Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File:                     1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier:          hVNnVHdzWEXNc2aPNCx1pO/He/Ytg8cDGtbz28c2B6E=
Subject key identifier:   9A:F9:AD:67:CC:A4:2F:EF:CC:F1:50:87:83:5B:B8:C4:7F:2A:05:FD
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer:       /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial:       01A0CC35BEBC744717F9710EE76A7A472185
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number:          151B
Signing time:             Wed 23 Sep 2026 03:01:09 +0000
Manifest this update:     Wed 23 Sep 2026 03:01:09 +0000
Manifest next update:     Thu 24 Sep 2026 03:01:09 +0000
Files and hashes:         1: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: k/xOVqBYhviI47rsBRFTDk34c7UVzQPrNpU0FObFUfk=)
                          2: ysWkHcC4m8dES9G1oMzcknx5ywc.roa (hash: XtvZJNZbz5U46btMQCpXBJcIu+lpBGoaLYth/6jGpzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:be:bc:74:47:17:f9:71:0e:e7:6a:7a:47:21:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
        Validity
            Not Before: Sep 23 03:01:09 2026 GMT
            Not After : Sep 24 03:01:09 2026 GMT
        Subject: CN=9af9ad67cca42fefccf15087835bb8c47f2a05fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5c:c6:b5:3a:d7:68:1e:92:38:9c:71:5d:22:
                    43:5b:53:9a:73:97:64:56:3c:33:9c:cd:ac:90:65:
                    a6:8f:e2:29:dc:26:34:12:d1:71:f5:fe:9c:b9:32:
                    31:71:04:fa:74:84:50:e1:c8:95:2e:19:12:ff:1d:
                    9d:53:0f:c4:38:ac:69:a5:ae:15:23:c4:52:88:37:
                    3c:3d:49:c8:69:7a:d8:7d:9a:a5:00:c2:36:f9:47:
                    32:d1:2b:f1:43:56:43:2c:e8:41:d0:18:5a:ee:1b:
                    8d:32:e9:e6:a2:9a:39:aa:d0:a6:7b:83:23:d7:25:
                    71:25:9f:54:0c:e5:0d:66:5f:66:bf:b6:b3:9c:ef:
                    74:28:17:74:07:2b:b4:36:ed:1d:48:26:fb:1b:96:
                    6c:53:ff:56:50:b2:dd:1c:2e:ce:78:fe:cd:d4:93:
                    e0:aa:28:60:7f:d2:9b:3d:0c:91:b5:13:74:42:ec:
                    c7:7f:a8:0f:10:af:e4:8f:f3:30:56:22:5c:22:ba:
                    da:04:af:09:1e:c0:74:20:fb:ff:27:e5:d7:0f:85:
                    ab:aa:7f:e0:c5:8d:85:ab:e9:e4:7d:96:ea:0d:22:
                    ab:95:93:7f:f3:ff:e5:21:ff:cf:b3:cb:a1:51:ad:
                    a1:4f:25:fb:f9:a9:86:e2:62:08:0e:83:d5:0d:8c:
                    a8:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F9:AD:67:CC:A4:2F:EF:CC:F1:50:87:83:5B:B8:C4:7F:2A:05:FD
            X509v3 Authority Key Identifier:
                keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:55:e8:e6:ba:fe:31:c1:fb:47:c8:c8:5d:bc:36:49:08:4e:
         3d:fe:4d:e5:a6:2a:5c:6f:79:12:15:f4:8c:7b:19:c3:c9:c0:
         e6:d9:5a:dd:ca:e4:fc:83:25:ce:c7:91:18:e3:11:c8:d4:16:
         0c:1d:fd:26:d9:34:f6:5b:08:74:7f:fb:a3:96:4c:cb:c0:3f:
         fb:56:9a:43:79:0f:1a:42:60:54:a7:a1:b4:83:33:30:70:fa:
         53:1a:80:3a:c3:a8:6a:9c:93:99:e3:4e:c7:e8:c5:50:cd:35:
         0e:42:88:44:4f:bd:9d:8a:db:59:97:ca:13:48:c7:5e:f4:cd:
         e0:bb:ed:11:69:36:85:03:28:4d:e9:17:42:36:0b:84:b0:24:
         1e:a8:1c:2a:35:40:c8:12:c8:63:fd:90:ec:d5:ec:c9:05:bc:
         07:95:5a:95:ee:ca:33:c9:f4:64:d0:5c:d3:0c:04:24:6f:44:
         f9:bb:a4:2b:90:e1:18:88:b6:06:27:4f:aa:02:1e:0b:95:4c:
         5c:9a:24:21:50:5d:a7:ee:b9:ad:a5:c1:b1:9f:00:4e:21:2c:
         ac:69:07:55:d1:fa:a0:18:25:f5:66:d8:ba:7f:87:3d:83:c0:
         fd:f0:77:c2:c5:26:b6:6e:c3:da:12:d2:da:76:a2:67:95:0f:
         a1:c3:25:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:06:19 2026 by rpki-client