Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
File:                     01auYl2VBt9KPld7JKhvzjxzqPg.mft (raw, json)
Hash identifier:          qFQSLv9qz3yS34BlsmvfEiwhlyUWgjrbUFzaH4tgSmU=
Subject key identifier:   4B:77:6C:25:6A:76:15:48:9C:C8:9F:DD:DD:E1:FF:FB:BA:BD:89:19
Authority key identifier: D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8
Certificate issuer:       /CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
Certificate serial:       01A0D538FF49539E040A52662047F71F6CA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
Manifest number:          1A6F
Signing time:             Thu 24 Sep 2026 21:01:17 +0000
Manifest this update:     Thu 24 Sep 2026 21:01:17 +0000
Manifest next update:     Fri 25 Sep 2026 21:01:17 +0000
Files and hashes:         1: 01auYl2VBt9KPld7JKhvzjxzqPg.crl (hash: eAEatbeoq57m5JpjFadKk2jYqrYmMXOWxU2eTq42UbQ=)
                          2: 2pxyRznKvAboLyDSRY5V9DkFgro.roa (hash: WoYHz9zhv/T6GpS58bm/XhcMRq+CFzhIAVEesETjxDA=)
                          3: N5lhzOLzb9DWld9ai9yjW2kVDLc.roa (hash: otz3WZRX38iiM+hhQYkSTpyseb/af+HU5vUy0a+fTYk=)
                          4: TDVVAVJu7KfAhiGr1m5Du1HlA18.roa (hash: li+URB3yo8nZmvZyiiGhy9aGaIwk3rYi2nbOJFauLR0=)
                          5: uUk1h5SII_Safw_pSYFNTK7-iXA.roa (hash: VTAbHmUg7zNhrsk+AD118pUR1Ps6/DM4GFSl39OP9BI=)
                          6: y61TMPU9uTpw-fP74jB87JnJlns.roa (hash: xoRuWFnPF806vhscGwTKOQWiYGep0k98Sfbqbw83bcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:38:ff:49:53:9e:04:0a:52:66:20:47:f7:1f:6c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d356ae625d9506df4a3e577b24a86fce3c73a8f8
        Validity
            Not Before: Sep 24 21:01:17 2026 GMT
            Not After : Sep 25 21:01:17 2026 GMT
        Subject: CN=4b776c256a7615489cc89fdddde1fffbbabd8919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ec:66:4d:3d:17:74:08:a0:89:d8:fe:02:83:
                    da:d9:34:47:f7:9d:a9:6b:53:81:9f:d7:cd:22:10:
                    84:64:4c:3f:64:4b:42:27:6e:6c:fb:bc:c2:e9:3e:
                    7c:57:d9:ed:98:84:25:6b:cb:f1:94:ac:91:38:4f:
                    08:e5:07:94:e5:da:8a:38:52:e3:a9:d7:ac:eb:2d:
                    6d:28:de:ca:91:16:50:49:b2:98:ec:5a:1f:49:fb:
                    8b:19:fc:9c:94:11:55:3e:4f:3c:5f:b5:c0:3b:34:
                    6d:9c:92:4d:72:6e:e7:14:49:0a:f8:97:28:b4:58:
                    b2:ee:9b:ca:c0:f4:00:c2:b7:be:36:ce:73:15:de:
                    c3:d5:5b:1e:85:bb:51:72:15:83:27:c7:ae:90:e7:
                    3c:26:0e:2b:0c:d8:8e:e4:49:0d:a0:82:bb:f5:f8:
                    1c:be:3d:3f:3a:2f:c5:c8:d9:2e:4c:8e:62:1f:30:
                    52:a1:ca:b6:95:84:ef:5c:0d:55:34:f0:dd:d9:08:
                    35:d9:3b:d4:68:8f:c0:c5:f6:7e:19:89:d2:01:ff:
                    f4:0d:3f:88:c1:0b:2c:d3:b5:33:e4:74:36:4c:99:
                    cb:23:db:2e:e0:f6:37:42:a5:31:29:22:86:31:b4:
                    87:67:bc:36:34:e7:20:98:bb:00:62:8d:02:08:34:
                    49:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:77:6C:25:6A:76:15:48:9C:C8:9F:DD:DD:E1:FF:FB:BA:BD:89:19
            X509v3 Authority Key Identifier:
                keyid:D3:56:AE:62:5D:95:06:DF:4A:3E:57:7B:24:A8:6F:CE:3C:73:A8:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01auYl2VBt9KPld7JKhvzjxzqPg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/7a6545-5277-40f3-b366-2ea87e6ea2a0/1/01auYl2VBt9KPld7JKhvzjxzqPg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:f0:2c:4b:8f:9f:36:9f:0f:2e:13:5c:1a:57:2a:62:ac:43:
         db:d0:50:82:68:ea:0d:fe:3d:d8:c3:f2:2d:3c:1f:cb:01:bd:
         d3:15:7b:f9:b4:e9:39:f6:be:1c:57:30:e3:47:32:82:d1:64:
         df:08:a0:42:0f:5f:b0:1d:ed:2c:5e:a5:de:fd:99:53:e5:a5:
         31:43:99:1f:62:25:8d:b6:c9:b4:8c:ce:5a:9f:b9:d1:55:3c:
         2b:7b:a9:2a:2d:e0:73:40:15:00:7e:30:6d:6e:7c:c5:f3:87:
         aa:9a:73:1a:7a:e1:d7:d2:4f:93:42:61:1a:2f:4b:ed:11:3c:
         f0:ac:06:10:39:b6:4b:20:41:11:fb:58:3a:ca:93:64:e1:2b:
         26:84:62:65:aa:45:bd:c9:b9:8c:98:1d:51:72:12:db:47:bb:
         4b:42:dc:46:4d:53:bb:7d:58:d6:2d:16:d1:93:db:ee:76:d6:
         ea:26:56:3b:a6:0c:b1:cb:5f:f9:3c:c3:5f:ec:03:ef:c1:08:
         e6:a4:ab:7f:c5:b2:dd:4e:9b:95:50:04:ca:f3:3b:5a:ca:db:
         e1:40:5e:cc:d7:c0:25:c7:ca:7f:87:62:7f:6e:2d:f2:ad:55:
         c4:cc:ec:fd:de:b3:da:12:ef:71:de:51:bd:f5:be:a1:ec:70:
         bd:3b:b6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:40:12 2026 by rpki-client