Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
File:                     1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft (raw, json)
Hash identifier:          N1r8a6dG9Rpxx4QSHVjXkf7slSkMTvnwQjdOoBjrvi4=
Subject key identifier:   4F:DC:ED:3A:3D:91:10:1F:70:B5:26:57:48:67:5A:7A:DA:7A:BF:87
Authority key identifier: FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13
Certificate issuer:       /CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
Certificate serial:       01A0C58E8CD6511E7FE18F179A528618DE49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
Manifest number:          1203
Signing time:             Mon 21 Sep 2026 20:00:48 +0000
Manifest this update:     Mon 21 Sep 2026 20:00:48 +0000
Manifest next update:     Tue 22 Sep 2026 20:00:48 +0000
Files and hashes:         1: 1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl (hash: arMYaemDcH8vZyl4OKS+wLQhNaS142apbJdlIdsByx8=)
                          2: 69F3bfMIelWEttb5tJi_02EPqPM.asa (hash: 8J7HRmXhchbIN/c7Ahb5CS10AmGul2E79TFNJaxglMQ=)
                          3: 6MkxZOCAknG2K-8b272IPhdocok.roa (hash: y/CqhaiNH9OwE/p4Zf1xynOs+ihS7UO8SYoBEISJe/c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:8e:8c:d6:51:1e:7f:e1:8f:17:9a:52:86:18:de:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fada41774765a4cdb050d82af11ba7d2d54b6e13
        Validity
            Not Before: Sep 21 20:00:48 2026 GMT
            Not After : Sep 22 20:00:48 2026 GMT
        Subject: CN=4fdced3a3d91101f70b5265748675a7ada7abf87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:73:2d:10:7b:92:15:2b:d3:9b:0a:9e:0c:8c:
                    bc:3d:a6:f9:93:0c:7e:2b:88:eb:56:ab:59:01:0b:
                    e9:fa:93:e1:60:c4:ee:bc:df:cf:1c:ca:27:d3:b1:
                    11:7b:1d:34:e7:c9:bc:93:0b:bf:05:f8:83:e8:01:
                    59:7a:3a:c1:34:ae:0e:cd:f6:d3:b8:36:21:5b:22:
                    f1:64:31:74:9b:dd:71:05:38:a2:05:2b:f9:9b:c9:
                    7b:db:f0:b7:a2:46:1e:0f:c7:82:7a:df:5a:58:3f:
                    af:51:93:a3:19:1a:af:ce:c5:ea:e6:c0:e7:4a:ca:
                    6b:91:9a:1b:21:f2:a5:98:8f:59:26:8e:eb:22:e5:
                    0e:8c:e0:03:c6:50:30:86:af:b4:62:2e:a3:e6:6e:
                    1b:31:a4:4f:43:30:f4:13:c5:7c:72:8e:eb:70:5a:
                    d1:c8:2f:d1:25:4e:87:96:5e:01:fc:3d:f9:43:dd:
                    03:34:bc:7e:4c:57:6b:8e:b3:55:63:17:94:66:59:
                    e5:35:98:de:e1:85:6a:3d:a2:c0:70:67:f3:5b:8c:
                    57:eb:f2:ff:e9:3e:9a:74:77:d1:08:65:53:61:b7:
                    c4:26:17:41:de:58:33:b9:4e:38:33:0e:e2:3e:ba:
                    af:1e:26:30:1c:d7:73:64:7e:cd:85:f9:0a:c4:39:
                    c5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DC:ED:3A:3D:91:10:1F:70:B5:26:57:48:67:5A:7A:DA:7A:BF:87
            X509v3 Authority Key Identifier:
                keyid:FA:DA:41:77:47:65:A4:CD:B0:50:D8:2A:F1:1B:A7:D2:D5:4B:6E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpBd0dlpM2wUNgq8Run0tVLbhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9e67f5-e580-4686-b82a-6b9dca9c4ece/1/1-tpBd0dlpM2wUNgq8Run0tVLbhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d5:06:ba:0b:4e:73:b3:0d:28:8c:79:81:04:ea:6d:c0:ab:
         a7:1b:f0:5a:98:b2:f6:91:11:36:41:da:d8:45:f2:a4:49:61:
         35:18:dd:0d:6b:ec:4c:74:46:90:1a:ca:db:79:0a:cd:4e:c4:
         f2:c5:93:4a:77:8d:58:95:65:b9:09:a5:4f:be:ba:ab:1c:cf:
         6e:0b:53:44:1a:af:2e:d1:85:e0:68:f3:21:d2:29:83:c7:0f:
         7e:74:a9:1b:5e:ad:93:75:f8:58:53:7b:c9:0c:90:a8:7d:f4:
         50:4e:6c:8f:d5:69:77:c7:d1:db:e1:c9:ad:80:64:a5:58:68:
         ac:f9:88:74:20:80:cf:4d:6d:c8:8a:30:e2:d9:4d:e5:c3:3d:
         7f:fb:10:41:3a:2a:ca:7c:d8:4a:ad:8a:7d:60:e4:d6:f4:80:
         72:59:41:e1:5a:11:a8:ec:69:f6:11:e0:0e:d3:a8:1d:bb:51:
         40:25:9b:da:97:54:8e:e9:5e:d6:30:fd:bb:ef:db:06:96:de:
         e4:ee:ab:ea:c6:eb:25:76:d3:6a:22:7e:ff:97:81:14:50:52:
         cc:eb:a1:af:cf:a8:5d:a8:93:71:01:a8:8f:fe:e8:68:83:c3:
         27:63:c5:ad:4b:7a:54:b0:fe:34:3d:03:ae:70:2c:85:66:f0:
         34:78:4f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:18:45 2026 by rpki-client