Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
File:                     IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft (raw, json)
Hash identifier:          gfccjnXNs0ZA4Xxy8u5b/NriJcJKDUUxjas7RtbOTAU=
Subject key identifier:   E4:26:F5:DB:D2:B0:10:FE:22:48:72:6F:FB:6C:29:3E:36:AF:10:B0
Authority key identifier: 22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03
Certificate issuer:       /CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
Certificate serial:       01A0DE7325F1047E2D543E8BB150F15F54E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
Manifest number:          0F0A
Signing time:             Sat 26 Sep 2026 16:01:23 +0000
Manifest this update:     Sat 26 Sep 2026 16:01:23 +0000
Manifest next update:     Sun 27 Sep 2026 16:01:23 +0000
Files and hashes:         1: 3_EpI3KZKzbfeK2XXEoAgU5pxR8.roa (hash: nhz/XR/19vb+kuAg/iFUKPIFqPbUWtZOaM60Y8UGbXw=)
                          2: 4Hbh9kgEtk0ETbC9Jsg3Fsu3-DI.roa (hash: qkbQr2FGRu+j6lNNaiItQZd0nGSc0yYN6c1c29qls04=)
                          3: IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl (hash: NVrDmpGUoYY0kR9Q99qeetsc9sRgvx1TqnnrMLYMM8Y=)
                          4: oerPqNmEjqxbGPl4Gs_7bUETdN0.roa (hash: EfuWXG0YIgrPAIfQYw0siImFKnCmmDF+zPQxYy5oo28=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:73:25:f1:04:7e:2d:54:3e:8b:b1:50:f1:5f:54:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2292d96dfb66cb18069d8bd15c9e90cd9124f003
        Validity
            Not Before: Sep 26 16:01:23 2026 GMT
            Not After : Sep 27 16:01:23 2026 GMT
        Subject: CN=e426f5dbd2b010fe2248726ffb6c293e36af10b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b2:22:3c:0f:9c:58:22:a9:e4:f3:d4:2d:3c:
                    95:c0:02:32:b1:ab:74:b2:e6:0b:ac:fd:73:4e:41:
                    de:79:4e:01:4e:21:ab:7c:c8:e9:e6:9b:40:0e:17:
                    64:2c:e6:81:ce:5a:ae:22:25:5f:29:7f:7d:7f:ca:
                    12:96:a4:35:46:97:04:a7:37:d5:ce:93:e4:52:c1:
                    cd:93:2d:9e:e8:10:8c:f8:87:90:67:99:49:8e:77:
                    c1:85:26:c1:17:ad:fc:ec:e6:91:bf:a9:94:9f:a0:
                    1a:a3:53:c3:ef:46:10:80:a3:d0:2a:a1:49:87:f8:
                    79:f7:fb:66:af:67:a6:0d:0c:f3:e2:46:95:32:16:
                    9f:ac:1e:88:37:3f:a7:86:93:3f:65:0f:4b:99:3b:
                    e3:b8:76:ec:53:9b:39:7c:5d:f5:ec:05:f4:a8:a5:
                    37:1f:39:04:f3:0f:7a:aa:83:a6:3f:6b:3f:a9:51:
                    a8:d4:ef:9c:af:c5:1b:71:4c:1d:73:4c:21:99:80:
                    97:7c:7f:52:4c:12:37:3c:cc:de:3f:1e:46:48:7f:
                    4b:eb:7d:e7:91:07:75:fe:a2:01:3d:69:7e:f6:3c:
                    4b:77:89:93:e1:30:49:7b:cc:f9:d8:86:78:03:85:
                    41:cf:32:a7:31:f6:db:8e:6b:4e:c0:09:ba:38:2e:
                    9b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:26:F5:DB:D2:B0:10:FE:22:48:72:6F:FB:6C:29:3E:36:AF:10:B0
            X509v3 Authority Key Identifier:
                keyid:22:92:D9:6D:FB:66:CB:18:06:9D:8B:D1:5C:9E:90:CD:91:24:F0:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IpLZbftmyxgGnYvRXJ6QzZEk8AM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/e77412-b0d7-4104-926a-99ee616ca85b/1/IpLZbftmyxgGnYvRXJ6QzZEk8AM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:51:54:ec:c3:87:60:f1:a1:61:c2:a7:fd:66:49:6d:8e:dd:
         6e:20:07:0b:a5:ea:8c:bf:3c:49:7b:3b:bf:4e:34:70:4f:ba:
         1b:37:fd:fd:83:cb:05:b8:62:d6:1a:bc:92:27:60:ac:ac:45:
         64:1d:25:e5:ab:37:4a:bb:36:8e:81:b1:e9:a5:51:db:4b:10:
         ff:e7:4a:c8:df:c4:f3:04:5e:0c:00:79:4f:d7:e6:79:cf:c3:
         d1:61:da:61:b5:75:19:2e:d3:b0:59:89:5b:1f:5e:95:27:5c:
         15:55:d4:82:40:fd:31:37:2c:7e:42:e4:f6:e3:ea:f6:41:13:
         57:67:aa:dc:f1:fc:08:03:6d:c9:85:f4:b5:b1:34:a2:a5:09:
         8f:0e:85:7d:57:72:cf:74:fb:35:9b:48:5a:9a:59:88:de:ca:
         52:46:48:75:06:dd:eb:75:6f:c2:c8:3d:05:63:fa:f6:c0:6c:
         12:2c:a3:a7:9b:f4:7c:ed:27:c1:79:06:28:a8:65:56:50:6c:
         1b:35:e0:81:5b:6f:9e:8b:11:6e:d6:b3:7a:c3:91:89:92:f4:
         ab:59:c1:20:6e:6d:8f:82:ea:2e:6b:73:cd:2a:a1:32:34:71:
         05:96:30:f3:78:73:35:d1:48:71:c1:1d:c9:ad:07:21:c3:68:
         3d:c1:de:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 00:34:58 2026 by rpki-client