Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
File:                     f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft (raw, json)
Hash identifier:          S/NQ5SgRGrC14LIUhUmAW5UQwPCdOFPwGPaGB6b43yo=
Subject key identifier:   14:CD:FB:80:97:C0:5B:C0:E8:9F:6B:E1:F3:B5:E2:7A:7B:71:BF:FB
Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Certificate issuer:       /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Certificate serial:       01A0D07FFE1D70A30383CBE586BB725CD186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
Manifest number:          19FF
Signing time:             Wed 23 Sep 2026 23:00:44 +0000
Manifest this update:     Wed 23 Sep 2026 23:00:44 +0000
Manifest next update:     Thu 24 Sep 2026 23:00:44 +0000
Files and hashes:         1: 66GZ7l6QQwcv2bCy6Osuwz05vyI.roa (hash: XdLrvyU74+Rq/gqsf2OvY8CqJfc5BuoyG2y3sfoMhOw=)
                          2: f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl (hash: /hYJsBOYg7hX96u6UxbU4u9w68T1ffT+slMP1YzOYaA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:7f:fe:1d:70:a3:03:83:cb:e5:86:bb:72:5c:d1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
        Validity
            Not Before: Sep 23 23:00:44 2026 GMT
            Not After : Sep 24 23:00:44 2026 GMT
        Subject: CN=14cdfb8097c05bc0e89f6be1f3b5e27a7b71bffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:3c:0f:5c:bb:2e:04:51:dd:c7:05:24:93:
                    f7:a7:a7:07:57:59:d2:72:f5:b3:72:d6:3d:5c:a9:
                    81:0f:94:30:25:59:86:ee:00:ca:70:13:0e:74:96:
                    7a:ae:78:90:65:50:29:f9:74:36:92:7b:18:5a:66:
                    eb:d6:ac:f6:24:e5:6e:28:ae:92:c0:af:28:32:b0:
                    53:45:9d:38:3e:83:14:84:63:44:28:9e:3c:75:12:
                    a1:95:24:2a:62:e2:82:64:d6:7f:72:75:11:9e:66:
                    68:ca:a8:ec:93:aa:1b:f6:1e:b5:c4:59:7b:3a:6c:
                    ff:bc:d3:7f:47:9f:bf:10:50:67:7b:64:09:e1:c3:
                    bb:08:ee:f2:c1:a1:71:d6:df:c3:bf:56:34:61:6e:
                    84:3b:cf:1e:09:74:0d:21:17:93:29:ef:40:68:5e:
                    a4:6c:d1:c7:19:93:26:30:1a:1a:b3:23:58:c1:d5:
                    6a:0a:4f:7d:e2:a6:76:3a:e3:e1:42:49:86:f6:db:
                    18:92:5b:f7:89:da:fe:96:d9:fe:cf:94:22:6d:77:
                    df:49:55:9c:f0:b2:72:a5:88:ca:45:a7:8c:73:7c:
                    cc:57:1d:2c:7e:b0:f0:89:e5:89:71:a0:a8:7d:3c:
                    a0:2f:33:bf:8d:9c:2e:5d:a5:a1:68:eb:b5:d4:8b:
                    25:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CD:FB:80:97:C0:5B:C0:E8:9F:6B:E1:F3:B5:E2:7A:7B:71:BF:FB
            X509v3 Authority Key Identifier:
                keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:e6:ea:d5:ac:49:50:67:67:74:c8:ca:16:b8:35:4a:55:dc:
         00:05:71:26:d8:f9:7f:9d:79:ab:b0:98:b5:38:38:17:96:3b:
         3a:d3:cb:cc:8a:4d:5d:0a:12:59:81:df:7a:ad:6c:a2:ba:a2:
         87:35:26:60:6d:ce:38:c6:35:5e:89:da:87:7b:04:b7:88:9b:
         ad:75:7e:9b:8f:7d:11:45:13:38:b7:8f:d9:ee:87:5c:d9:3b:
         fb:28:c5:13:db:c3:6f:66:5b:53:67:bd:2f:43:8d:94:4a:5c:
         23:28:5b:c1:02:16:87:6e:5f:4b:15:20:e8:df:16:40:93:02:
         b4:55:10:02:e6:02:40:35:17:ec:0a:d7:5e:da:07:d6:dd:21:
         f0:48:b8:1c:ca:01:31:e3:4d:ed:ce:e0:55:46:dc:ab:dc:4e:
         62:2d:de:fa:6d:9e:8e:42:b1:52:fd:61:ca:8a:f9:33:0a:dc:
         e6:14:15:c9:b0:65:b5:09:79:8e:b0:32:82:87:9c:4f:c0:8e:
         fc:27:24:e8:2c:b5:8b:9a:ac:e9:2f:8c:ec:08:b7:ac:0d:5e:
         f4:15:06:74:9e:ad:03:cf:dd:ad:cc:69:80:87:f0:04:b3:39:
         83:62:b4:80:5e:98:fc:f8:80:2f:36:68:8a:7e:13:05:41:7b:
         c0:83:5c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:08:26 2026 by rpki-client