Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
File:                     nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft (raw, json)
Hash identifier:          eHA9XltNlH1IAyr9l5kuQ0Uhom65GlW7bzgC38mwuR8=
Subject key identifier:   1E:2C:9A:C5:7C:A0:24:CC:1E:78:BC:AB:1C:BE:42:EA:03:24:8E:D1
Authority key identifier: 9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
Certificate issuer:       /CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Certificate serial:       01A0D5028B9ED02135420EEF5257823FBF25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
Manifest number:          1A71
Signing time:             Thu 24 Sep 2026 20:01:48 +0000
Manifest this update:     Thu 24 Sep 2026 20:01:48 +0000
Manifest next update:     Fri 25 Sep 2026 20:01:48 +0000
Files and hashes:         1: 1-eiJaBH2kYrPZhQkGjIEcyrY7IM.roa (hash: gzeqOddWkamgLifKoDiz8pUqA/+BC13d2Fw5TMWD4jQ=)
                          2: Zq98Iidw2cw0Zo72hXFz8p4vmU0.roa (hash: QzQp2VEgOsKH9qFSE3tdbQaitBr0SbkYp6vIsvTA6fc=)
                          3: m2iSJFXrSMffknc75dt6nX4q_Ew.roa (hash: PpUMfeh4JgwhVE55OoPUjweIHDdfcBKVjcHcumEVNd8=)
                          4: nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl (hash: aINImKGkgucsjFoN0LFnpMcdQ6tcTfCjzZooGxLO+HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:02:8b:9e:d0:21:35:42:0e:ef:52:57:82:3f:bf:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
        Validity
            Not Before: Sep 24 20:01:48 2026 GMT
            Not After : Sep 25 20:01:48 2026 GMT
        Subject: CN=1e2c9ac57ca024cc1e78bcab1cbe42ea03248ed1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:62:6e:51:24:5d:64:03:7a:81:d5:26:3e:65:
                    7f:ab:44:28:02:c0:fb:06:67:09:f9:12:5a:61:55:
                    4f:7e:69:6b:a6:18:08:0a:0d:02:2f:f0:77:ef:02:
                    23:2d:37:35:a1:be:5f:72:15:77:99:8c:42:73:1b:
                    f8:ad:97:d9:b6:05:57:4a:f6:1e:6f:b0:72:f9:34:
                    6e:c9:12:13:f6:ee:38:77:74:e0:3b:5d:f5:0b:bc:
                    ab:fd:0e:79:06:c9:2f:ab:45:9c:ef:b6:d5:df:ad:
                    f1:d1:bf:70:1b:90:a6:05:b2:37:ee:3b:79:48:95:
                    f5:c7:a4:b1:80:da:82:a9:ee:83:f2:99:97:2b:5d:
                    e6:03:31:c8:98:1b:71:d3:0d:bb:7c:29:8e:b0:e6:
                    cb:52:e1:51:c6:ec:e3:25:d7:bf:41:f7:ff:48:9c:
                    f9:fa:9a:ad:3c:ab:86:3b:ec:4e:51:53:76:86:38:
                    73:44:8c:d5:6e:a6:da:e3:8b:80:65:6c:54:73:eb:
                    3b:c0:98:bd:e5:22:42:de:26:5c:e7:81:50:d9:89:
                    92:33:f6:f0:13:3e:e0:72:0b:47:28:a8:7f:22:e6:
                    59:07:14:73:9a:ec:6a:92:dd:57:fa:ce:22:40:9f:
                    de:ff:df:5d:a8:2b:5b:45:70:52:3c:62:4b:25:12:
                    12:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2C:9A:C5:7C:A0:24:CC:1E:78:BC:AB:1C:BE:42:EA:03:24:8E:D1
            X509v3 Authority Key Identifier:
                keyid:9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:7c:fa:a7:be:e9:58:6c:8b:4e:eb:4f:47:c6:b8:67:4b:ca:
         fd:76:28:66:40:b9:11:cf:a3:b1:0b:13:b2:4f:d5:ea:95:19:
         0f:88:f7:67:a0:38:c5:b7:a6:66:08:d8:69:6f:14:f5:8c:f0:
         be:08:29:18:f9:d6:4b:6a:2c:59:fb:32:dd:e5:81:92:37:77:
         76:ee:2a:83:2d:38:cf:72:23:7f:aa:9d:1f:f4:5b:c5:d6:5d:
         14:23:1b:ca:89:05:e1:1e:43:3e:f8:68:b2:36:f3:4a:92:69:
         74:f2:71:a0:f2:7f:cb:95:45:3a:5c:4e:20:31:09:ec:90:1c:
         72:88:e1:52:3f:ee:ef:d0:d3:95:40:e6:a1:cf:8b:f7:e2:25:
         df:f8:e5:52:22:86:bb:71:81:7f:67:93:1f:93:e9:24:48:9a:
         1c:de:97:51:32:56:c0:40:47:c3:c1:5a:d9:b7:64:94:1a:a0:
         42:c7:3b:b6:b1:35:fb:08:71:ab:15:90:a0:ad:12:76:1f:db:
         f2:d8:45:48:ea:e1:52:b0:7f:c9:54:5e:65:c8:80:e0:17:b8:
         70:0a:06:3d:ac:df:7b:4f:c0:ec:ca:c2:a4:0e:40:43:8f:b5:
         76:cb:74:8b:63:08:88:8f:cf:a4:ea:76:4b:3f:bf:87:e2:6c:
         d8:61:39:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:45:52 2026 by rpki-client