Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
File:                     f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft (raw, json)
Hash identifier:          SqrUUwGkMGJFdHcW8lmZ8i53MitH6+rghvSjN26F1dc=
Subject key identifier:   BE:B7:72:27:E7:9F:D5:38:30:72:92:3E:86:89:BD:39:6A:12:C3:14
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Certificate issuer:       /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial:       01A0C77CC1C723F797B051C7847BA34B443A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
Manifest number:          1A6E
Signing time:             Tue 22 Sep 2026 05:00:37 +0000
Manifest this update:     Tue 22 Sep 2026 05:00:37 +0000
Manifest next update:     Wed 23 Sep 2026 05:00:37 +0000
Files and hashes:         1: 1-JpO8q1qatRpRIjMok1nlLPPJtY.roa (hash: lxSDrjSJfDdxFsFnnvYvxdk4e0Y7x830KJAg7m4hvFQ=)
                          2: AkISYLOC_fnGrIUjLvM1LtDRQ5k.roa (hash: SsHVMDv4qWTRMiOyQPgpmacaVt+8MOyUS0XN6APKH7k=)
                          3: KAkO-7xOFpTAGhNLp1btnqE2bSE.roa (hash: IGYFUhUO628GeghMUJEog11qsWIupQM1Ghm5aRQ86iM=)
                          4: f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl (hash: y5CFYZO0VFJsKT6f5DONyyQz4PPWysAxqrZGfOzoBmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:7c:c1:c7:23:f7:97:b0:51:c7:84:7b:a3:4b:44:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
        Validity
            Not Before: Sep 22 05:00:37 2026 GMT
            Not After : Sep 23 05:00:37 2026 GMT
        Subject: CN=beb77227e79fd5383072923e8689bd396a12c314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:29:c9:f6:29:af:b0:d0:cc:bc:1f:c6:79:e5:
                    70:ec:e2:69:c5:d1:87:2a:08:61:ba:96:a4:63:e4:
                    67:e1:00:18:6f:67:73:99:28:c6:1d:0d:76:80:63:
                    51:42:46:3e:5a:b5:66:89:c4:ea:be:f8:67:8e:5d:
                    3e:7c:81:c1:66:71:69:bc:bf:ea:a4:62:1e:93:9e:
                    b8:e5:f1:36:29:17:fa:4f:39:85:80:22:cb:35:79:
                    7b:b3:00:67:20:f0:33:01:14:3f:6d:c0:d2:8b:8e:
                    e9:14:36:1b:47:19:52:70:3e:ee:41:77:aa:9c:0c:
                    99:0a:86:df:98:a3:7a:8a:59:16:ec:2a:3e:ad:0c:
                    51:dd:c8:5a:b8:2c:ac:1e:b2:3d:7e:5b:92:f5:a5:
                    8c:09:4a:b8:18:98:c3:a5:99:f2:88:f8:6e:ad:d6:
                    6a:52:9d:2e:3c:c2:0d:5e:5f:28:a9:5b:61:8b:a4:
                    dc:90:8c:c8:e0:15:25:78:f0:09:42:b9:54:bc:a1:
                    76:cd:0c:df:75:31:8c:26:66:5d:ad:3d:01:8b:f6:
                    dd:39:84:62:06:03:df:33:04:d8:96:f8:68:59:c0:
                    0b:bf:87:3b:22:20:4e:a1:af:18:f2:db:4a:b0:d0:
                    b5:f4:95:a8:cf:cf:95:16:26:ff:75:99:48:25:9c:
                    50:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B7:72:27:E7:9F:D5:38:30:72:92:3E:86:89:BD:39:6A:12:C3:14
            X509v3 Authority Key Identifier:
                keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:59:d6:ff:3f:f7:10:ed:b7:fe:6c:a2:c9:0a:5a:0b:64:6b:
         22:38:77:7f:b4:ea:b0:87:f0:95:3c:73:e1:e7:10:8c:e1:45:
         e7:e0:66:d5:fc:37:62:a2:16:13:ab:b4:a6:9a:9c:62:2c:4d:
         ad:ac:50:04:68:30:76:d9:86:84:94:49:06:0d:39:b4:3a:32:
         07:f3:27:a2:fe:d6:b1:98:0b:48:af:8d:d0:d0:1b:df:ad:8e:
         cf:04:98:45:49:ad:17:76:2c:a0:b1:e4:cf:8c:d3:e7:86:03:
         81:4b:37:18:3b:05:58:bc:92:28:0d:df:d2:8a:e9:93:17:cc:
         b6:00:ab:a9:25:e8:be:f4:34:43:2d:66:44:20:91:55:c7:6a:
         a6:b6:54:80:7d:d7:4e:3a:e4:f8:14:e6:41:6e:d1:be:4c:94:
         05:fe:67:4a:1c:a9:ef:e7:ea:3f:f4:46:17:72:7f:92:32:17:
         8a:ba:91:70:66:63:58:30:be:9d:f0:ab:c8:62:2f:a9:99:12:
         47:9d:bb:ef:57:c0:63:dd:76:6c:09:8a:cf:a9:8b:65:bb:e1:
         79:ff:4d:bb:0e:a0:a7:fb:f6:5c:49:7c:ce:c9:ed:d4:12:1a:
         74:fb:dc:4e:9d:e4:54:b7:c4:a3:f3:fb:5f:2d:f6:7b:c0:18:
         c4:9b:b2:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:33:42 2026 by rpki-client