Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
File:                     syHLgokI9DB0nuOl8qYt5fgi99E.mft (raw, json)
Hash identifier:          gmEMPlt8wsPKNOi648uHPP6xfOTRwPdJ8Ogaf4spelw=
Subject key identifier:   CA:87:3C:DE:29:00:BE:4E:F0:EE:E6:CC:AB:2F:78:B1:E0:7F:E1:4F
Authority key identifier: B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1
Certificate issuer:       /CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
Certificate serial:       01A0E0CF6D607EF71C9DD37AC5F6EC16CED6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
Manifest number:          15B4
Signing time:             Sun 27 Sep 2026 03:01:25 +0000
Manifest this update:     Sun 27 Sep 2026 03:01:25 +0000
Manifest next update:     Mon 28 Sep 2026 03:01:25 +0000
Files and hashes:         1: lTiIdOCkR7HQgUlBuUv00XWG8n8.roa (hash: 5GQQkbQ8C7wWLUQ4RuOd8R+85EFkyHaFY8FEJbVGNpw=)
                          2: syHLgokI9DB0nuOl8qYt5fgi99E.crl (hash: ACQI/Unu7YhDAC8VXd5okmTZeEfJNu24dPG/K2BU3/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 03:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:cf:6d:60:7e:f7:1c:9d:d3:7a:c5:f6:ec:16:ce:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b321cb828908f430749ee3a5f2a62de5f822f7d1
        Validity
            Not Before: Sep 27 03:01:25 2026 GMT
            Not After : Sep 28 03:01:25 2026 GMT
        Subject: CN=ca873cde2900be4ef0eee6ccab2f78b1e07fe14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fc:e2:a3:fb:cc:28:50:e2:4b:b3:2f:bf:c2:
                    74:bd:d7:72:bd:a0:68:aa:86:61:aa:f9:04:08:1c:
                    75:8f:9e:54:78:97:54:7b:eb:dc:08:c7:08:fb:99:
                    93:ea:9a:9a:89:3d:e1:8b:8d:a4:9e:bb:86:94:96:
                    39:bb:e0:08:40:56:f8:83:7b:9a:29:6e:21:4a:e9:
                    20:f4:3b:90:b1:d7:73:91:5a:3f:8f:d2:45:15:b4:
                    a4:70:e7:a1:86:33:02:64:8d:2e:9e:d7:26:19:ba:
                    b8:0f:37:de:2f:e6:1d:99:13:9c:47:b8:51:0b:9c:
                    8f:1a:2f:50:cb:04:33:4f:ad:f3:9e:0e:18:07:4c:
                    b3:7a:3f:0a:85:96:bf:bb:b9:b5:6d:77:e4:24:f6:
                    e5:41:4e:10:a9:ff:31:e8:77:02:6c:e8:e8:89:2f:
                    06:c4:1d:d1:65:db:75:7e:e6:32:32:cd:c3:b9:5f:
                    0f:cd:b3:a3:eb:6b:9b:43:35:0b:7b:ad:e6:96:d3:
                    e4:5d:f9:af:c6:eb:d5:63:39:44:57:25:be:1f:01:
                    00:ce:f0:61:fe:42:fb:19:6b:2d:9e:32:7b:e6:fe:
                    17:30:ed:bc:ff:eb:61:2b:e6:3a:78:96:6e:17:da:
                    d9:e8:8f:b2:19:c0:5e:3b:5a:32:4e:26:0c:39:b8:
                    ba:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:87:3C:DE:29:00:BE:4E:F0:EE:E6:CC:AB:2F:78:B1:E0:7F:E1:4F
            X509v3 Authority Key Identifier:
                keyid:B3:21:CB:82:89:08:F4:30:74:9E:E3:A5:F2:A6:2D:E5:F8:22:F7:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syHLgokI9DB0nuOl8qYt5fgi99E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ccaa1a-9daa-44b8-9e26-87f341888560/1/syHLgokI9DB0nuOl8qYt5fgi99E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:40:cc:ee:15:64:df:42:b5:cc:e9:c4:aa:39:9b:a6:19:ab:
         0f:7e:5e:4a:09:3e:66:e4:00:c2:7a:18:02:fb:ea:c9:4f:b5:
         b8:dc:a5:6b:66:c2:cf:b7:40:dc:4f:0b:30:a3:8e:b6:2e:f6:
         76:32:88:f8:fc:f5:b1:c3:9b:4d:e0:43:1e:b6:48:97:43:3c:
         26:d1:e7:38:4e:37:b8:bc:f1:25:26:d5:36:30:a5:9a:ba:4c:
         d2:78:80:bb:d0:b8:66:13:53:32:21:c2:ff:21:6e:c4:51:96:
         36:ce:37:59:97:14:fa:d9:9d:e2:ad:29:d2:a3:76:78:93:0c:
         50:92:65:7e:89:fb:b5:e6:9c:84:e5:19:0c:e5:3f:04:81:99:
         53:d9:67:cc:07:25:72:c0:06:39:23:8f:e5:d8:a7:3b:8c:c6:
         3d:72:4e:7c:a4:61:cc:6b:a0:36:11:f4:4d:2e:31:56:27:55:
         1b:4b:0c:1e:45:1a:c6:a1:37:39:9a:94:24:c0:5e:95:56:5f:
         6d:0d:97:17:2e:0f:ea:24:75:ae:78:2f:38:57:af:21:02:75:
         c9:0b:b7:17:18:f0:d5:24:23:da:b3:31:21:20:a8:ba:6c:91:
         94:7b:79:2a:77:10:a6:e8:e4:9d:d1:9c:9d:5f:ea:85:77:8c:
         7f:cc:97:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 14:06:23 2026 by rpki-client