Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
File:                     1-FVaeIP5K5-bpCKpa045e_X7j8c.mft (raw, json)
Hash identifier:          3CmbU/rabj+dQ346cGwfajwgKbC8XFd3+BpCd6E+X24=
Subject key identifier:   84:77:3A:27:D7:89:B1:57:63:16:97:CA:9E:8D:DE:A8:CF:2A:13:F9
Authority key identifier: F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7
Certificate issuer:       /CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
Certificate serial:       01A0C143B44A967574ABD7687E30A052BBC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
Manifest number:          1378
Signing time:             Mon 21 Sep 2026 00:00:34 +0000
Manifest this update:     Mon 21 Sep 2026 00:00:34 +0000
Manifest next update:     Tue 22 Sep 2026 00:00:34 +0000
Files and hashes:         1: 1-FVaeIP5K5-bpCKpa045e_X7j8c.crl (hash: 3cKylDKlcoF+Wiuq48m2ry2V9I59VY3LM03vitvcFfk=)
                          2: KO-QbiA4B8Fqmh4PoUG1b2CWqyo.roa (hash: AQjqAS5i/LVUFXeGIyKdhva6id7Kjy8HsHgnyuWVcqc=)
                          3: LBp-f2wTeEG__GeuFL9S2VPjFS4.roa (hash: jbigl4wtO4I3oLlMsdwWFhj1QBqpQaBQsh/wEl6VUQo=)
                          4: T7-uQqlLNMsiccxdjsoaTK4wseo.roa (hash: +BKfpUhxoHfLf7cPj1R21xoP1tto5+gxC04QZRCZI6c=)
                          5: ap691plquRdyX3vt85LxuWpbm1c.roa (hash: khufkxMKrWAd/D05QdS5OQV/ljvmohRpPsDkx0sZzKs=)
                          6: eWAGfLfEp43y_iN-RtSZfG1D49U.roa (hash: POgI5hw92swzuRADnz2nsMp43qgG4i2QfhiIQqJZJqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:43:b4:4a:96:75:74:ab:d7:68:7e:30:a0:52:bb:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8555a7883f92b9f9ba422a96b4e397bf5fb8fc7
        Validity
            Not Before: Sep 21 00:00:34 2026 GMT
            Not After : Sep 22 00:00:34 2026 GMT
        Subject: CN=84773a27d789b157631697ca9e8ddea8cf2a13f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:25:5b:4c:a4:30:70:59:2b:77:11:f1:01:87:
                    c6:09:73:c5:03:c7:b8:10:11:6d:53:e8:a3:6b:42:
                    bd:ce:97:09:17:59:0e:c0:77:3a:ed:99:94:e9:65:
                    68:32:9c:01:9e:06:c9:59:97:aa:0b:58:5f:b1:04:
                    c3:f2:7a:3c:84:25:ea:ac:a9:b3:24:92:7c:1a:b7:
                    d0:ea:26:eb:87:72:91:82:60:3d:02:5f:30:63:f4:
                    0a:7f:4b:1d:42:5c:bc:52:96:75:b6:16:3d:05:70:
                    d4:28:41:f4:a7:d8:4c:83:f7:37:c7:11:89:41:cd:
                    e6:e1:4d:bc:a8:b6:2e:27:33:46:28:2e:f8:6e:09:
                    81:83:31:a4:36:d3:0a:e7:27:f8:0b:c9:ca:ed:31:
                    99:45:04:05:e9:39:58:f3:89:69:59:b6:a8:b1:91:
                    b0:49:b9:d0:9f:65:b4:d0:43:cd:90:b0:f6:d0:0c:
                    da:e8:6c:2b:58:ac:a1:e2:1a:c7:c3:d9:dd:98:23:
                    b3:6e:9a:a7:52:2b:45:d5:59:a2:ec:5b:66:91:3e:
                    62:70:b0:c2:5e:09:68:75:79:2a:7b:1a:ca:a6:09:
                    06:5e:79:e7:8b:cc:5d:ec:15:e9:e6:f3:3e:ab:c3:
                    51:b3:7a:44:9d:33:1d:e1:d1:37:7b:e6:1f:af:e6:
                    b5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:77:3A:27:D7:89:B1:57:63:16:97:CA:9E:8D:DE:A8:CF:2A:13:F9
            X509v3 Authority Key Identifier:
                keyid:F8:55:5A:78:83:F9:2B:9F:9B:A4:22:A9:6B:4E:39:7B:F5:FB:8F:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FVaeIP5K5-bpCKpa045e_X7j8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/82445f-d1d7-46b0-af4f-766c06e5f075/1/1-FVaeIP5K5-bpCKpa045e_X7j8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:bc:5a:4c:e6:09:60:ee:1e:07:87:22:03:59:cc:10:8d:e6:
         78:d9:d8:5e:1b:62:b3:32:4e:eb:73:60:21:f1:3d:2a:a2:22:
         7b:b1:24:96:6d:9a:14:26:89:2b:81:54:bc:56:4f:03:43:a1:
         94:4e:4b:62:d6:86:63:87:9a:11:d9:bc:8d:6a:92:55:4d:ac:
         f1:89:75:b1:c0:40:ff:ef:b1:b7:23:a2:1c:a4:c0:d1:16:92:
         93:02:93:4c:c4:fa:a2:ac:5e:45:54:83:27:b7:bf:f1:54:9b:
         e4:c4:9e:f9:c2:6c:1f:36:c2:ce:b1:a6:82:54:a1:f6:36:16:
         72:b9:5d:bf:67:9c:04:e6:4a:55:d5:78:15:f7:f5:92:23:7c:
         84:90:58:5d:62:d3:2d:9c:4a:5b:b6:17:16:fb:21:dd:b7:ca:
         7e:6c:9c:6e:1d:cb:71:57:28:43:29:8d:9a:16:1b:5d:14:36:
         84:61:6b:3b:56:c2:1b:ee:a8:2d:b7:dd:4c:d4:f7:fd:e0:2b:
         17:09:55:67:75:5e:64:be:3b:16:e1:9d:e2:ee:d6:ff:9b:fb:
         61:63:bf:3f:1e:7b:13:2d:36:eb:78:59:d1:1b:93:8e:98:28:
         31:43:fc:01:0f:45:8b:75:3a:f2:df:f2:4d:12:81:7c:7f:b0:
         f4:87:0c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:13:54 2026 by rpki-client