Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
File:                     _BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft (raw, json)
Hash identifier:          FRiFsbiFG2xmfbdIYZxz68VxED/x3tn77gj8djivGps=
Subject key identifier:   F4:53:45:D3:EA:DE:49:62:B9:00:05:5C:F5:3C:3E:A5:D3:2C:90:94
Authority key identifier: FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08
Certificate issuer:       /CN=fc157d396ed992843daeef7b9cca73b043966c08
Certificate serial:       01A11A50AE67904D039BEFC027D6FC5A74EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
Manifest number:          0599
Signing time:             Thu 08 Oct 2026 07:00:57 +0000
Manifest this update:     Thu 08 Oct 2026 07:00:57 +0000
Manifest next update:     Fri 09 Oct 2026 07:00:57 +0000
Files and hashes:         1: _BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl (hash: bLqTnpTXdTbJUIxAK1vd3gm2w18cDK+RR8213U0OF60=)
                          2: gZN0ubYqOfKHhkHWa3AckTvwRLw.roa (hash: tkY9Znd59Usph4Tm3soVWPi523DI015PBAn20gIz7Bg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:50:ae:67:90:4d:03:9b:ef:c0:27:d6:fc:5a:74:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc157d396ed992843daeef7b9cca73b043966c08
        Validity
            Not Before: Oct  8 07:00:57 2026 GMT
            Not After : Oct  9 07:00:57 2026 GMT
        Subject: CN=f45345d3eade4962b900055cf53c3ea5d32c9094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:08:7f:e3:73:5f:0a:91:85:fb:c4:bd:f1:68:
                    17:dc:bb:d8:a5:d7:99:86:98:ad:63:8c:a4:e8:db:
                    b1:e6:68:cf:f3:0f:77:34:de:27:90:12:a8:40:bd:
                    48:2d:e4:1f:e4:d9:c5:01:c1:a5:ec:de:8f:ef:51:
                    33:a1:05:4d:d4:13:d3:4e:b9:e2:bc:af:84:8d:a5:
                    4f:f3:36:98:10:ee:19:00:35:a5:76:00:41:2c:20:
                    3a:3a:be:66:e4:2c:a6:85:bc:5a:81:e7:2b:f6:03:
                    26:f4:10:23:a2:14:3c:2d:d0:78:b9:e1:38:31:f5:
                    fd:17:f0:52:6b:74:16:d2:55:1b:3f:e7:35:3c:f3:
                    b7:86:c2:74:46:db:2a:67:4a:5d:a7:69:e6:01:19:
                    a9:77:33:0d:f7:92:98:4a:aa:6b:99:c1:c5:48:5f:
                    d7:12:ea:aa:e1:35:d2:ef:de:f5:1a:ee:f4:dc:d0:
                    4c:d5:12:1d:e4:ab:68:48:3a:3c:5d:bc:ba:01:df:
                    eb:33:52:27:d3:2c:82:82:5a:78:85:2a:11:8d:99:
                    c1:e9:1a:ba:f9:bc:d2:b2:ee:fe:ba:23:77:e5:ab:
                    fc:77:35:80:cb:aa:56:b8:a9:2e:8b:30:92:0b:c6:
                    54:13:64:15:c5:6e:ae:65:79:91:70:24:e8:09:14:
                    13:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:53:45:D3:EA:DE:49:62:B9:00:05:5C:F5:3C:3E:A5:D3:2C:90:94
            X509v3 Authority Key Identifier:
                keyid:FC:15:7D:39:6E:D9:92:84:3D:AE:EF:7B:9C:CA:73:B0:43:96:6C:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/fcea50-fe47-4664-9267-c0dccdb7a905/1/_BV9OW7ZkoQ9ru97nMpzsEOWbAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:cf:ff:6a:f9:d9:79:1c:5f:f5:98:fd:e4:3c:05:bc:73:16:
         dd:78:6f:80:fc:f8:eb:f7:a4:46:3e:28:6c:7b:94:4f:5e:bb:
         01:8e:2c:ef:36:b9:5b:18:94:2d:e1:39:1d:66:aa:ba:84:42:
         39:b5:78:dc:1f:d9:aa:5c:d2:52:72:25:7c:f8:70:e3:68:25:
         ec:80:78:21:ad:56:10:eb:fa:d3:0a:5f:77:ca:a3:d1:a8:ce:
         1a:4d:fe:c6:cb:aa:a2:74:da:dd:1e:ad:61:3f:cb:da:7b:0d:
         ac:f2:28:32:dc:96:22:5d:07:f0:bd:04:f1:47:37:47:8d:31:
         3a:2a:d4:47:2c:83:6f:c0:d1:b9:77:b7:a5:98:45:a8:58:9e:
         4c:ec:5c:04:e3:65:50:91:de:c8:cb:2b:9e:1d:83:46:b0:1d:
         48:b1:f8:f4:50:5e:44:6f:ae:2e:45:ae:1c:74:f3:0c:ea:ea:
         56:a1:ed:d3:e0:45:3a:b3:f7:02:6e:06:38:fe:97:64:c7:39:
         29:ce:be:06:b0:b2:21:a9:57:bb:eb:f4:df:2b:ec:ce:7e:32:
         5f:8e:f3:ff:2f:b4:47:0d:ba:62:ed:fb:95:80:4d:2a:cf:40:
         e9:a9:7d:75:3f:83:37:dd:36:5f:ff:9b:4c:b0:15:61:0d:5b:
         7d:e3:b5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:28:28 2026 by rpki-client