Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
File:                     _43V_kF56L2ihTJWGRn20Hh3xj0.mft (raw, json)
Hash identifier:          Zv/ws0oiqTQkCCjz5D37286lv8FyXGLpZIZW/aB/TeE=
Subject key identifier:   63:AB:60:F9:76:2F:A2:A0:A4:39:E7:E6:35:BD:9A:30:C4:87:34:9C
Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D
Certificate issuer:       /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
Certificate serial:       01A0C93473CD6DCE5E70D99F4F99C8AFC5B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
Manifest number:          0B25
Signing time:             Tue 22 Sep 2026 13:00:52 +0000
Manifest this update:     Tue 22 Sep 2026 13:00:52 +0000
Manifest next update:     Wed 23 Sep 2026 13:00:52 +0000
Files and hashes:         1: 3DdHsX6it2ap4y_VnsjWCiY07Yo.roa (hash: x9mgWA78JqU1sZIpmaNa31HOdxWPBMoH6TxC+AtVICA=)
                          2: 4gEhyOVffsgwNNWqQs_-s-LzQ50.roa (hash: SblERstdmAf0RnwlhfIldFcWcVQTo13MQsVVbWWnSUI=)
                          3: LyZiTz1VH8kyF5AmjQaEjp0W6sE.roa (hash: AelnLJhdvd0PiZ/B/iw8zmXPaSYCUu42XLVsyGcWPKo=)
                          4: WeKOa0H0czOL8IIE6VOIs9H9HXM.roa (hash: HnR5cSodno/i5GR28495C4j2bGZUas8Sx3TSjsOhefE=)
                          5: _43V_kF56L2ihTJWGRn20Hh3xj0.crl (hash: RA21il1av7fZQXqwixVcxSQNa+ocg53Rp/H8DrOYEvg=)
                          6: p35C9ZV6N39esxEauWzz7rGEtFo.roa (hash: RDjo5E1buUUe1K1+aCg93KkPTbVXh8Coo56z6qS5TJM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:34:73:cd:6d:ce:5e:70:d9:9f:4f:99:c8:af:c5:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d
        Validity
            Not Before: Sep 22 13:00:52 2026 GMT
            Not After : Sep 23 13:00:52 2026 GMT
        Subject: CN=63ab60f9762fa2a0a439e7e635bd9a30c487349c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b3:74:b3:4b:65:4a:2d:81:76:50:72:4f:5f:
                    68:4f:a9:cb:f5:a3:60:a3:0f:62:c7:dd:a0:74:5d:
                    c2:60:9a:05:df:52:33:f2:e2:01:45:91:e3:ca:2c:
                    61:58:52:6a:e6:16:57:fa:08:e0:45:f7:c9:e7:e3:
                    05:39:51:38:b8:70:82:26:f7:7f:f2:82:40:4e:bd:
                    ff:5c:51:6d:dd:6e:c6:3d:1f:d8:2f:54:b5:72:cd:
                    fe:21:ed:d8:c6:b0:76:11:15:74:f0:76:1b:c6:fd:
                    15:ac:7b:35:43:a2:6d:f7:f0:d7:32:0b:ad:cb:ab:
                    96:e3:2a:ec:b6:99:97:87:81:8a:4d:45:b4:a8:9d:
                    dd:f3:04:6a:3b:e6:a2:5e:b2:16:74:03:fa:f1:af:
                    f6:33:b0:22:4b:f1:97:09:de:68:bf:4a:5a:02:15:
                    61:c2:79:f6:bf:56:3f:8f:33:33:8f:73:b2:ed:ed:
                    8f:f3:f7:b8:46:19:2e:87:4e:5a:3e:ad:2e:d8:73:
                    a6:e3:c9:60:9d:08:68:0b:47:4a:b4:61:77:fb:86:
                    98:5e:7b:d8:17:05:4e:a5:41:bd:dd:e0:6c:e2:bd:
                    94:66:c0:2c:81:66:ae:e7:b7:8f:5a:3e:ac:5d:47:
                    84:cb:f5:a9:44:b9:bc:b0:25:ac:b0:0b:28:45:38:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:AB:60:F9:76:2F:A2:A0:A4:39:E7:E6:35:BD:9A:30:C4:87:34:9C
            X509v3 Authority Key Identifier:
                keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:95:bd:44:65:a8:e4:c2:13:07:a2:9a:66:30:61:d5:27:2f:
         c9:ec:37:3c:4f:b9:8b:df:d7:c0:2c:01:9a:2b:0d:43:c9:e1:
         21:76:09:49:b8:9d:82:ca:a7:61:53:34:d2:99:31:f2:12:8f:
         cb:72:8b:68:12:96:6a:67:63:44:6f:0c:a3:7b:49:da:55:34:
         6b:cc:e9:15:d7:11:fb:a2:34:70:85:f3:4b:bf:fa:75:35:2c:
         55:3a:74:d7:18:f1:1c:c9:0b:e4:96:f0:6c:d9:36:7d:d4:11:
         62:62:ec:33:71:a7:32:cf:4e:17:b0:f5:b7:5c:a1:ec:4c:1e:
         1f:de:17:71:c7:3f:2b:53:62:ea:a7:a1:84:94:ff:ee:9f:64:
         87:9b:cf:4b:b2:b4:40:be:e6:ff:e7:77:0e:66:f1:a5:e2:de:
         74:93:76:bf:c6:9e:5f:03:dc:45:fa:4d:98:58:84:fb:78:34:
         dd:8b:54:60:cd:d8:ad:cf:66:f4:8a:e9:b1:26:0d:17:3f:29:
         f5:d0:6a:b5:d9:e2:3a:c1:b6:34:71:cf:f3:9f:04:4c:9b:5d:
         b8:ed:a8:33:cb:de:2d:37:05:fe:e1:c8:76:60:1c:27:e3:f6:
         a2:54:c9:d7:fc:2d:b6:55:b6:c5:ca:8f:a3:38:61:c4:1c:9c:
         79:66:0f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:10:37 2026 by rpki-client