Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
File:                     9vojpSZFyW2w3bFNJPa08FWfvis.mft (raw, json)
Hash identifier:          8TrMwxv3KjxIJvypxV29ep88SUZp5JPsiyZ4hQqz6yo=
Subject key identifier:   35:3B:77:8E:23:70:73:0D:D1:06:F0:75:9C:66:17:58:03:9B:4A:CD
Authority key identifier: F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B
Certificate issuer:       /CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
Certificate serial:       01A1317D71D77CC55116F97AA16AD40B24EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
Manifest number:          029E
Signing time:             Mon 12 Oct 2026 19:01:06 +0000
Manifest this update:     Mon 12 Oct 2026 19:01:06 +0000
Manifest next update:     Tue 13 Oct 2026 19:01:06 +0000
Files and hashes:         1: 1e5gN7A5IMLAfWh5okyUEY4gzTs.roa (hash: YcxcWdqXrpjTgUSpqzxnLLj/efKoZUVfv7p5P2dPWuE=)
                          2: 9vojpSZFyW2w3bFNJPa08FWfvis.crl (hash: bwCIbv6FhG4dKNMuKrbuP2GxKuYjK0lnJmbVM3hnla8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:7d:71:d7:7c:c5:51:16:f9:7a:a1:6a:d4:0b:24:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6fa23a52645c96db0ddb14d24f6b4f0559fbe2b
        Validity
            Not Before: Oct 12 19:01:06 2026 GMT
            Not After : Oct 13 19:01:06 2026 GMT
        Subject: CN=353b778e2370730dd106f0759c661758039b4acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:09:54:98:1f:01:70:e3:b3:4c:05:d4:05:ec:
                    f6:23:b8:a5:d1:0d:ea:fa:20:84:fc:32:02:3f:2f:
                    99:c1:6d:fa:13:b7:5f:4e:82:15:a8:9e:3a:a5:c4:
                    ae:3d:5d:2c:e0:7c:d6:cd:73:1c:cc:b5:c7:0c:68:
                    04:7f:66:dd:57:bd:c6:fb:c0:04:d0:71:40:17:3b:
                    f9:13:61:61:58:72:1d:b7:91:02:71:6b:79:bd:6e:
                    d2:ea:7a:4c:51:28:32:75:4d:a1:a2:28:ea:f2:85:
                    b5:34:3f:b3:1d:0f:61:f7:17:44:c8:1e:5e:61:e9:
                    eb:79:7b:79:0e:60:80:13:8c:aa:54:ea:f1:6a:ec:
                    58:db:99:d9:57:c9:0a:d6:e3:5d:64:ac:40:b5:5a:
                    ef:10:90:29:42:25:52:f6:05:4d:f3:2e:8a:50:5b:
                    f9:c2:5c:bf:f7:96:fc:a3:8e:19:1d:90:ab:f2:59:
                    28:6a:1a:02:25:65:86:72:da:a6:ae:09:84:b8:5d:
                    db:1c:f3:be:d8:15:b8:79:7e:7d:37:c8:88:3d:64:
                    4d:5a:97:a5:7e:dc:8c:8a:b4:fa:f7:cb:63:87:0f:
                    1d:b5:ba:81:f3:f8:2b:3d:23:5d:3d:cc:42:a3:39:
                    31:55:76:57:ed:51:ab:4e:63:99:fd:03:02:96:c6:
                    a1:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3B:77:8E:23:70:73:0D:D1:06:F0:75:9C:66:17:58:03:9B:4A:CD
            X509v3 Authority Key Identifier:
                keyid:F6:FA:23:A5:26:45:C9:6D:B0:DD:B1:4D:24:F6:B4:F0:55:9F:BE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vojpSZFyW2w3bFNJPa08FWfvis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0496ba-97ba-4022-ab63-23d42d922943/1/9vojpSZFyW2w3bFNJPa08FWfvis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:4d:67:c1:e9:fd:30:90:a5:d0:e2:bc:2b:a1:f5:da:fb:6d:
         5f:4d:d2:2e:1f:d1:fc:47:c2:84:b1:e9:9f:d2:e1:96:87:95:
         96:27:df:af:0e:8f:9f:19:0d:f0:dd:04:b6:b2:60:b6:cb:32:
         8c:c6:e6:f4:09:43:83:7f:51:13:ab:f6:43:3b:20:d6:57:a7:
         f2:50:08:62:18:e3:cb:9b:cf:ba:25:db:4e:49:20:3e:e1:72:
         68:65:96:1e:de:d3:7b:c2:ae:30:63:cf:c9:c3:1a:d7:ff:24:
         67:ac:4e:33:7f:72:32:53:a7:7f:f2:97:16:29:19:d5:83:03:
         07:5e:e5:44:63:47:18:c1:43:ab:44:6c:52:22:13:9c:9d:22:
         64:15:24:e7:9b:21:fa:c7:d2:34:c3:9f:fc:21:aa:04:c8:e2:
         58:31:12:c5:0b:c4:6e:57:0e:e4:17:42:24:b6:71:87:bd:e7:
         cc:63:01:f6:7d:af:83:2d:48:f8:85:d2:bf:33:32:eb:2a:06:
         be:ed:91:de:c8:a5:e6:46:18:59:06:46:4c:bc:94:6f:8d:45:
         e9:61:16:9f:66:94:92:7f:e6:39:4f:a8:52:4d:71:49:12:ca:
         11:12:aa:6a:6c:75:ed:d6:6e:0f:66:3c:12:da:89:07:85:e7:
         14:95:1f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:02:21 2026 by rpki-client