Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
File:                     A9YCueHaK1aN9US9pQ5BV5m7seI.mft (raw, json)
Hash identifier:          G4SDH78G1q9m0TytFUsQNfbwn3WFxbgtSTGvDqycOpc=
Subject key identifier:   1B:16:18:ED:C2:0D:11:AB:BC:1F:32:57:70:CB:49:1D:65:E8:90:D4
Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2
Certificate issuer:       /CN=03d602b9e1da2b568df544bda50e415799bbb1e2
Certificate serial:       01A0D0B6FF31C5A4F30B85356D38AD27CF53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
Manifest number:          0E82
Signing time:             Thu 24 Sep 2026 00:00:48 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:48 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:48 +0000
Files and hashes:         1: 1-SeUDqI8Ro4aGCyTtd-jgFozlto.roa (hash: 8a5+u2VImSUXdz/RNQV3GzWRx7Dr6+wCatlfsz939ds=)
                          2: 11o2iLgDPCuePLQgq2cbeg8IOSU.roa (hash: 7FivvoKuc8ZAaHXETYuK4eG8oIMl6d9f2SuMter7leo=)
                          3: A9YCueHaK1aN9US9pQ5BV5m7seI.crl (hash: jQhgumrPZHvY+MULUuVhNHOnC9qgUnX5SZc2bv8vLzs=)
                          4: apdlR9yvflDTKKIXJ67fjl8xDOo.roa (hash: bK32lK6qoaOVabJNvvUP8TTPkjqexdWgmiaw7lt28kY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b6:ff:31:c5:a4:f3:0b:85:35:6d:38:ad:27:cf:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2
        Validity
            Not Before: Sep 24 00:00:48 2026 GMT
            Not After : Sep 25 00:00:48 2026 GMT
        Subject: CN=1b1618edc20d11abbc1f325770cb491d65e890d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:db:a2:a4:8f:b2:3e:1a:bc:17:a6:1e:7d:1b:
                    6a:be:fd:a3:82:9d:d8:e4:ef:64:4a:16:b8:44:44:
                    36:47:80:0a:f5:f2:f8:52:c2:b8:d4:49:ef:84:17:
                    f6:aa:e6:65:fa:10:c4:a0:ac:19:c6:f3:02:fb:17:
                    4d:3a:81:cd:48:84:6c:32:ab:c9:cc:dd:90:f9:1a:
                    2b:ab:5a:9a:32:90:16:d9:df:ca:ca:67:28:cb:10:
                    8f:f3:40:47:72:d3:68:ff:a5:e9:81:20:48:9b:8f:
                    61:3f:7b:6d:9b:eb:3a:16:74:47:55:40:c1:6b:33:
                    88:a8:d6:88:ee:d6:43:f1:89:af:8a:3e:9d:71:78:
                    08:28:ab:6c:92:15:88:67:d5:78:83:7b:65:1e:01:
                    3a:05:b9:ec:0b:3d:a3:63:9f:32:a1:54:7d:c9:a5:
                    8d:f6:52:93:72:39:7e:ff:8d:19:da:d2:f0:7d:2f:
                    1b:bb:cb:91:ec:38:18:3b:82:6a:86:b9:ae:fb:10:
                    30:a7:01:f1:54:8c:52:cb:cd:11:97:f5:13:b5:39:
                    ad:ef:0d:43:f9:4f:7e:49:2b:9c:d6:e0:b3:53:09:
                    18:5b:ca:ba:c7:dc:c9:77:a2:ae:5a:60:c6:89:1c:
                    82:eb:7d:c2:4f:0c:ee:f2:04:e1:bb:2d:f2:f3:cc:
                    87:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:16:18:ED:C2:0D:11:AB:BC:1F:32:57:70:CB:49:1D:65:E8:90:D4
            X509v3 Authority Key Identifier:
                keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:e1:0a:50:d7:8a:3d:55:07:f1:8a:dd:fa:28:f2:c5:87:72:
         c9:ae:09:29:47:91:89:0a:5c:21:0e:c0:83:bb:37:24:66:74:
         be:ea:3e:7c:a3:04:15:c8:77:2c:52:ee:9a:9d:65:0e:2d:44:
         99:a5:48:aa:4e:2d:91:47:61:0b:74:7e:26:91:e2:8c:12:8f:
         bd:e0:d0:b1:f2:20:84:c1:ed:62:e5:db:ba:65:43:22:3a:37:
         71:a6:0f:c4:39:6d:d7:68:bc:43:2a:a1:c3:e6:35:4f:aa:da:
         29:54:d7:48:12:0a:43:d8:6a:50:62:a4:e6:d6:81:40:56:e1:
         a3:5f:2e:ca:14:8d:dd:31:57:b6:4a:97:df:9e:22:28:d1:b0:
         2c:f6:e5:50:de:4d:78:35:09:b0:12:26:aa:9b:e4:51:d7:23:
         af:53:34:a4:b4:2f:3a:c3:18:c7:de:c9:2a:bf:58:2c:a4:13:
         51:02:c5:a7:27:3d:41:57:cb:4b:be:7a:eb:74:3e:30:eb:5d:
         d4:56:2d:80:46:07:ef:72:c6:ff:68:14:5f:2a:15:f1:24:81:
         a5:bd:05:e9:e1:85:c0:7c:1d:45:74:08:3a:42:b7:c1:d3:23:
         65:85:87:43:f2:75:f0:77:ae:36:56:e3:32:2b:2c:90:02:59:
         58:f4:28:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:50:20 2026 by rpki-client