B:9A:68:D0:9F:BC:B4:55:74:35:00:00:14:9A:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iEteFkkLmmjQn7y0VXQ1AAAUmvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/07b7f7-c41d-4917-b978-ef2d53b5a34d/1/iEteFkkLmmjQn7y0VXQ1AAAUmvo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:94:06:31:cc:e1:eb:20:21:b9:0e:ad:6b:55:a8:16:91:41:
         35:8e:96:47:28:db:93:d4:5b:46:0a:74:5c:56:60:66:2c:5f:
         e5:43:d8:3a:18:1b:72:80:4d:ce:58:4c:d8:42:d8:96:06:7e:
         96:92:97:bb:bd:e6:cc:e8:a8:ee:4e:b4:47:be:e8:78:0c:7a:
         78:62:20:b3:a3:c9:29:be:ff:55:3c:ba:e1:3c:2f:d9:45:92:
         64:af:ca:6b:06:1c:a6:0f:9b:6b:0d:b0:b2:85:ad:2f:05:25:
         cc:4d:81:28:10:06:66:18:17:88:22:90:d8:53:c2:76:c9:b2:
         38:f9:3e:01:74:01:41:f2:d1:be:b2:ea:93:af:83:07:c4:b9:
         41:f7:ca:62:1d:f9:1c:3a:3e:5f:f1:bd:a1:a9:c6:4f:4a:48:
         6a:9c:79:a7:e9:dd:e6:6a:33:8b:e4:e9:99:4d:ec:c9:29:22:
         e7:2e:cd:d6:6b:99:7c:35:f3:18:98:f7:6e:8a:d2:04:ce:0d:
         a0:ab:fe:3d:a0:07:10:fe:84:8e:04:8c:2a:bf:95:ac:6c:e4:
         41:a5:84:76:69:15:6d:3a:27:dd:2b:04:09:04:c1:70:09:55:
         29:6c:38:3f:9e:15:09:57:dc:24:8a:b0:48:ea:cb:7e:35:50:
         44:e9:65:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 16:11:19 2026 by rpki-client