Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
File:                     _OoI6EId8vJFx8szPudqFKiILUo.mft (raw, json)
Hash identifier:          atRMKxD3ZMQqtepZO42cIoNnXcPK1H6p4b+Pi/5rqDI=
Subject key identifier:   7A:98:1B:1B:BD:00:D0:0B:C3:01:21:C3:2A:65:9C:6B:77:70:A9:F8
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Certificate issuer:       /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial:       01A0E8C1946A6F5D60A52689FA3FCFB9A621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
Manifest number:          1A7B
Signing time:             Mon 28 Sep 2026 16:03:15 +0000
Manifest this update:     Mon 28 Sep 2026 16:03:15 +0000
Manifest next update:     Tue 29 Sep 2026 16:03:15 +0000
Files and hashes:         1: 102NyqwI6NUjHs7bCvz-B7agUdM.roa (hash: 5hj0xFAny5+vtgd3t6VT//Hd2v6CocMrOduYjNO+NI4=)
                          2: 1nVHIu-5n51i9XhRUguwo5Agsgg.roa (hash: gfFsI93bvHGfawYL3os2AP8o+JuPoCqZf2VysVyBfmc=)
                          3: LAOAzix8Zi6Y7eROUhiHseM7d1U.roa (hash: Qhgem+rCCIPGj27tJdRK6lacEFlZtLP66ADVBe3CFfA=)
                          4: _OoI6EId8vJFx8szPudqFKiILUo.crl (hash: bWVm9HU+8F47B1Vepa9rXfN36gjrzAYH/yZn6hJheoo=)
                          5: vtzoMlVsaR1SjsCwCY3vHw4SD88.roa (hash: l1imowCkVJ1ojfww3ZUzrxP/ubYhQS8cf2hc3Hjykbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:c1:94:6a:6f:5d:60:a5:26:89:fa:3f:cf:b9:a6:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
        Validity
            Not Before: Sep 28 16:03:15 2026 GMT
            Not After : Sep 29 16:03:15 2026 GMT
        Subject: CN=7a981b1bbd00d00bc30121c32a659c6b7770a9f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d4:82:4a:97:8d:09:ab:23:7e:2b:9b:1f:9c:
                    f5:93:ac:c2:de:09:ab:d0:9c:6d:7d:fa:81:8a:0b:
                    74:01:5c:a4:a5:21:1d:a3:c5:c6:23:33:2b:cb:8d:
                    95:b2:c0:d3:9c:2f:01:68:8a:b6:ca:3a:d6:8a:2d:
                    e3:ed:61:86:7a:c9:24:2f:8e:b6:d6:92:af:c8:e1:
                    af:15:7c:14:70:e7:b4:d2:33:e6:0e:ad:51:a0:7e:
                    e8:1b:a7:e4:fc:24:99:2a:0c:7b:56:58:85:36:a6:
                    d4:ea:d4:b2:47:e4:ad:dc:03:80:a4:21:e2:55:91:
                    8d:0b:71:62:b0:72:1f:67:68:64:af:13:6b:63:36:
                    58:fe:cb:34:df:a5:0b:df:d7:ff:da:e5:bd:83:5c:
                    cf:63:6d:d7:b1:ff:6e:2f:23:d4:c7:09:bd:11:6f:
                    5b:c7:fb:ee:81:67:3a:b7:9d:58:68:b1:f2:49:00:
                    b1:05:da:40:48:86:8a:bb:a5:75:3c:e5:46:93:3b:
                    4d:4f:7c:7b:87:c1:a2:61:f8:ec:9b:53:01:c6:9a:
                    0d:66:91:11:b0:e3:01:b5:b8:6d:8b:a7:3d:a5:41:
                    d1:1d:dd:4f:33:e9:09:2d:f1:80:9e:a4:67:d7:13:
                    38:a2:ba:7c:87:e7:26:75:4c:59:84:4c:77:85:69:
                    23:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:98:1B:1B:BD:00:D0:0B:C3:01:21:C3:2A:65:9C:6B:77:70:A9:F8
            X509v3 Authority Key Identifier:
                keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:ef:bc:60:48:3c:37:1d:c3:16:93:75:e0:63:0b:ed:a4:85:
         e5:31:ce:20:26:e9:34:b9:d7:2f:8c:35:33:24:9c:ee:5b:85:
         6d:4e:37:55:58:ba:a5:04:86:52:d2:d3:29:15:93:42:6d:7f:
         95:ad:42:88:f6:c6:25:39:ec:c7:c4:e7:08:1e:76:1a:ef:e8:
         62:9e:0a:c0:e8:84:02:d3:25:02:e5:0f:cb:fc:c7:b6:06:4d:
         7b:3c:4e:a7:19:ed:bd:11:6f:0d:28:14:d1:62:8d:38:f5:bd:
         81:20:c9:d3:c7:2c:8f:5d:24:c7:90:41:e2:ab:46:da:5b:7b:
         91:4e:f6:bb:bc:1b:09:96:53:c6:ab:8e:f0:ad:8d:49:68:0b:
         8e:2d:9d:91:75:04:3d:3e:84:8e:75:71:86:2b:3e:6a:d4:4a:
         02:30:c3:7a:91:a7:f3:c8:db:b1:c8:c6:4c:aa:3a:98:82:23:
         cd:7a:4a:b4:59:ab:fc:a5:2f:a7:61:ef:b8:91:e2:39:cd:b4:
         2f:c0:47:c0:4f:9f:7a:50:b3:6b:15:d4:77:69:29:cc:17:56:
         98:48:82:83:ba:40:df:3f:bc:db:47:95:ee:ee:6a:93:60:7c:
         b7:51:d0:2f:5e:f4:c2:0d:a5:e7:e6:cc:c0:85:df:66:df:e4:
         e4:d1:51:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:37:10 2026 by rpki-client