Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/FW9n1QDKlqSNDktqR8QbIzt0Zr0.mft
File:                     FW9n1QDKlqSNDktqR8QbIzt0Zr0.mft (raw, json)
Hash identifier:          v9ZptzMQWZyqp89xwA9vb4H7b5QrTr54GzXqSVBY0ZM=
Subject key identifier:   29:37:91:08:C2:0E:C5:9B:9F:59:2B:57:86:25:44:46:9D:E0:61:52
Authority key identifier: 15:6F:67:D5:00:CA:96:A4:8D:0E:4B:6A:47:C4:1B:23:3B:74:66:BD
Certificate issuer:       /CN=156f67d500ca96a48d0e4b6a47c41b233b7466bd
Certificate serial:       01A13A4A288E6B8C8B150A3A0854B3BEFCBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FW9n1QDKlqSNDktqR8QbIzt0Zr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/FW9n1QDKlqSNDktqR8QbIzt0Zr0.mft
Manifest number:          02A5
Signing time:             Wed 14 Oct 2026 12:01:40 +0000
Manifest this update:     Wed 14 Oct 2026 12:01:40 +0000
Manifest next update:     Thu 15 Oct 2026 12:01:40 +0000
Files and hashes:         1: 8zsn6uw0avdJfnmMv5bDQt94aRQ.roa (hash: fx5LZeJGBC5Vad7UFqMnP+6pEpxvbhublGGrjhNwrb4=)
                          2: FW9n1QDKlqSNDktqR8QbIzt0Zr0.crl (hash: 5sSUp7zTq+jPBgoydtvGQzepuhpk9xaTqr/A8AizOOI=)
                          3: SNrQoYSv-JodHlVqB2QdluY451Y.roa (hash: 2uZhbejShPfq2EwfJeBSd4MXKSM6zZUv2rUYxQaXnyA=)
                          4: TJFXtC-1rQPQ0Z6bh_HrT8s_4I4.roa (hash: 5KQuFX+E0BuuThyT34kOU6fnZW9hIrSYJx607gSANTI=)
                          5: f3bEhfcZYFeL51chG_txgYBQwwo.roa (hash: NdZKL3nxgp7jWCgSOuu/w5s7aPMkyrSU2TQKOTQptZU=)
                          6: ta9-hmsXDdcT5Pp4Y9mCbC034Go.roa (hash: 0QadywFAHc4SL15ht4ZbxaN0Z0JFWJUhVv2d5xulTUY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/FW9n1QDKlqSNDktqR8QbIzt0Zr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/FW9n1QDKlqSNDktqR8QbIzt0Zr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FW9n1QDKlqSNDktqR8QbIzt0Zr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 12:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:4a:28:8e:6b:8c:8b:15:0a:3a:08:54:b3:be:fc:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=156f67d500ca96a48d0e4b6a47c41b233b7466bd
        Validity
            Not Before: Oct 14 12:01:40 2026 GMT
            Not After : Oct 15 12:01:40 2026 GMT
        Subject: CN=29379108c20ec59b9f592b57862544469de06152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:05:77:a1:ea:31:d5:4e:b7:2e:b4:e6:20:a6:
                    bd:89:44:d3:f1:3b:f5:9d:7c:f9:f1:ff:f3:88:75:
                    b4:78:e2:d9:53:10:3f:66:35:07:33:de:ef:b3:14:
                    f0:52:36:a2:f3:3e:0a:eb:ed:7c:3e:e8:90:05:89:
                    9f:9b:2b:97:03:f0:0b:0c:6b:22:f1:b9:71:cd:55:
                    9c:ef:4d:14:ea:e5:8d:ed:0e:fa:51:e5:24:63:bb:
                    17:6c:6e:9b:f0:27:43:2c:7f:1e:2a:08:ee:25:c4:
                    44:60:19:c6:9a:df:e5:73:09:54:4e:e5:b9:a8:d1:
                    3d:f9:18:1c:1e:f4:51:b1:0b:7a:00:ae:6f:c1:e6:
                    0a:d1:5e:9e:a1:24:e3:9e:52:2c:e5:d7:d2:47:68:
                    93:13:8c:ae:b3:af:14:8b:77:77:8b:49:a9:e8:a7:
                    06:37:73:ad:be:46:a4:f6:57:e1:bf:20:bb:bd:17:
                    23:ff:91:d6:60:a6:46:29:70:a1:18:e0:47:9f:f9:
                    27:61:9f:2f:96:62:c8:c8:d5:c6:dd:c3:9a:e0:bc:
                    2a:56:aa:b4:41:a3:9d:9e:7f:a3:28:5b:df:12:e8:
                    fc:0e:7e:81:dd:46:ab:54:63:f6:b9:63:02:6a:1b:
                    c4:22:e0:e3:2e:bd:ac:25:b0:0a:cd:0a:df:61:11:
                    34:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:37:91:08:C2:0E:C5:9B:9F:59:2B:57:86:25:44:46:9D:E0:61:52
            X509v3 Authority Key Identifier:
                keyid:15:6F:67:D5:00:CA:96:A4:8D:0E:4B:6A:47:C4:1B:23:3B:74:66:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW9n1QDKlqSNDktqR8QbIzt0Zr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/FW9n1QDKlqSNDktqR8QbIzt0Zr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/183182-430b-4d68-9149-3513992ebea9/1/FW9n1QDKlqSNDktqR8QbIzt0Zr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:8f:9c:8b:8e:88:1b:cd:04:cf:4d:6f:a6:84:6a:4b:9e:3a:
         04:33:a7:f5:4e:54:e6:e9:fa:3b:f6:c2:bc:b6:3e:58:fb:aa:
         9f:a1:13:ba:c8:d6:5d:06:c6:ad:b3:ea:65:25:1e:b1:9c:8e:
         78:04:23:89:f3:7c:31:e9:95:e8:fa:5b:91:bd:1d:d6:68:7b:
         aa:09:d9:61:dc:19:4f:53:4c:e8:7a:ae:aa:c7:c2:1e:3f:14:
         23:ec:e4:65:da:9d:90:bf:9c:b8:ce:02:4d:5a:fc:6b:24:7d:
         4e:69:40:71:b6:66:e6:12:f6:be:6a:92:44:fa:40:1e:d5:72:
         d7:cd:52:c2:76:df:9e:88:cc:b3:eb:0a:16:04:73:36:f2:ba:
         c0:b8:74:b4:c8:f6:7d:d4:40:a5:b0:6a:e0:52:da:44:ea:7d:
         55:3a:73:d6:63:41:a5:c1:8d:59:c4:83:ca:91:84:13:7e:7d:
         69:61:68:68:8a:8b:36:88:ec:d7:b5:d4:a3:11:19:c2:80:f5:
         66:df:51:e9:ee:91:8d:9d:6a:1c:72:e6:09:41:0d:bf:df:6a:
         39:d9:33:5d:77:7d:33:52:88:cd:90:dc:22:87:72:1e:58:f4:
         88:d5:4c:a6:5a:0a:42:81:13:c7:e2:0e:e6:83:bb:41:a5:69:
         45:28:d1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:57:18 2026 by rpki-client