Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
File:                     fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft (raw, json)
Hash identifier:          WTVuoozS3/iOX+rD7Hq0Wef3afaJvcu/Y4BGKbTSg50=
Subject key identifier:   C4:86:07:5E:21:8F:4A:48:C3:F8:37:B1:3D:FE:41:54:38:C1:A0:7C
Authority key identifier: 7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24
Certificate issuer:       /CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
Certificate serial:       01A1A8CBCDD0188F34CD26280B71F57C952A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
Manifest number:          1407
Signing time:             Wed 04 Nov 2026 23:01:31 +0000
Manifest this update:     Wed 04 Nov 2026 23:01:31 +0000
Manifest next update:     Thu 05 Nov 2026 23:01:31 +0000
Files and hashes:         1: fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl (hash: ejaguc3qd17+zdOltMroPYHM678zqz4IyvsvxhTLi+8=)
                          2: qoI8F0lbOVIzl_Chk1fw1atLi5k.asa (hash: N3/9TZTJb11e6EEEvsOn0LqdBXjtO+tXCNFld50vBf8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 17:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a8:cb:cd:d0:18:8f:34:cd:26:28:0b:71:f5:7c:95:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d45fbffd62fe24e26339193ad9a6c318b5dbb24
        Validity
            Not Before: Nov  4 23:01:31 2026 GMT
            Not After : Nov  5 23:01:31 2026 GMT
        Subject: CN=c486075e218f4a48c3f837b13dfe415438c1a07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c3:15:90:18:30:f3:31:97:58:4f:46:85:8a:
                    4a:3d:23:b8:1d:bc:8a:d4:fb:f6:c5:38:b9:33:ad:
                    7d:40:f0:2c:27:e7:fb:70:4d:96:0f:98:f1:89:27:
                    2e:57:5f:dc:b9:e8:a1:84:86:9a:62:ed:15:a6:c4:
                    be:35:bf:3a:07:53:0f:06:ce:46:8c:26:88:1d:ff:
                    26:0a:e6:38:5c:c9:9b:a7:3d:1f:58:3e:2f:be:1e:
                    b9:ba:80:ec:3e:53:26:e2:36:99:98:94:1f:23:15:
                    2e:58:c0:c9:0f:12:13:66:39:51:d8:22:d1:56:33:
                    95:37:ec:93:a5:9c:e3:aa:7a:fd:b1:d8:e2:9b:6c:
                    ec:e3:be:b3:7f:50:f5:47:af:4d:30:da:6f:5d:5a:
                    44:0c:d6:3f:64:f7:bd:10:c1:e2:5c:9c:8b:02:6c:
                    3e:f8:3f:cd:8c:d8:aa:d7:ee:d4:d8:17:ae:67:cc:
                    57:84:28:99:8e:14:1f:f7:09:10:c0:03:ff:33:27:
                    9b:00:df:e9:98:05:1c:8b:2b:70:3a:f9:fd:ad:37:
                    f4:40:2a:4d:1d:e6:c9:01:6a:40:3c:c0:48:ce:5f:
                    6f:24:1b:0b:85:c9:45:1c:ad:21:ff:e4:65:8d:e2:
                    8c:15:14:b9:93:d6:5a:7e:ba:82:79:c1:72:78:9e:
                    22:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:86:07:5E:21:8F:4A:48:C3:F8:37:B1:3D:FE:41:54:38:C1:A0:7C
            X509v3 Authority Key Identifier:
                keyid:7D:45:FB:FF:D6:2F:E2:4E:26:33:91:93:AD:9A:6C:31:8B:5D:BB:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/b2953a-d987-46b0-bea3-87a62e0fc48c/1/fUX7_9Yv4k4mM5GTrZpsMYtduyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:94:24:d0:e9:0a:53:9b:82:cd:46:dd:68:d4:8c:c8:91:45:
         a8:12:2d:ce:91:7e:c5:d2:03:1b:d1:70:2a:2e:5b:af:ea:d7:
         45:23:0c:f9:e0:cb:ce:33:db:f0:9c:34:5c:9b:ed:6f:b1:57:
         0f:9e:af:54:87:cf:00:2f:42:80:f5:54:fb:87:99:d2:26:05:
         03:f8:73:4f:0d:9a:d8:9f:43:97:f6:8b:67:43:0d:45:c3:9d:
         ae:7f:1f:6a:b4:11:a6:f9:f4:f2:7a:2d:4f:e2:18:8f:d0:0b:
         95:c2:44:a8:70:40:7e:92:07:50:3c:03:42:8b:52:81:96:8c:
         21:25:a0:f7:18:a0:a7:c9:63:dc:58:cd:07:88:61:0f:c8:ec:
         5e:af:c0:16:da:3f:97:a7:62:92:e6:4c:dd:25:72:b1:ef:65:
         fa:2e:e7:c9:fc:02:c4:a2:a3:e7:1a:c3:d5:a0:6a:21:12:5f:
         d6:69:8b:08:40:f9:f4:fa:02:ad:cc:52:f8:d1:42:a7:8e:f0:
         dc:28:52:de:15:41:3b:88:01:f1:e5:2f:9f:40:0a:5b:ef:41:
         8f:2a:7a:a6:fc:93:0d:9c:72:32:03:66:76:17:a7:59:3e:da:
         f2:b9:ba:fb:31:0c:69:42:82:3e:69:a3:bc:f0:2f:58:6b:5d:
         22:bd:0b:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 03:50:34 2026 by rpki-client