Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
File:                     rPerPxqT5xTzB0oF2G_M4iBjBag.mft (raw, json)
Hash identifier:          zoE8bXHVBxQGbzvQOt9Y8o5H47zmEQqgUC1f7yB61J4=
Subject key identifier:   FC:82:74:DB:47:6A:68:51:97:D6:DA:68:D9:D2:DC:FD:9D:39:42:99
Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
Certificate issuer:       /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Certificate serial:       01A0B086E0D6EDD5ACDB97AE00A19B3F1FD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
Manifest number:          0D41
Signing time:             Thu 17 Sep 2026 18:00:24 +0000
Manifest this update:     Thu 17 Sep 2026 18:00:24 +0000
Manifest next update:     Fri 18 Sep 2026 18:00:24 +0000
Files and hashes:         1: 6iAprnV5kqIXyXcpRUbGQgO9SaM.roa (hash: pdyKwoYg0ynw9WDHpbBigS85Bj0l6yeKu12lhKM9YfA=)
                          2: rPerPxqT5xTzB0oF2G_M4iBjBag.crl (hash: Er/mhLCyUOaBfoT9rKRzvgeNZdGC8yyUl8DGAhazg4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b0:86:e0:d6:ed:d5:ac:db:97:ae:00:a1:9b:3f:1f:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
        Validity
            Not Before: Sep 17 18:00:24 2026 GMT
            Not After : Sep 18 18:00:24 2026 GMT
        Subject: CN=fc8274db476a685197d6da68d9d2dcfd9d394299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:72:c2:75:17:cd:b5:c1:61:20:25:fb:5c:c8:
                    12:c6:95:14:61:39:5b:dd:93:96:0c:7b:bf:3c:e0:
                    ab:53:16:3a:23:d7:53:8a:5e:00:c2:84:62:0b:ad:
                    bc:1b:e4:a2:64:3c:57:ee:34:6b:0d:68:ad:50:b0:
                    2e:72:f0:71:06:6e:1f:8e:3f:8c:ea:a9:8c:1e:ce:
                    f0:fd:f0:00:2d:6d:d8:ae:d5:da:c1:33:24:c6:99:
                    52:fd:97:a7:b9:5d:25:a4:e8:b0:79:93:84:52:8c:
                    fe:06:5d:51:08:60:e3:f7:72:e4:53:99:00:49:f5:
                    60:01:32:c7:6a:bd:b0:a4:cf:e9:80:e0:9e:6f:08:
                    72:13:7c:3b:6c:66:55:f9:b7:bd:1d:3e:3c:1c:80:
                    a1:4f:58:02:b4:70:42:ac:ac:f6:ea:87:5c:f6:f3:
                    98:8d:1e:c9:f8:2a:17:2b:d3:5f:d5:51:9b:2b:b8:
                    32:c1:68:2e:7b:2e:40:9c:e7:66:bc:cc:67:b9:d3:
                    25:1e:51:28:0b:7a:c2:81:82:88:b1:bc:42:c9:3f:
                    1c:9e:57:c7:d7:d7:da:80:78:6f:b8:42:60:8c:b0:
                    bc:e2:b5:d2:39:b6:95:c8:e8:d5:45:50:38:7e:79:
                    34:f8:42:0d:50:cd:d6:2b:00:0e:0c:cd:f4:28:70:
                    7f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:82:74:DB:47:6A:68:51:97:D6:DA:68:D9:D2:DC:FD:9D:39:42:99
