Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
File:                     _w3fP-V3IgGv94wk6X-UTDgF_2s.mft (raw, json)
Hash identifier:          +2kb3JfMzBYAPGyhI16wXpBifJPcG7pyCsu/LlFy+Ig=
Subject key identifier:   79:0C:D7:C9:5F:20:75:63:1F:DF:14:A7:52:43:18:6E:6F:D1:60:95
Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
Certificate issuer:       /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Certificate serial:       01A0EB8A240DB2F8B7BEC1E9CC6FB2B92B49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
Manifest number:          08F7
Signing time:             Tue 29 Sep 2026 05:01:33 +0000
Manifest this update:     Tue 29 Sep 2026 05:01:33 +0000
Manifest next update:     Wed 30 Sep 2026 05:01:33 +0000
Files and hashes:         1: 62PT7sxdgGjHV3OVRPh7QUfGyJE.roa (hash: byTcXWsJhZ5Kbxnpg94vw37iP5ONtgL7nIpG2rEwMlc=)
                          2: G85Xi6LQh9YeTjxANf7Y_P92uAU.roa (hash: nfrcxJEREXgjydTZq0oYL3+pGSmL4O7eo8LJD41jFaA=)
                          3: Q_2dI4MAgteIfC8fliTVnwdDpEo.roa (hash: FeIbDHDY5bISxy8cTg5A5vpLXI7Ze/YbhEveF3uIwyw=)
                          4: _w3fP-V3IgGv94wk6X-UTDgF_2s.crl (hash: mFR+TuWAtWxGww5j2lxT4MsCFD7LdptUcOrpOAeQIhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:8a:24:0d:b2:f8:b7:be:c1:e9:cc:6f:b2:b9:2b:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
        Validity
            Not Before: Sep 29 05:01:33 2026 GMT
            Not After : Sep 30 05:01:33 2026 GMT
        Subject: CN=790cd7c95f2075631fdf14a75243186e6fd16095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:9d:1a:53:78:58:fa:4e:50:33:e7:9a:6e:
                    eb:fd:f9:5a:3b:32:a9:67:97:89:81:1a:16:d3:b9:
                    d1:d5:a7:61:ad:88:dc:e9:04:60:fe:4b:3a:d3:fb:
                    23:b7:47:fa:fe:94:10:a6:98:bb:1a:88:e8:85:5c:
                    9c:3f:95:f3:88:5a:eb:82:41:02:84:95:13:39:ea:
                    22:9e:a1:6f:f6:6e:e9:e9:9c:cb:ec:2e:c8:53:c4:
                    8b:8b:c1:d5:92:10:ab:d7:09:dd:6c:b2:66:b1:d0:
                    15:e0:a6:54:04:ba:7e:b0:35:55:7a:a2:a7:5c:b8:
                    8a:1f:13:40:fc:43:2b:25:75:d8:29:82:7f:a0:17:
                    47:09:d3:38:6d:3f:55:d0:76:0c:d5:ca:03:d9:91:
                    42:4b:70:e2:81:f6:b5:44:62:d6:97:04:94:af:cb:
                    d8:de:67:50:73:f8:9d:bd:e2:53:15:6c:66:57:55:
                    00:67:d2:fa:5a:3d:e1:31:14:49:10:f3:a2:cf:25:
                    c0:3c:5c:01:55:7d:d7:e4:99:34:36:db:c0:20:77:
                    5c:28:36:88:0d:3b:ce:13:47:a7:2b:0d:27:4c:f8:
                    3f:8d:68:55:61:45:1e:8e:23:85:94:b2:05:44:b9:
                    3f:29:5e:a5:0a:71:78:ef:ef:06:db:3c:ac:14:9a:
                    89:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0C:D7:C9:5F:20:75:63:1F:DF:14:A7:52:43:18:6E:6F:D1:60:95
            X509v3 Authority Key Identifier:
                keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ac:d9:35:c6:e0:35:84:7a:51:e9:9c:c9:13:f2:0e:5a:d1:
         04:af:a7:3a:24:a4:50:76:ee:20:b8:e0:19:d3:f3:93:a9:2b:
         2d:43:05:88:8a:0c:a3:e6:e1:bb:b8:e4:93:9a:2c:0e:b3:a5:
         01:81:a9:3d:3f:fe:83:5c:c0:1c:d4:ed:f6:bf:3b:4b:82:b4:
         ff:f5:45:f3:6e:dc:78:07:60:a9:40:03:f1:84:23:c0:8e:75:
         54:cb:d6:b6:e7:24:a4:62:56:9d:69:2e:76:71:c8:42:83:1b:
         6c:90:a6:53:d1:c0:2d:6e:5c:6a:f9:d3:9d:69:84:94:24:aa:
         56:c6:f7:6d:5e:37:8d:b6:cd:df:ee:5e:fb:7b:f6:b8:13:fb:
         0e:fb:73:bc:ea:42:75:82:bc:bd:18:55:3a:39:d4:5f:ae:12:
         30:17:d0:ae:42:d6:5f:b4:ab:41:fa:37:ae:ec:ac:2c:1a:fc:
         e6:4b:c4:c4:9d:4c:20:92:d5:bc:01:b7:42:17:c3:18:1e:31:
         ea:a9:26:c5:24:95:b9:ae:0b:ac:d0:50:58:02:cb:d1:ed:f1:
         05:74:73:8b:e8:a8:26:69:d6:01:85:96:ca:f7:74:3d:c0:15:
         a8:4d:45:2d:f3:5d:e3:3b:55:7c:5e:bf:aa:47:b9:4e:4c:aa:
         cf:67:1d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:24:54 2026 by rpki-client