Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File:                     336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier:          wn0vE/ay3jlSGv5+Tib5A03mUuQ0J41g6da0p0LZD58=
Subject key identifier:   9F:63:D7:19:CB:A7:3F:92:6B:05:1A:E6:C3:7E:C8:65:50:17:B5:13
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer:       /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial:       01A0D91790F666714CFF89F7386347EE589F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number:          1732
Signing time:             Fri 25 Sep 2026 15:03:15 +0000
Manifest this update:     Fri 25 Sep 2026 15:03:15 +0000
Manifest next update:     Sat 26 Sep 2026 15:03:15 +0000
Files and hashes:         1: 2hPXOHV1ep_bItNryXyJ204trKY.roa (hash: InaQZQvl49hVhhc59GUlXsSa2F8CdPOC6OK58+ZvGxc=)
                          2: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: 0njrmu0yQy5nkwsysQa2VpvbwKHP4QAP4FxHMMIWkOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:17:90:f6:66:71:4c:ff:89:f7:38:63:47:ee:58:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
        Validity
            Not Before: Sep 25 15:03:15 2026 GMT
            Not After : Sep 26 15:03:15 2026 GMT
        Subject: CN=9f63d719cba73f926b051ae6c37ec8655017b513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:05:08:1d:f3:68:52:da:b6:29:30:27:d0:67:
                    94:eb:6a:59:70:5a:50:f7:ec:7e:ff:6e:a7:84:10:
                    9c:7f:62:44:e3:cf:b4:91:3e:56:6b:35:04:a6:45:
                    5a:7b:5d:fc:ea:2f:9d:46:eb:52:b3:15:d2:fd:0e:
                    5b:5a:84:29:51:d3:14:dc:94:ac:ad:94:81:d5:db:
                    de:49:8a:d0:bf:8f:7c:2c:6b:bf:9b:a0:a6:e4:1a:
                    8a:bf:70:1e:00:ee:91:bc:2a:d3:e6:07:b6:b9:fd:
                    be:ae:93:05:b1:fd:ba:b1:b6:eb:9b:20:d8:61:0e:
                    9e:0e:e7:88:a2:6e:5d:8e:55:0c:d5:ed:90:4a:a7:
                    27:b3:65:cb:52:f5:df:3a:b5:26:5b:ee:c0:5f:57:
                    a1:b6:83:3c:6c:ba:a1:a3:17:8d:f3:33:5a:ca:76:
                    d4:c6:20:91:9b:89:52:fd:92:67:d8:a0:e7:39:2e:
                    ac:19:60:a0:0a:e5:3d:93:c4:f1:36:37:22:16:1d:
                    3a:ea:34:dc:3b:fb:02:4d:91:87:19:20:e2:3e:a5:
                    45:96:98:f9:26:55:f6:aa:14:f4:3c:48:13:b3:70:
                    ec:9f:97:e2:5e:7b:b9:07:73:3b:25:57:f5:64:8f:
                    e7:a1:30:27:bd:51:f9:10:54:83:1d:46:b8:98:48:
                    d2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:63:D7:19:CB:A7:3F:92:6B:05:1A:E6:C3:7E:C8:65:50:17:B5:13
            X509v3 Authority Key Identifier:
                keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:14:b5:f5:f4:d8:22:30:56:43:e4:8c:48:95:61:bc:07:c7:
         11:2c:e9:32:3d:0b:4b:17:e5:78:1a:93:ee:c4:e8:ac:d6:2d:
         08:30:54:0a:2f:64:10:a0:5a:c3:fb:76:96:fb:bc:3a:16:f5:
         1e:65:45:41:c1:a8:4d:48:17:f4:01:73:88:b0:0e:3c:bd:08:
         0f:1d:f7:8b:83:55:03:75:04:ca:09:a2:f0:58:10:59:d3:bb:
         0f:a0:4e:4e:f1:34:ec:79:d4:cd:03:21:e6:1f:ce:f4:c3:2f:
         de:59:19:6d:49:dd:65:10:6f:66:dd:7b:f3:7d:24:fd:ce:35:
         30:d4:f3:70:1d:c5:46:82:69:54:2d:3b:d9:5f:e6:3f:00:9c:
         48:6e:55:86:d3:13:e9:8f:db:7b:2b:78:53:d4:7f:1b:30:b0:
         eb:e3:4c:a1:05:03:7e:4e:f8:72:6e:1d:d7:a1:0b:4a:cb:b4:
         99:45:cf:8e:ce:67:97:a9:38:88:c4:e7:e0:37:71:c4:e0:f9:
         02:ba:17:27:22:32:d5:3e:d1:bc:c9:82:ff:aa:93:37:63:62:
         fd:5d:70:ab:03:bc:e5:df:50:e9:a2:29:cc:45:b8:5f:bf:c1:
         4e:a5:c9:3c:cb:53:b7:7f:81:70:ce:3d:92:a2:8a:1a:e5:b0:
         19:7b:a7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:03:25 2026 by rpki-client