            X509v3 Authority Key Identifier:
                keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:fd:ff:f5:04:c7:fb:56:84:06:e3:aa:16:f5:ca:a0:c8:77:
         b5:f7:b8:43:6d:a6:42:17:4d:de:a1:9f:15:b6:9e:9a:60:9d:
         ab:d6:df:df:fc:a7:e3:e7:01:fb:f1:3a:8d:bb:f1:93:34:c1:
         76:e7:f8:2c:92:93:4e:5c:a3:ec:2f:cd:0b:b2:54:e3:ed:96:
         ce:dc:4e:41:00:4c:e7:8b:03:52:99:2e:4f:f3:53:ac:74:91:
         f3:f4:cb:52:1d:4c:79:da:52:cb:0c:cf:32:6c:98:1d:51:45:
         72:49:33:22:1c:ca:d1:de:47:a0:24:a6:53:42:ff:fd:2a:1c:
         6f:4a:39:6b:ec:bb:cd:2c:08:79:47:1a:7a:ab:f2:e2:54:0b:
         8c:9c:d0:79:71:71:ad:a4:42:80:14:93:67:02:3a:e9:32:a0:
         d8:fb:ee:2b:4f:bc:26:d0:98:34:3f:00:79:58:09:96:0f:87:
         1f:13:c5:3e:58:9d:69:e3:57:51:fe:b6:3c:65:77:cb:4f:8a:
         11:a3:4d:51:cc:62:63:30:02:ad:6b:59:9d:64:67:5e:e8:20:
         f4:72:ec:d3:5a:64:99:6a:92:52:08:3d:e2:4a:78:ec:5e:63:
         47:ac:e4:28:70:8b:0f:26:90:0e:44:7c:e9:67:58:a0:37:b3:
         da:45:62:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCwhuDW7dWs25euAKGbPx/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjdhYjNmMWE5M2U3MTRmMzA3NGEwNWQ4NmZjY2UyMjA2
MzA1YTgwHhcNMjYwOTE3MTgwMDI0WhcNMjYwOTE4MTgwMDI0WjAzMTEwLwYDVQQD
EyhmYzgyNzRkYjQ3NmE2ODUxOTdkNmRhNjhkOWQyZGNmZDlkMzk0Mjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nLCdRfNtcFhICX7XMgSxpUUYTlb
3ZOWDHu/POCrUxY6I9dTil4AwoRiC628G+SiZDxX7jRrDWitULAucvBxBm4fjj+M
6qmMHs7w/fAALW3YrtXawTMkxplS/ZenuV0lpOiweZOEUoz+Bl1RCGDj93LkU5kA
SfVgATLHar2wpM/pgOCebwhyE3w7bGZV+be9HT48HIChT1gCtHBCrKz26odc9vOY
jR7J+CoXK9Nf1VGbK7gywWguey5AnOdmvMxnudMlHlEoC3rCgYKIsbxCyT8cnlfH
19fagHhvuEJgjLC84rXSObaVyOjVRVA4fnk0+EINUM3WKwAODM30KHB/1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyCdNtHamhRl9baaNnS3P2dOUKZMB8GA1UdIwQY
MBaAFKz3qz8ak+cU8wdKBdhvzOIgYwWoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hMjFmMzQtODJmMi00MWM5LWI2MGMt
YWQ0M2NjZDdhYWU4LzEvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hMjFmMzQtODJmMi00MWM5LWI2MGMtYWQ0M2NjZDdhYWU4
LzEvclBlclB4cVQ1eFR6QjBvRjJHX000aUJqQmFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/3/9QTH
+1aEBuOqFvXKoMh3tfe4Q22mQhdN3qGfFbaemmCdq9bf3/yn4+cB+/E6jbvxkzTB
duf4LJKTTlyj7C/NC7JU4+2WztxOQQBM54sDUpkuT/NTrHSR8/TLUh1MedpSywzP
MmyYHVFFckkzIhzK0d5HoCSmU0L//Socb0o5a+y7zSwIeUcaeqvy4lQLjJzQeXFx
raRCgBSTZwI66TKg2PvuK0+8JtCYND8AeVgJlg+HHxPFPlidaeNXUf62PGV3y0+K
EaNNUcxiYzACrWtZnWRnXugg9HLs01pkmWqSUgg94kp47F5jR6zkKHCLDyaQDkR8
6WdYoDez2kViKg==
-----END CERTIFICATE-----
Generated at Fri Sep 18 03:25:52 2026 by rpki-client