Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
File:                     fm4uaWbgarJcoOHaZuHj1kJIs6E.mft (raw, json)
Hash identifier:          4jJ0TCD1VOvt8M1W7wAiPnFcrgXlYaE5CF55XvQucJw=
Subject key identifier:   33:79:C8:FA:F5:20:C9:96:EF:1B:21:36:D0:EA:D8:C9:C7:E0:A7:F2
Authority key identifier: 7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1
Certificate issuer:       /CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
Certificate serial:       01A0DACD67603A516883FFDEA823916D115E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
Manifest number:          0602
Signing time:             Fri 25 Sep 2026 23:01:29 +0000
Manifest this update:     Fri 25 Sep 2026 23:01:29 +0000
Manifest next update:     Sat 26 Sep 2026 23:01:29 +0000
Files and hashes:         1: SkLvZ5Dbszu5Ja6SZaZJdMQE4pc.roa (hash: 9kMmjyII7OTjyzZhQiyLV/xT9EZKQBXnIUw2KfgEoV8=)
                          2: a7dc7sTXBG9g6baqXZ5n-zFcW2U.roa (hash: NAb+NkDlWJd04gSzwtykl0+s9KlRgbw76dF4Fu82HXg=)
                          3: fm4uaWbgarJcoOHaZuHj1kJIs6E.crl (hash: tGxRBtIiNuOjyLDZKJt0fk84PeALBVgsoCQLSNQl94E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cd:67:60:3a:51:68:83:ff:de:a8:23:91:6d:11:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6e2e6966e06ab25ca0e1da66e1e3d64248b3a1
        Validity
            Not Before: Sep 25 23:01:29 2026 GMT
            Not After : Sep 26 23:01:29 2026 GMT
        Subject: CN=3379c8faf520c996ef1b2136d0ead8c9c7e0a7f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:31:5a:f3:9d:33:35:58:b8:b0:db:c1:75:2c:
                    47:d3:f9:a7:9f:31:f7:22:24:b2:a4:0b:50:c5:7c:
                    fb:a2:64:f4:80:d2:c9:7b:61:14:c5:14:0c:70:22:
                    86:fb:d2:67:fa:32:68:dd:4c:55:5a:a8:4f:5b:08:
                    1d:cd:c7:c1:81:0d:06:1c:41:6f:73:0d:cd:4e:c4:
                    4c:8a:0e:aa:50:4f:0f:11:ac:2f:a6:9c:0a:ac:68:
                    ce:d6:70:fc:f9:5b:a2:35:40:7e:c2:17:61:1e:6e:
                    4a:af:aa:a0:d9:f9:ba:e5:a0:56:68:96:79:1b:b3:
                    0b:76:05:d4:f5:07:4f:83:a7:5c:3f:7d:18:74:d0:
                    35:5c:8b:b7:4d:0e:c0:54:be:40:a7:29:a6:a9:2b:
                    59:37:6a:9a:08:7a:12:50:7c:d7:ec:bf:f2:49:69:
                    4d:16:e0:0a:83:19:42:13:04:5d:ca:63:3c:94:e8:
                    d2:2c:9a:7d:62:62:62:3e:28:b5:71:e6:31:4c:0b:
                    23:1f:4e:49:40:a3:42:58:01:24:b3:43:23:52:64:
                    21:14:c7:82:e8:37:95:fd:12:94:f9:65:bb:d4:25:
                    0d:19:2d:f9:46:57:72:7e:00:9f:46:1d:d3:2b:ac:
                    02:08:f9:b1:c8:7f:ea:2f:9f:95:e9:1c:5b:53:21:
                    4c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:79:C8:FA:F5:20:C9:96:EF:1B:21:36:D0:EA:D8:C9:C7:E0:A7:F2
            X509v3 Authority Key Identifier:
                keyid:7E:6E:2E:69:66:E0:6A:B2:5C:A0:E1:DA:66:E1:E3:D6:42:48:B3:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm4uaWbgarJcoOHaZuHj1kJIs6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/a7538a-69be-4fbe-97e1-87d97e2aadc4/1/fm4uaWbgarJcoOHaZuHj1kJIs6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:44:54:d4:a8:e4:24:82:1e:17:dc:ef:21:e5:36:06:db:ff:
         de:3e:4d:ec:96:ce:ed:dc:47:9f:31:72:fe:54:a5:f7:a3:0d:
         6d:cb:7d:e4:36:ac:74:f2:ef:57:60:b9:74:3c:ee:8c:6a:cb:
         de:bc:74:dc:fd:7a:b1:1a:05:eb:db:e8:4c:26:ca:e9:9e:da:
         ec:78:6d:24:9e:2c:2a:09:c5:04:a1:c9:68:e9:7c:6d:8d:db:
         41:ad:97:7f:f9:82:eb:af:b1:ba:f4:bb:1d:e4:dc:c4:41:81:
         d6:22:b0:23:5f:4a:32:8f:a7:c8:02:6f:94:bf:eb:18:c2:cf:
         5f:6b:ee:89:2d:17:7d:a4:fa:ca:52:22:47:43:d1:c6:09:fd:
         c6:2c:cc:50:19:5a:d2:77:45:0c:6e:ea:87:ed:87:2f:a2:37:
         e3:f9:dd:82:9f:38:a9:57:db:df:72:72:fb:1e:ca:a7:a5:10:
         2e:18:c3:45:13:53:29:6e:c6:b2:bf:ff:f1:56:1f:ec:77:e7:
         49:1a:2b:73:8b:02:f2:07:6c:04:cf:54:0b:e6:2c:b9:49:c6:
         c5:81:cd:6d:91:2d:91:9c:c0:1d:a8:38:42:af:9c:de:a8:a7:
         82:df:7a:29:e8:85:ba:ca:a1:ee:9d:3a:1c:5f:13:fc:0a:34:
         44:90:bb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:56:08 2026 by rpki-client