Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
File:                     rrcMp77FOQL1z1eeuT7bDZKi-0M.mft (raw, json)
Hash identifier:          VJDok+XsM3MGAavG1K5el0vFGfdxt+PPfnIwhbDJ/Tg=
Subject key identifier:   68:3E:62:A2:FE:56:AD:7D:DC:36:52:35:47:81:7C:DF:70:DA:05:6B
Authority key identifier: AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43
Certificate issuer:       /CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43
Certificate serial:       01A0C858110872F72D904F55A186131D023E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
Manifest number:          02FC
Signing time:             Tue 22 Sep 2026 09:00:09 +0000
Manifest this update:     Tue 22 Sep 2026 09:00:09 +0000
Manifest next update:     Wed 23 Sep 2026 09:00:09 +0000
Files and hashes:         1: qZ7w8eltwpusgDZDYcyCDOLAgd4.roa (hash: tsflvwgXfYhAOmry/PKXKjcvkUzgCka5jl0JMjyOtdE=)
                          2: rrcMp77FOQL1z1eeuT7bDZKi-0M.crl (hash: hbXj6jGmJzxrwX7URpHeHGk5g9lhpnWeLhHvqjPnoxE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 09:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:58:11:08:72:f7:2d:90:4f:55:a1:86:13:1d:02:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb70ca7bec53902f5cf579eb93edb0d92a2fb43
        Validity
            Not Before: Sep 22 09:00:09 2026 GMT
            Not After : Sep 23 09:00:09 2026 GMT
        Subject: CN=683e62a2fe56ad7ddc36523547817cdf70da056b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ca:9b:f8:1f:f1:53:bb:87:7b:4b:c0:21:d2:
                    d7:af:5f:69:c8:cc:1f:cd:92:6d:0b:cd:7e:0f:46:
                    7f:bf:69:f5:3d:5d:02:bd:80:f4:ed:6c:71:a8:b2:
                    e7:e1:0a:87:80:13:d4:f1:68:33:6e:50:6e:6c:80:
                    37:d1:d3:e3:b6:9c:6e:21:7e:0d:b0:b9:ae:68:a4:
                    63:4a:14:4f:bf:39:e4:a6:d5:9f:03:ed:dd:03:db:
                    22:f5:87:19:54:52:83:bc:92:24:92:71:db:f8:69:
                    45:ed:9a:26:ce:97:4d:ae:cd:72:3f:b2:dd:38:86:
                    c8:59:73:29:43:e2:10:22:46:b5:15:24:59:e7:d3:
                    48:90:ea:a3:24:5f:e6:6a:ab:f1:3f:55:8f:58:d9:
                    d1:df:a6:b5:77:7d:d4:17:28:be:03:af:0e:f4:58:
                    94:db:fe:31:77:21:42:8c:82:77:6e:1a:dd:9d:df:
                    19:57:c0:2d:92:80:4c:62:19:2a:6d:67:95:b4:07:
                    88:50:5d:5b:c8:ac:b4:d2:5d:fc:54:13:c4:1f:b1:
                    dd:4d:7b:43:c7:15:1c:a4:ee:cb:51:85:40:85:34:
                    68:6a:96:2a:af:64:6e:7e:5e:1e:03:8a:06:b0:42:
                    7e:a6:aa:04:e9:44:81:4b:0f:cd:57:c6:2d:ba:cc:
                    18:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:3E:62:A2:FE:56:AD:7D:DC:36:52:35:47:81:7C:DF:70:DA:05:6B
            X509v3 Authority Key Identifier:
                keyid:AE:B7:0C:A7:BE:C5:39:02:F5:CF:57:9E:B9:3E:DB:0D:92:A2:FB:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrcMp77FOQL1z1eeuT7bDZKi-0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/716323-a9af-43d5-9a8b-91db2345f436/1/rrcMp77FOQL1z1eeuT7bDZKi-0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cb:82:3f:fa:b8:59:fd:5d:6a:2e:58:38:53:ed:56:1f:a4:
         ce:c3:9c:04:70:f6:9f:dd:7d:1a:1f:ed:1f:4a:a4:32:6f:ae:
         a6:d7:e4:45:8f:7d:23:e3:da:3d:51:4b:f2:a7:ee:67:4c:6d:
         04:7b:42:38:76:bf:df:21:37:8f:83:a4:45:e8:46:d3:fb:12:
         2f:7d:1e:30:48:77:b7:0a:bf:03:59:30:09:74:0d:9f:5f:1d:
         ef:6a:ac:91:12:fd:c6:7a:6e:b3:66:3a:76:21:e8:37:88:5c:
         90:ce:55:11:d4:ba:e9:fc:46:ac:e7:63:1e:29:18:25:b8:43:
         de:04:d1:c9:9d:00:1f:a5:99:98:49:6c:23:e3:43:e4:79:4f:
         ca:4a:91:ca:a3:96:aa:f8:66:54:35:89:75:d2:0a:ea:09:0d:
         15:34:8c:4b:a5:ef:86:3b:0c:2a:94:7b:76:89:f8:37:ba:5f:
         42:ec:a7:c6:d0:1d:47:35:18:53:34:e4:65:85:d8:aa:4d:90:
         f2:46:02:cb:50:cc:63:60:40:85:1f:97:7f:66:09:a8:50:9e:
         f6:3e:40:17:bb:9a:22:51:e3:a2:4f:67:06:19:15:f4:0f:ae:
         98:1e:9a:94:45:92:04:df:3d:04:d7:e7:aa:12:02:a8:76:4a:
         17:5d:dd:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:19:50 2026 by rpki-client