Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
File:                     shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft (raw, json)
Hash identifier:          VaGNVZZq+oj6Jk5j8CrIliLWwz0VCEMPLNsXe5tAH2E=
Subject key identifier:   8C:EF:DB:F7:4C:26:8A:52:D8:0B:33:8B:A6:18:6B:85:6B:FC:5D:F9
Authority key identifier: B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1
Certificate issuer:       /CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
Certificate serial:       01A0D53916754AB87BB4B6B067161B81D435
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
Manifest number:          19D7
Signing time:             Thu 24 Sep 2026 21:01:23 +0000
Manifest this update:     Thu 24 Sep 2026 21:01:23 +0000
Manifest next update:     Fri 25 Sep 2026 21:01:23 +0000
Files and hashes:         1: p64_xVoksOfjBTpAEK-sqxOtfyo.roa (hash: Mpzgzqkjd9r2rYbbw0eBHseWMwAwQ2eJtwJ2+TbcIMI=)
                          2: shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl (hash: 3It3C0v1JeXiIbE9ObVGV66iYNKlGZ2nhyCgRzMrtM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:39:16:75:4a:b8:7b:b4:b6:b0:67:16:1b:81:d4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b215cd8e6db35441984d9c7dfc9afb653e55dff1
        Validity
            Not Before: Sep 24 21:01:23 2026 GMT
            Not After : Sep 25 21:01:23 2026 GMT
        Subject: CN=8cefdbf74c268a52d80b338ba6186b856bfc5df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f9:63:aa:9d:ed:10:48:32:2a:6e:1f:21:84:
                    94:57:8d:ab:77:da:3a:30:50:cd:b2:39:f1:26:9a:
                    e4:91:14:b9:a2:79:60:12:6f:bb:7d:c2:a6:dd:55:
                    18:14:0a:ee:fe:8b:90:87:29:2b:d3:01:a4:ea:d8:
                    ab:32:16:01:fd:91:ce:e2:48:74:7d:eb:8f:5f:be:
                    9c:3e:5f:0c:52:ee:be:b8:a8:80:f8:82:b4:db:8a:
                    52:e3:7f:87:44:a6:f3:82:77:43:a8:77:c1:12:1b:
                    47:38:57:e1:af:39:d0:ea:28:76:5d:b7:2d:7e:8a:
                    3a:c5:0e:c3:7b:6e:5c:61:e7:a5:4d:ec:29:5b:0d:
                    32:55:ed:7f:ce:05:b5:78:30:65:54:15:74:ab:54:
                    45:4c:af:48:49:2f:5d:02:7a:2a:92:7a:03:dc:85:
                    ce:13:a3:29:37:a5:fb:f5:72:ac:bc:0c:4a:dd:91:
                    d3:96:e2:ee:eb:dd:31:06:92:e6:d4:15:86:81:f6:
                    83:b5:00:32:bf:4e:65:08:44:89:e3:28:c8:04:88:
                    7a:e6:f1:69:38:05:13:7b:54:2d:4c:ec:b5:bd:30:
                    d0:dc:64:e0:c2:ae:95:bc:50:a2:f2:d6:d7:1e:8a:
                    e5:dd:f5:7f:69:8b:ee:f7:5f:60:5d:a9:dc:df:c9:
                    73:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:EF:DB:F7:4C:26:8A:52:D8:0B:33:8B:A6:18:6B:85:6B:FC:5D:F9
            X509v3 Authority Key Identifier:
                keyid:B2:15:CD:8E:6D:B3:54:41:98:4D:9C:7D:FC:9A:FB:65:3E:55:DF:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38b792-18fb-4bed-990c-e950d87f8e25/1/shXNjm2zVEGYTZx9_Jr7ZT5V3_E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:1f:87:e8:79:b1:a7:2b:21:56:81:12:cd:8c:48:d8:ff:c1:
         0d:05:17:81:64:02:a4:9b:3d:3e:c2:d5:1c:67:c3:bb:e3:9a:
         8a:00:e8:63:c2:51:16:91:03:2b:c7:b4:f8:5a:9e:f3:14:b8:
         75:b9:80:ba:ac:a6:32:1e:33:50:71:f6:8c:6c:33:77:58:f2:
         03:31:33:a7:8d:19:60:8d:41:fe:2f:4f:07:cb:84:c6:6a:2e:
         7b:5b:d7:1a:b3:04:7e:11:94:77:12:ca:4b:f8:1e:2a:05:8f:
         48:d4:70:ca:a5:06:a3:53:81:27:0b:58:d8:b3:b1:e6:31:96:
         33:75:b3:52:62:f4:13:cc:7a:1d:8e:82:be:6a:de:29:5c:ba:
         1a:f3:2f:6a:98:f3:4b:81:db:99:c8:91:99:a4:84:db:fd:51:
         bd:69:c5:7f:76:cc:bf:10:78:1d:e2:ec:f4:dd:a1:c0:2f:0b:
         35:2b:53:c7:12:5b:20:70:1d:8c:c8:c3:b9:1c:53:14:b0:52:
         d7:46:8a:ce:d7:1d:ca:7a:f4:bb:e6:0f:0c:6b:71:87:26:2a:
         0e:d1:26:d5:a8:3e:ab:b0:d2:9d:5b:c2:9f:7e:51:73:16:17:
         c7:23:51:07:07:4e:4a:e4:ee:22:08:56:31:af:c0:e5:57:10:
         8b:a1:71:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:10:31 2026 by rpki-client