Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
File:                     sVyi9obU5ISnfDTBc0dr9p0je30.mft (raw, json)
Hash identifier:          qsegIOXvEQWivL7x9hDHILn87+eR9hxqGvrehNphjBI=
Subject key identifier:   29:73:FC:24:AC:0C:9B:D2:3C:B8:9C:86:19:2E:02:CA:DA:37:0C:D8
Authority key identifier: B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D
Certificate issuer:       /CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
Certificate serial:       01A0E25086DFDAC332FF9DE2F29E8605AE87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
Manifest number:          161F
Signing time:             Sun 27 Sep 2026 10:02:03 +0000
Manifest this update:     Sun 27 Sep 2026 10:02:03 +0000
Manifest next update:     Mon 28 Sep 2026 10:02:03 +0000
Files and hashes:         1: Ccbi6HrRjYv5g2_oCb7PGuZTGkQ.roa (hash: juQkDFo0AIVz1+RSIS9ayHrDC2gpBK7MmNeN9tyG2go=)
                          2: sVyi9obU5ISnfDTBc0dr9p0je30.crl (hash: K9PrfjoAy7pkiwM0yNBp2yfZnNPDpy7aRv5fxP+owQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e2:50:86:df:da:c3:32:ff:9d:e2:f2:9e:86:05:ae:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b15ca2f686d4e484a77c34c173476bf69d237b7d
        Validity
            Not Before: Sep 27 10:02:03 2026 GMT
            Not After : Sep 28 10:02:03 2026 GMT
        Subject: CN=2973fc24ac0c9bd23cb89c86192e02cada370cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0f:22:7e:f2:29:b3:1d:0d:a0:3b:aa:36:92:
                    e2:d5:4c:0e:82:99:47:0c:98:8e:b3:92:43:ba:a2:
                    94:f5:71:2b:fb:ac:35:e2:1b:12:61:41:59:a3:d6:
                    69:8b:c3:9f:48:dd:47:d8:f7:ae:f6:02:4c:16:f9:
                    17:90:3d:f1:b5:a6:ef:69:c0:4d:0a:b4:93:a5:e5:
                    d8:10:3c:ec:46:37:0b:b1:e3:7c:fc:25:04:f7:b6:
                    6b:8a:4e:83:35:13:d2:92:8f:a2:85:70:fc:d6:de:
                    c2:36:22:9f:8c:98:d2:0a:09:26:e2:d0:0a:87:e9:
                    f7:80:fa:9f:e6:02:6a:6c:75:f7:cf:2f:65:ce:c7:
                    9f:c8:0f:60:dc:12:7f:cf:fc:7c:fa:21:db:4b:94:
                    f9:fc:b9:df:4e:10:16:73:d2:ce:9c:78:b4:64:6f:
                    18:6e:f8:74:25:49:ec:9e:eb:b4:53:5f:3a:ad:30:
                    f5:a1:dd:87:98:c2:f3:e2:a4:37:c5:cb:4e:f7:25:
                    2a:a3:61:16:40:f4:db:fe:02:3d:45:51:89:62:10:
                    5d:64:23:29:f2:02:62:9c:7b:80:19:f5:42:c9:a7:
                    86:b3:b7:ac:ef:be:88:1c:f6:b1:4c:80:f4:3f:27:
                    fe:b8:1e:7b:3a:e4:5d:2d:d2:ed:8a:82:aa:5e:c2:
                    71:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:73:FC:24:AC:0C:9B:D2:3C:B8:9C:86:19:2E:02:CA:DA:37:0C:D8
            X509v3 Authority Key Identifier:
                keyid:B1:5C:A2:F6:86:D4:E4:84:A7:7C:34:C1:73:47:6B:F6:9D:23:7B:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVyi9obU5ISnfDTBc0dr9p0je30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/18da7e-d2f0-4597-9b3d-385f3f52a96b/1/sVyi9obU5ISnfDTBc0dr9p0je30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:1d:15:b6:53:90:88:e6:3a:31:6a:ef:36:8c:52:88:16:78:
         f6:df:3d:bd:e2:31:66:d8:7e:8a:1e:86:bf:85:d8:d8:38:c9:
         58:69:5c:e5:3d:e2:4d:0d:b5:e4:00:d1:d4:b9:07:d3:5c:0f:
         a1:bb:3f:03:e3:ef:80:d9:01:5b:b7:36:44:48:73:62:2a:e9:
         25:d5:31:cd:30:50:0a:5e:1f:19:3d:00:bb:ed:99:11:29:6e:
         2a:1d:d7:ef:d6:75:92:70:25:ea:d4:ec:37:e8:5f:87:ba:49:
         aa:f0:d3:32:70:ea:e7:40:c6:7d:d0:ae:b6:c3:92:94:e1:c4:
         8a:ac:8b:e8:55:fc:55:e2:b4:59:10:2f:88:91:55:d5:1a:15:
         ec:b6:e0:3c:e8:65:c5:22:da:2c:75:02:05:8e:21:4b:4a:c1:
         b5:dc:20:b5:9f:1c:61:e0:51:97:ef:c4:d7:7f:85:8e:fb:99:
         85:00:11:4f:7d:87:aa:3b:2b:33:9d:66:63:3b:5a:58:a8:74:
         14:43:a6:f1:e6:3d:81:81:32:cc:95:ee:de:b6:5b:00:76:d5:
         5d:20:d8:2b:56:d4:5c:09:92:53:ba:36:96:d9:13:98:37:2b:
         d7:25:b1:f8:62:66:f3:8e:61:32:be:6d:9d:0a:ab:71:54:16:
         ac:4e:c2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 18:54:19 2026 by rpki-client