Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
File:                     fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json)
Hash identifier:          RbvF6PbYF857r1cHiOMLUHc6NSo017eBFpwrK1NztHw=
Subject key identifier:   F0:81:BD:C9:41:E3:E9:78:90:BC:A7:D0:D2:F9:6A:C8:66:23:80:29
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Certificate issuer:       /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial:       01A0C66ABAF1F86AAF8741E2C1AAA8408D45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
Manifest number:          1A62
Signing time:             Tue 22 Sep 2026 00:01:18 +0000
Manifest this update:     Tue 22 Sep 2026 00:01:18 +0000
Manifest next update:     Wed 23 Sep 2026 00:01:18 +0000
Files and hashes:         1: Ixc0FTVWxzna0vpYT8iSJQfYgs8.roa (hash: eyE//5nnGG1gd1MKGli98Ub3MuP1GL2b5RO5JiAkJBg=)
                          2: MGJZDZy48CKe0KFJgl-NtQKce1M.roa (hash: 7o0STbO6YBA8EIAiJhdAaPfZW/eDmWBTpcQhpZ1hTbI=)
                          3: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: E23Hi5NH+lu/v1LgYtzWhgX/NmJ6un/d6vshapgjMOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:6a:ba:f1:f8:6a:af:87:41:e2:c1:aa:a8:40:8d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
        Validity
            Not Before: Sep 22 00:01:18 2026 GMT
            Not After : Sep 23 00:01:18 2026 GMT
        Subject: CN=f081bdc941e3e97890bca7d0d2f96ac866238029
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:81:50:43:67:52:2d:ff:6e:3a:1f:82:cd:49:
                    86:d2:59:eb:77:51:43:2c:f6:7d:37:3b:74:7c:8b:
                    b0:05:19:84:6f:f7:4f:1c:52:07:22:e7:c8:84:28:
                    8b:a5:52:ce:81:2e:f6:c5:5b:7a:01:4b:a9:12:bd:
                    b1:41:1a:2e:cb:c6:88:5d:56:bf:07:e4:0f:e3:82:
                    6b:31:77:6d:e4:27:89:14:20:ce:70:57:f2:a2:74:
                    ca:c5:90:5f:88:f9:98:f2:67:52:30:e4:00:78:df:
                    8c:86:92:67:8f:7f:6b:81:69:b6:35:ae:6f:a6:35:
                    a3:06:b4:1f:de:74:22:f8:71:13:ff:c9:63:99:e5:
                    cc:15:9c:18:96:66:d9:fc:e0:8f:a1:b1:3d:a7:05:
                    8f:d5:b9:c3:72:bc:2d:9d:55:49:dd:a3:ca:4e:15:
                    7e:6d:f0:28:9e:7b:7c:63:fb:f8:15:0d:37:38:53:
                    9b:23:1b:ed:8b:52:79:bd:53:a7:31:c3:fd:5c:73:
                    ca:c1:b8:17:76:a2:1c:65:2a:14:3f:bf:06:db:71:
                    3d:83:47:60:33:73:ec:a3:29:89:38:f6:6e:f7:6f:
                    62:27:b0:71:01:9e:75:af:de:41:90:81:e6:7b:d4:
                    82:bc:3e:79:64:62:b2:0f:6b:0c:33:79:98:1a:a5:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:81:BD:C9:41:E3:E9:78:90:BC:A7:D0:D2:F9:6A:C8:66:23:80:29
            X509v3 Authority Key Identifier:
                keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:7b:98:33:a5:43:27:25:03:c2:b5:7c:d1:f5:3e:9c:f6:1d:
         df:08:14:63:c5:ae:f1:f7:5f:81:18:ba:47:cb:d4:42:02:e0:
         1b:c3:79:21:33:9d:bb:7c:7e:59:0c:5e:c2:61:67:ee:ea:f6:
         49:ba:2d:85:e3:bc:52:86:64:6e:06:c5:52:5a:2b:ba:00:6e:
         86:99:22:80:f1:55:2b:05:a6:b2:6c:46:e6:84:97:37:63:27:
         e7:8a:55:cc:cd:27:8c:74:fe:e7:2e:e5:e4:be:c6:90:25:86:
         06:fc:1c:20:51:a6:a9:f1:98:4d:7a:69:6d:03:ee:f8:86:f7:
         22:ae:64:8b:5e:83:53:db:84:c0:4f:8d:29:38:62:16:45:3b:
         47:70:a7:42:ee:15:98:44:40:51:80:16:8f:83:fd:85:e4:f1:
         03:b4:59:8f:8a:3d:35:7c:a3:4f:01:c9:f2:b0:e8:e8:d7:21:
         99:b1:1e:4c:5d:77:e3:2e:6b:be:cd:6f:23:e3:bb:6a:db:72:
         3e:29:19:d8:8e:8f:37:57:7e:94:84:4a:3e:64:92:9c:51:08:
         22:6b:68:db:dc:2b:6a:70:96:88:b3:b3:8f:db:ae:20:be:53:
         96:d4:63:ff:76:ef:6d:b6:b4:8c:85:68:32:38:f2:9a:a6:7f:
         bf:f7:61:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:32:43 2026 by rpki-client