Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
File:                     F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft (raw, json)
Hash identifier:          kB5/qgLpR9COWEn3eerGROETsUtYtgjDxrA+dgDje4w=
Subject key identifier:   CD:C3:C1:4B:C4:B8:AB:B6:5F:EA:95:D2:AF:B2:BE:59:6A:D1:7B:75
Authority key identifier: 17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA
Certificate issuer:       /CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
Certificate serial:       01A1AC0396032F6CCE420056DC91ACDC0A40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
Manifest number:          1AF0
Signing time:             Thu 05 Nov 2026 14:01:18 +0000
Manifest this update:     Thu 05 Nov 2026 14:01:18 +0000
Manifest next update:     Fri 06 Nov 2026 14:01:18 +0000
Files and hashes:         1: F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl (hash: UYpj/74gG3tuoYy6msMRhy7qSmdIHJUcQSnzbwlZv54=)
                          2: O39MJv57TWbmh-043GG_Y3SPcR0.roa (hash: 8nJD+DxVo3QJVLDsiX2c2YfhjphmaMQZAM0s+wFgUgA=)
                          3: OJRfagybnKNPJgB2VgQCHXK6_wA.roa (hash: +CkaUNxuBjvbD77nG/V3XHJG2xGpZ2YKXMRrO/6Sytc=)
                          4: ZJtFdEDxmsbcX4jDsw2u8r-Xj7k.asa (hash: cTM4PiZVFZLUAQhA+MhDIodHuslGKdYGZeWEgzK7nsA=)
                          5: ihmrebXRZJfViRX4wxqlQD4yY5w.roa (hash: zbtiR4hVHidDupnjoUs6IoiKzo0tQZSkjWxtKWEtK+o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 08:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:ac:03:96:03:2f:6c:ce:42:00:56:dc:91:ac:dc:0a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174847f8667d52fa2cf9cf9afcc43a07915575ca
        Validity
            Not Before: Nov  5 14:01:18 2026 GMT
            Not After : Nov  6 14:01:18 2026 GMT
        Subject: CN=cdc3c14bc4b8abb65fea95d2afb2be596ad17b75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a7:8f:7b:c9:70:ae:de:9a:12:e5:cc:4b:ed:
                    45:f8:27:1a:8c:08:67:ce:fe:8a:92:b8:05:6c:b0:
                    6e:7c:73:8c:43:16:49:b4:83:0c:9f:53:54:b2:48:
                    01:51:ac:23:86:d6:5a:45:ec:d8:48:d5:3f:e0:55:
                    e7:2a:4d:7c:b5:4d:2f:00:9e:07:32:ed:2d:d7:09:
                    f6:83:83:2f:90:bb:80:37:8c:79:31:21:32:d6:18:
                    a3:83:a1:aa:b0:27:69:da:32:95:c1:e0:fd:04:e8:
                    df:d2:be:75:07:52:3b:a4:13:0e:20:57:b2:6e:a7:
                    ac:8c:23:3e:e6:38:38:45:27:54:55:22:4d:b0:53:
                    fc:28:f6:1b:c2:75:67:dd:eb:fe:44:9f:68:f7:98:
                    b4:1b:e2:8c:05:97:d9:3c:45:8f:58:ed:9b:04:21:
                    64:27:0c:4b:d2:54:64:a2:bd:52:9b:e1:16:d0:2b:
                    13:c5:7b:9f:44:78:18:c8:47:05:f5:bc:62:f8:f1:
                    f4:03:43:28:bc:0f:8b:21:57:41:f7:39:f1:a2:bd:
                    d1:f0:5f:cc:dd:73:18:bd:5a:8a:1d:e2:9f:35:25:
                    19:30:fd:7d:73:3e:b5:cf:88:d0:af:c0:bf:30:a6:
                    be:a8:ef:39:f7:98:32:4e:45:12:05:2e:d9:ea:b8:
                    11:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C3:C1:4B:C4:B8:AB:B6:5F:EA:95:D2:AF:B2:BE:59:6A:D1:7B:75
            X509v3 Authority Key Identifier:
                keyid:17:48:47:F8:66:7D:52:FA:2C:F9:CF:9A:FC:C4:3A:07:91:55:75:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/72cc4a-2d9c-4808-823e-1454ffe6182c/1/F0hH-GZ9Uvos-c-a_MQ6B5FVdco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:80:b4:ce:cd:f8:26:a6:cd:cb:c1:29:83:bd:20:0d:ac:58:
         22:21:1f:47:11:ba:dd:6e:24:f9:d7:2f:3a:1a:b2:86:a8:b9:
         43:16:4f:e2:8b:e5:c0:55:ab:f3:0c:64:fb:4d:0c:99:3c:4a:
         0b:a0:2b:51:47:b4:09:fe:65:62:cb:60:d3:7e:9f:11:17:6b:
         53:c4:33:50:74:20:43:fd:d6:c2:79:db:57:b4:bc:9b:bc:37:
         16:75:69:db:4a:7c:84:77:31:22:ce:0f:c8:e6:53:c4:62:7c:
         3f:c1:02:64:19:5e:72:d2:aa:e0:a7:63:61:cd:55:1e:b4:c7:
         5b:6c:16:43:0d:69:2b:6a:c5:97:0a:c7:d5:de:98:6d:f5:c6:
         4b:84:08:d5:5b:02:99:1f:bc:f7:6c:5d:22:70:8a:21:2c:ee:
         aa:95:b5:87:d2:70:20:40:c1:87:90:42:cc:84:83:e8:d4:1f:
         9f:94:b2:7b:f3:a6:73:ac:72:72:9e:7b:b7:12:db:f8:2a:13:
         88:2c:0b:3f:47:55:33:2e:59:81:15:8b:b5:7f:82:ac:f6:d5:
         e8:42:8d:6f:8e:eb:fd:a4:72:a6:e8:3b:3b:2e:e3:85:3f:c1:
         cf:23:b1:46:89:b7:b3:b6:18:b3:c0:c3:20:8e:fd:2a:a2:57:
         90:34:51:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:46:35 2026 by rpki-client