Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File:                     xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier:          hIf3RWKyrh5UGC/PvuT7Nb8y4+F0NHCkhWRJFJ0+kOs=
Subject key identifier:   F2:BF:4E:11:62:BC:ED:ED:1B:3B:4C:6F:CF:78:5C:46:56:80:47:45
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer:       /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial:       01A0CD118C7DB3A3DA8C650211DFB32B77AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number:          1A6B
Signing time:             Wed 23 Sep 2026 07:01:14 +0000
Manifest this update:     Wed 23 Sep 2026 07:01:14 +0000
Manifest next update:     Thu 24 Sep 2026 07:01:14 +0000
Files and hashes:         1: BQKL8EXCPvyOQg1ICU181HzsTLY.roa (hash: MQTZW+TVECgfYFhuLaoeF6hUd6ELHRAnYHxRk4WvfLE=)
                          2: FxY1RAn7Uc02QNfQHdB91asNvfo.roa (hash: XFxgE3CskWpWNCg7s6TQKuMZYsJq+2wXqoHIuIsrGSk=)
                          3: mvSatyfuo61e-RTaG2TAjXDZEec.roa (hash: Wd+3k5bQsb75PtYForkA7tIC7S5S2MMNM7YiFG0yOOs=)
                          4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: ikjpNVUF7KWzL2UXaG8hOi5BkZr/hFEh35G43vPUyD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:11:8c:7d:b3:a3:da:8c:65:02:11:df:b3:2b:77:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
        Validity
            Not Before: Sep 23 07:01:14 2026 GMT
            Not After : Sep 24 07:01:14 2026 GMT
        Subject: CN=f2bf4e1162bceded1b3b4c6fcf785c4656804745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:aa:83:29:b5:ec:95:99:cf:13:94:98:db:2e:
                    46:3c:9c:00:b3:11:b0:15:7f:57:d8:02:c4:3b:cd:
                    db:16:0e:cc:b6:e5:a7:7d:7b:c8:87:2f:c8:b4:48:
                    5e:2c:1d:88:af:6b:33:b9:f8:73:45:fd:8f:33:6d:
                    7f:ee:98:e0:70:57:9e:df:de:af:b4:3e:1e:25:40:
                    7e:0b:4b:cf:e1:fe:6a:b8:e6:aa:3f:69:79:33:17:
                    34:3c:3c:0b:86:be:e9:35:82:3c:21:62:00:85:69:
                    dd:a4:e3:a5:1a:fb:e4:8c:a6:d3:bd:a5:a5:d3:0e:
                    c5:48:30:3c:ff:68:07:d0:75:2d:bc:61:43:2e:94:
                    63:34:87:d4:bd:5b:7b:88:2d:76:fc:b5:b1:30:86:
                    d5:9b:48:29:07:2c:fa:64:b9:06:53:2f:80:6b:b4:
                    8a:49:8f:b1:75:91:26:89:9c:a2:8e:e3:ad:07:80:
                    31:87:0b:7c:e2:ce:ed:3e:06:a8:61:6b:8d:32:1e:
                    87:41:2b:82:d7:3e:b3:6e:2c:47:29:ba:04:cf:ce:
                    df:1c:9c:26:bf:18:07:7e:1a:c2:00:5d:9e:62:54:
                    8e:c5:d8:ed:a3:ce:f0:cc:36:99:5d:0f:87:8c:47:
                    b7:da:d2:c1:d0:3a:d7:30:c8:47:52:8c:76:e5:a0:
                    f7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BF:4E:11:62:BC:ED:ED:1B:3B:4C:6F:CF:78:5C:46:56:80:47:45
            X509v3 Authority Key Identifier:
                keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:fe:bf:4c:f4:05:18:b3:7e:8e:97:b7:a2:6c:f7:53:ec:45:
         fc:fd:4f:c5:fd:17:14:1b:12:b0:0c:3e:24:f7:66:c6:3e:7d:
         30:f8:66:79:68:0e:4c:02:12:4d:85:c0:d2:1d:97:3d:88:34:
         c9:7c:29:64:cd:ef:19:c0:83:27:7f:44:2a:cb:1c:a7:f4:a5:
         3b:c9:4f:9a:fc:a1:ed:d1:6f:aa:cd:5a:20:14:bc:09:49:c5:
         cd:91:13:64:c7:76:20:7e:1f:84:d9:9b:16:31:03:68:ce:ae:
         df:89:c6:4a:df:86:45:ad:62:01:a1:30:de:01:49:c4:7f:ef:
         af:dc:94:cc:01:a3:f1:40:00:89:d3:49:48:f2:f0:13:f0:6d:
         28:65:4c:91:34:05:fd:9a:f2:7d:61:34:45:c4:47:39:6f:66:
         38:78:ca:1e:0d:67:f7:74:54:57:4e:d4:0a:97:b6:5f:aa:98:
         0e:63:6c:4c:84:42:75:65:c1:6b:0d:71:a4:17:83:36:2d:15:
         92:d2:a4:a9:e0:5a:f2:da:90:d9:30:38:23:f4:2c:fa:be:a9:
         b2:4c:4e:1e:9d:d2:68:7f:e1:bb:6d:1a:5b:bc:38:84:c2:2f:
         82:4d:2d:09:e7:07:de:03:d3:3d:be:f6:91:e9:85:26:a3:e1:
         a2:e4:5d:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:58:32 2026 by rpki-client