Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
File:                     1yGexzg_oGEEgN36YsP4LEAM1W8.mft (raw, json)
Hash identifier:          mpOc/E0C7NjHlJ2hQo2ofFlv4YXG5JzWpfUgLzDAzX0=
Subject key identifier:   9A:D9:05:E6:0B:9A:84:C3:6C:B8:E4:DC:5C:61:F2:61:20:9B:41:DB
Authority key identifier: D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F
Certificate issuer:       /CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
Certificate serial:       01A0CD7E6E4F5A5A45240AE0CF7267AC37B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
Manifest number:          1A80
Signing time:             Wed 23 Sep 2026 09:00:10 +0000
Manifest this update:     Wed 23 Sep 2026 09:00:10 +0000
Manifest next update:     Thu 24 Sep 2026 09:00:10 +0000
Files and hashes:         1: 1yGexzg_oGEEgN36YsP4LEAM1W8.crl (hash: xVAvliNcpJKqoepwnBZ39Da3MqDJExdou3ELVmfXHfQ=)
                          2: a2_9wwKBZMb8Nr8HZeMyqj6eUQ4.roa (hash: HfOJoJtir41J/f+2Eh1+jNbOpl4HZb7UfJBs0/Ovz88=)
                          3: cVHvV_AfygNUxK1wLw3TaNGFbjc.roa (hash: aLS2Onqdh8tUWZKfNWq/5VUb/NC+ZJDVJlHb2Z6u8NU=)
                          4: lY1GBZ0h_D6Nad3T73A7996pppE.roa (hash: oddByeoXBspHArAOTjct3jAkxiZljdHZeF0l/d8IWbc=)
                          5: wQxI0N6wQyPtnD-0275R19YpjGg.roa (hash: sn5K7ssLl2Ssv/wbg1cIpo1dVgEp9s7k3bxB61yjjzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:7e:6e:4f:5a:5a:45:24:0a:e0:cf:72:67:ac:37:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7219ec7383fa0610480ddfa62c3f82c400cd56f
        Validity
            Not Before: Sep 23 09:00:10 2026 GMT
            Not After : Sep 24 09:00:10 2026 GMT
        Subject: CN=9ad905e60b9a84c36cb8e4dc5c61f261209b41db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3c:d2:0d:9a:3f:55:c0:6d:b0:e5:9d:6c:51:
                    e3:30:f3:a3:15:0a:3a:9f:37:85:66:49:61:75:2a:
                    bd:c9:45:ff:7b:c3:5f:bc:a2:f7:9d:5d:7b:3a:2e:
                    1d:48:ef:06:f3:be:d8:e1:0f:d3:03:29:33:c4:bb:
                    88:3d:ee:be:75:14:e8:6d:4c:49:85:8c:83:92:8b:
                    7a:ae:7d:1d:97:19:7f:8f:3f:9d:39:19:13:6b:79:
                    1c:66:95:29:be:bc:f6:cc:36:fb:6d:b3:df:83:05:
                    02:58:5d:57:99:3d:7f:d0:f9:af:bd:3c:47:c6:fe:
                    b3:27:e6:63:73:cf:ca:75:f8:52:5c:95:dd:09:1c:
                    e0:f6:7b:ba:99:62:1f:0e:bb:80:f2:68:b7:bf:c4:
                    f0:83:73:ee:42:2f:2a:79:b9:5e:ff:72:98:8d:92:
                    6c:f5:da:72:ac:2b:e9:0f:fa:9f:72:7a:76:73:81:
                    3f:a3:0d:ee:6f:90:94:6a:48:94:0b:ba:c9:23:99:
                    7e:41:b2:da:88:62:48:0b:70:52:51:93:16:c9:cc:
                    2d:8d:09:f4:4a:b4:ee:b8:de:96:9f:39:5d:25:3c:
                    a7:63:46:63:3a:84:02:2f:ba:fd:d1:0b:14:79:b9:
                    82:68:94:38:40:24:9c:29:1f:56:d3:30:c6:d9:97:
                    27:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D9:05:E6:0B:9A:84:C3:6C:B8:E4:DC:5C:61:F2:61:20:9B:41:DB
            X509v3 Authority Key Identifier:
                keyid:D7:21:9E:C7:38:3F:A0:61:04:80:DD:FA:62:C3:F8:2C:40:0C:D5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yGexzg_oGEEgN36YsP4LEAM1W8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/fbffbc-ab82-4058-b8b7-d0c82a3cf4b6/1/1yGexzg_oGEEgN36YsP4LEAM1W8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:94:14:b2:e1:cd:d8:56:bb:8a:d7:4f:c3:b0:87:2b:0d:9d:
         f4:52:9d:41:d2:dd:4d:20:0c:46:f5:bc:8e:15:09:7c:2f:f4:
         6b:ca:c6:1c:0d:75:4e:7a:08:29:cb:b2:26:dc:c8:8a:ab:0f:
         0c:1d:2b:5c:c0:f8:8b:e8:3a:ae:48:24:ad:3f:b5:f4:ee:fd:
         2b:02:0a:b9:cd:75:9a:bc:e4:5b:65:32:e8:87:c1:45:1f:48:
         8f:29:4b:f2:ba:a8:83:f2:b2:6c:a1:6f:bc:80:6d:fb:0e:2a:
         e6:47:a5:4e:6e:c1:1c:dd:df:94:0a:1a:30:17:c9:6c:ea:c2:
         3f:0d:91:c9:37:81:f0:43:08:bd:d1:6d:67:2c:cf:59:ee:35:
         52:47:13:52:46:52:5c:40:e5:0d:fb:c1:ff:80:4b:1e:b4:ac:
         57:e1:01:95:1d:82:ce:5f:4c:49:69:e6:82:5b:34:88:6f:a5:
         81:3f:25:02:71:fd:99:f7:db:6b:26:0a:a3:51:27:6c:c3:e8:
         69:e1:01:4a:62:f9:c3:f9:c0:92:cd:28:a3:e0:8f:c2:c2:c3:
         f3:13:38:f9:a0:a4:c0:c3:5e:ed:fd:ff:8f:88:21:fd:ff:a5:
         0c:3b:02:b1:3e:cf:fc:1c:3b:e8:05:58:b0:ba:0b:ed:57:a6:
         1d:59:de:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 16:25:55 2026 by rpki-client