Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
File:                     g7826xjvmlfF-2A62kAP5rZojm4.mft (raw, json)
Hash identifier:          bEMEmHrdiY+DxJLEZhp1AAvj6EXijXQqpDLa+3W8Ezo=
Subject key identifier:   2C:E4:B7:AC:BA:93:E4:E8:BB:AA:21:EA:C8:25:28:92:B1:0F:D0:36
Authority key identifier: 83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E
Certificate issuer:       /CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
Certificate serial:       01A0E1747558C4F31A647FDE957055EBB892
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
Manifest number:          15A8
Signing time:             Sun 27 Sep 2026 06:01:40 +0000
Manifest this update:     Sun 27 Sep 2026 06:01:40 +0000
Manifest next update:     Mon 28 Sep 2026 06:01:40 +0000
Files and hashes:         1: g7826xjvmlfF-2A62kAP5rZojm4.crl (hash: 0qcRAYqxktUGQp8tBjjgj7q6N24gMniEqILzyapa1g0=)
                          2: ja3xbYHhCypT2kKyeAbUDM6JjaI.roa (hash: 97d7xvyjN2GHwh42t3hRtYWBfO2mX62sHwBd8SOvXh4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:74:75:58:c4:f3:1a:64:7f:de:95:70:55:eb:b8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83bf36eb18ef9a57c5fb603ada400fe6b6688e6e
        Validity
            Not Before: Sep 27 06:01:40 2026 GMT
            Not After : Sep 28 06:01:40 2026 GMT
        Subject: CN=2ce4b7acba93e4e8bbaa21eac8252892b10fd036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:55:6d:3e:18:4c:3e:e7:37:2a:7a:ca:6f:a8:
                    46:7b:3c:59:05:58:bf:d2:c1:ae:bc:66:eb:76:4c:
                    37:50:ac:03:47:c7:38:1c:d0:97:04:6a:22:c3:98:
                    0b:76:80:80:57:24:ee:2f:a8:a3:68:21:d3:3f:2d:
                    b0:34:0c:64:5c:82:ba:42:82:c2:d5:09:d7:15:67:
                    54:43:1a:57:e3:f3:cd:f4:5e:e7:ed:20:8d:a3:6f:
                    6a:df:e6:4a:71:8d:04:2b:37:b6:aa:62:58:b5:1c:
                    e2:7a:ad:1b:a6:26:46:3b:f1:13:90:0a:03:7e:43:
                    7e:f6:86:ad:77:2d:40:c6:87:bb:d5:1a:9c:f3:01:
                    d1:be:4e:ee:85:5e:6e:03:32:e7:ec:a7:a4:45:70:
                    3d:75:34:2b:a5:65:72:69:2a:6c:63:1f:e0:40:7e:
                    45:50:5c:c8:8e:9e:0b:c6:22:ba:68:a9:ab:42:33:
                    6a:11:5d:16:06:e6:e6:74:55:38:e3:c8:64:fa:7a:
                    07:01:1a:24:75:76:f7:da:39:2d:34:26:07:4e:de:
                    67:bd:67:da:af:6f:8d:90:3c:c3:1f:ac:18:9b:a4:
                    29:9c:1a:9a:6f:20:44:35:bd:d8:b2:41:cc:60:d3:
                    66:1c:8e:fb:d8:af:d1:6a:15:d3:62:7d:a7:19:78:
                    9c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E4:B7:AC:BA:93:E4:E8:BB:AA:21:EA:C8:25:28:92:B1:0F:D0:36
            X509v3 Authority Key Identifier:
                keyid:83:BF:36:EB:18:EF:9A:57:C5:FB:60:3A:DA:40:0F:E6:B6:68:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7826xjvmlfF-2A62kAP5rZojm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/f77d51-ee1c-47a9-90bc-e0d2a1b6e8ac/1/g7826xjvmlfF-2A62kAP5rZojm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e2:c2:96:16:1a:22:22:1b:0d:c8:9d:55:9a:bf:11:b7:36:
         d7:24:92:ae:71:32:87:44:a3:41:b3:08:76:0f:96:69:79:80:
         2a:2b:e8:c6:b5:76:b6:a6:06:e7:1d:d8:53:df:64:26:8f:ab:
         ed:fe:3a:c2:94:7d:6c:72:8a:30:e5:0a:75:a7:0d:0a:ca:e3:
         b4:56:d5:a5:ec:7b:ff:42:e1:8a:f3:59:5b:80:44:b2:50:42:
         c6:b7:0e:ed:d3:a9:c6:60:55:0c:84:44:ac:8a:a6:b6:4e:23:
         fc:95:31:b5:54:11:82:80:dc:80:47:f9:83:0b:58:18:f0:eb:
         48:91:b0:7d:dd:62:5c:2a:7b:e1:e4:9c:ae:a3:3d:df:74:2e:
         64:5b:93:30:30:a3:cb:aa:b5:bb:48:9c:37:65:12:0d:c9:aa:
         47:d3:83:3d:14:2b:1c:d6:df:bf:2c:f1:d2:fb:8a:77:71:06:
         c3:8b:4a:3b:cb:57:25:aa:4b:92:1f:60:89:d3:db:39:68:51:
         a6:ab:90:cb:b9:5e:31:f6:b8:5b:1f:9f:b8:59:84:38:0b:c2:
         0d:f0:f0:b5:5d:90:73:d4:bd:56:05:d8:af:dd:76:87:e8:82:
         33:1f:e5:9b:93:7b:e5:19:85:9f:be:51:0c:84:02:02:ef:89:
         8e:6e:62:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:17:14 2026 by rpki-client