Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
File:                     r-us3hVZeiga4rspMG3E2m3Pt14.mft (raw, json)
Hash identifier:          E1GMFIul4ihJtAlygNwg3IxqY1K/iQ5P+Uae3/78+Bk=
Subject key identifier:   48:25:37:AF:30:53:3A:1A:8B:EB:89:8D:66:33:6B:89:6F:5C:80:84
Authority key identifier: AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E
Certificate issuer:       /CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
Certificate serial:       01A0DC851272D4C549E32B6F9D47FDB48F20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
Manifest number:          0287
Signing time:             Sat 26 Sep 2026 07:01:43 +0000
Manifest this update:     Sat 26 Sep 2026 07:01:43 +0000
Manifest next update:     Sun 27 Sep 2026 07:01:43 +0000
Files and hashes:         1: jdSx0T-sdrzr500OOr7Atdy3Z4E.asa (hash: nbjDNb/jtcCfwpceFtypmGiC8RlKHHL0LGrtqS6ZCo8=)
                          2: r-us3hVZeiga4rspMG3E2m3Pt14.crl (hash: 7jkxctg2IrbLUcgE8ZW9xNu5Z3hy/J26gvROd/KODKM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:85:12:72:d4:c5:49:e3:2b:6f:9d:47:fd:b4:8f:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
        Validity
            Not Before: Sep 26 07:01:43 2026 GMT
            Not After : Sep 27 07:01:43 2026 GMT
        Subject: CN=482537af30533a1a8beb898d66336b896f5c8084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:84:2d:0e:e4:f2:aa:f6:bf:6a:fe:18:1f:10:
                    f2:97:7d:d9:36:4c:db:0f:1b:7f:33:d6:5f:a4:17:
                    8f:e1:29:a9:32:f3:02:6b:5f:d6:ff:1b:79:f8:6c:
                    0b:e7:01:50:7e:d9:42:a5:2b:5d:c4:98:e0:d0:f1:
                    20:d8:64:24:de:02:d7:97:47:1f:c9:18:42:fb:b0:
                    a6:d3:d7:bf:a9:6e:4d:8b:70:12:ff:26:3e:91:4b:
                    54:cc:2d:a2:9f:8f:d4:6a:c5:0a:0f:4b:93:03:a1:
                    bf:79:fa:69:ea:6c:b8:2d:17:34:6c:d6:7a:c3:07:
                    98:dd:60:13:cf:db:61:85:e7:56:1f:34:65:6a:fe:
                    b9:e4:12:cf:ef:52:4a:c0:86:cb:31:e3:d3:99:5c:
                    9c:0c:42:43:4a:ff:df:4d:cb:af:76:db:af:95:57:
                    71:42:14:6a:a1:d1:90:85:60:85:fb:8a:b0:32:39:
                    e2:0e:09:db:87:9b:6d:2b:b3:3f:77:7b:ce:0a:56:
                    44:4f:33:7a:dc:b2:4b:94:85:98:26:03:56:2a:9b:
                    dc:f6:37:e0:50:b1:81:87:33:6c:f2:fa:91:75:55:
                    55:1c:bb:81:63:80:53:3c:b3:a6:44:41:c9:cb:37:
                    8a:a3:0c:b2:ea:f6:64:9e:87:c2:0b:38:39:6a:7b:
                    85:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:25:37:AF:30:53:3A:1A:8B:EB:89:8D:66:33:6B:89:6F:5C:80:84
            X509v3 Authority Key Identifier:
                keyid:AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:73:4f:7c:cf:1a:de:f4:be:de:0d:c9:b7:33:06:38:64:72:
         64:f7:e2:6e:f8:d2:8b:3d:f0:81:73:96:4f:8b:8f:5f:77:f3:
         9a:d3:e8:bc:2f:a0:19:37:d5:f6:6d:35:29:87:15:b1:cc:0a:
         fa:0d:22:8e:fa:dd:1f:49:95:80:e7:97:09:7c:d9:2a:8d:7c:
         34:90:bf:0c:75:9f:0b:2b:d1:69:8e:03:69:cd:48:7b:89:ab:
         53:90:81:e9:64:b3:2a:9b:3c:1a:68:8f:46:23:5b:48:18:8f:
         eb:85:aa:73:9a:d2:92:a2:48:15:dd:bb:6a:34:28:6b:e1:c5:
         09:86:35:2b:30:be:64:8f:06:1d:56:cf:66:d0:f3:0c:c1:08:
         03:bf:f0:d3:d5:bd:c7:c7:44:78:bf:46:11:8f:c4:99:ef:49:
         f1:d4:53:f8:a0:02:03:7f:69:69:40:98:42:d9:6a:2c:33:bb:
         87:3b:b3:b2:6c:25:aa:16:ac:49:9e:a3:a2:42:9d:a7:92:fe:
         52:1a:c4:2e:ff:8f:29:9c:69:5d:78:34:1f:ba:39:e3:db:c4:
         8c:b5:e9:a5:4f:66:f9:85:73:48:94:35:4a:a9:8f:27:62:33:
         78:4d:c7:bf:af:fc:73:49:f6:17:80:73:0a:ca:e7:8a:c7:78:
         87:fb:54:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:44:05 2026 by rpki-client