Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
File:                     93n18CiJhaveCYJ-A9eHpSFJ5-w.mft (raw, json)
Hash identifier:          Xcbcj0Vlq+3IkBpkIHX8aHV4f/3kXLAmVQaFl3z84I8=
Subject key identifier:   45:58:83:F1:52:7E:67:46:E6:7D:63:F4:52:0D:53:B5:06:02:2D:5C
Authority key identifier: F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC
Certificate issuer:       /CN=f779f5f0288985abde09827e03d787a52149e7ec
Certificate serial:       01A0D200F08C2F9584B03A69F5CFBAD3BFE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
Manifest number:          1A74
Signing time:             Thu 24 Sep 2026 06:01:11 +0000
Manifest this update:     Thu 24 Sep 2026 06:01:11 +0000
Manifest next update:     Fri 25 Sep 2026 06:01:11 +0000
Files and hashes:         1: 93n18CiJhaveCYJ-A9eHpSFJ5-w.crl (hash: MogdEln0z9fFARJGCIV+ljViZw4vM78Tg9Vg+xuQNIk=)
                          2: c06tR7wEve3BgRsZfi2xd-31eVA.roa (hash: V2mYqL9ivwyeeA9Wbx55/u2xDyhE5GyqU/pPOSpOihs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:00:f0:8c:2f:95:84:b0:3a:69:f5:cf:ba:d3:bf:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f779f5f0288985abde09827e03d787a52149e7ec
        Validity
            Not Before: Sep 24 06:01:11 2026 GMT
            Not After : Sep 25 06:01:11 2026 GMT
        Subject: CN=455883f1527e6746e67d63f4520d53b506022d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:2b:51:82:bf:60:31:16:db:a5:98:22:7d:2a:
                    86:c3:18:20:d4:9f:37:62:32:e7:ad:5b:47:2c:ea:
                    9a:8f:64:0e:58:66:ed:c7:14:1c:3d:12:9a:64:bc:
                    b3:0b:63:fc:cb:2e:e1:ce:81:8e:fd:f9:dc:30:da:
                    49:82:ac:30:53:fb:2d:c0:03:4b:09:06:26:cc:73:
                    54:c4:5e:30:2d:d6:75:b1:f9:d8:1e:66:26:25:a6:
                    bb:75:8a:ee:34:da:7d:44:d3:57:e5:ae:a1:b6:c2:
                    08:b4:e4:fd:85:8f:92:5e:c1:42:6a:f0:91:ab:e9:
                    12:cc:ad:55:62:5f:f7:53:b4:02:a5:ef:35:6b:16:
                    cb:b4:25:37:65:15:24:af:6c:3a:f2:4f:f6:ea:2a:
                    cf:5f:e9:03:56:b4:17:a9:7a:86:dd:7c:e2:d0:65:
                    c6:72:9a:82:42:64:db:58:a9:6f:c6:94:85:40:48:
                    fb:e1:bc:78:3c:03:37:43:50:c1:e3:5e:b3:db:5a:
                    e7:27:1d:78:c6:51:fc:39:c8:92:35:4b:49:57:f1:
                    45:30:f7:4e:6c:a4:dc:23:63:79:34:7c:4b:8e:fc:
                    20:77:cf:65:6f:69:e7:79:74:8e:5c:da:64:02:8d:
                    fd:7f:ca:e8:fe:dd:a5:88:2c:a5:b3:88:91:22:73:
                    0a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:58:83:F1:52:7E:67:46:E6:7D:63:F4:52:0D:53:B5:06:02:2D:5C
            X509v3 Authority Key Identifier:
                keyid:F7:79:F5:F0:28:89:85:AB:DE:09:82:7E:03:D7:87:A5:21:49:E7:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93n18CiJhaveCYJ-A9eHpSFJ5-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/aed381-45cc-44bc-a5c3-fe7963bec7d3/1/93n18CiJhaveCYJ-A9eHpSFJ5-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:c3:bc:0b:b1:50:9d:85:c4:95:e6:20:4a:7a:ee:dd:6c:77:
         54:35:ba:1d:0f:c2:b1:13:74:c4:45:54:bd:68:0b:aa:1e:eb:
         a1:94:d1:44:0d:eb:d9:e8:e4:84:ee:2e:ef:84:c9:fb:1b:7b:
         1e:29:7e:f2:e5:1d:93:92:85:31:03:a0:a9:d1:04:2e:2b:2b:
         f8:f5:f1:87:df:7e:90:75:21:a2:67:21:4d:31:5a:8c:1a:fe:
         08:26:21:d1:68:36:ba:1b:45:33:35:96:af:fe:16:40:bc:fc:
         65:22:22:12:9d:e1:56:c9:63:01:40:19:ef:e3:6c:fc:75:1a:
         d7:ff:5f:5e:1d:ab:e1:4e:24:0a:1b:b9:74:54:73:5e:62:76:
         20:de:9e:29:83:22:d4:25:27:56:2c:72:bb:ad:87:bc:83:c6:
         23:78:da:62:af:97:f2:9a:6b:08:06:33:87:46:48:5b:98:20:
         8a:66:06:91:c8:45:0a:4c:26:95:b9:5c:43:28:95:05:f6:6f:
         10:5b:5a:df:7a:d1:f7:f0:a6:3b:a2:0b:30:f5:bb:31:8c:ba:
         76:e4:0c:c5:d8:df:d0:fe:dc:0d:71:1e:90:3b:61:e5:f1:e5:
         e7:de:ba:b7:5f:ef:ae:47:af:e2:e3:8c:e8:5a:12:4c:1c:c4:
         b3:19:00:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:52:43 2026 by rpki-client