Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
File:                     AH5rWqQ302kxUVAqIRSW431K4sU.mft (raw, json)
Hash identifier:          JTC27RxxdO/xuMX/V8Towb49ZKzZFmCj2FHbbvm98fM=
Subject key identifier:   C3:18:86:FC:3B:C1:11:01:EA:D8:CD:E0:83:73:91:01:5E:A6:59:1B
Authority key identifier: 00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5
Certificate issuer:       /CN=007e6b5aa437d3693151502a211496e37d4ae2c5
Certificate serial:       01A0E1E21E11CA9A056AB2EFAC4233B4A1B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
Manifest number:          17F3
Signing time:             Sun 27 Sep 2026 08:01:27 +0000
Manifest this update:     Sun 27 Sep 2026 08:01:27 +0000
Manifest next update:     Mon 28 Sep 2026 08:01:27 +0000
Files and hashes:         1: 0UtZJpaH9ZhWJzvOUmqS1m2r370.roa (hash: UdeibxbzHWRgn3KJEu2PyWPjfgCf2fUauCUDT1MFzeU=)
                          2: 2i6ET0xmeFNNwjckPtEiXMzR1A8.roa (hash: RMMo6cNDlmb7w7WUvvn6btB8oEeGkC5RlJSJmweHPSg=)
                          3: AH5rWqQ302kxUVAqIRSW431K4sU.crl (hash: lf4+Ef5G8Hyw+4cFSlyNqDsW7vsQbQ4V/ln+4DLrq70=)
                          4: R1KgvQsI1PNvvWsNYjSHXjmCUko.roa (hash: eSfdxnu6Fm6Qr8tRqOcchhcxy/tWOkcHERSE8N3r8uI=)
                          5: XdtoN-G6_JHehbj0D7l71OQKEXE.roa (hash: bDoA0XebMdpMlFP6CJH1fk3V+NG+IRgcZpROF4NtHwY=)
                          6: Yx7l960TQn9HM_7QR6gs0XY-qcA.roa (hash: O+2F1pg3A5EVSk1DJbaRJDwXaNusK4Cx5sLgaLCJXdM=)
                          7: vV4kfM7-tPnyYx_K2ljxEExtxso.roa (hash: iQoz4P+KRDJgWwM5+v9IkBekoevvl7t44wSOdaiYAvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:e2:1e:11:ca:9a:05:6a:b2:ef:ac:42:33:b4:a1:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=007e6b5aa437d3693151502a211496e37d4ae2c5
        Validity
            Not Before: Sep 27 08:01:27 2026 GMT
            Not After : Sep 28 08:01:27 2026 GMT
        Subject: CN=c31886fc3bc11101ead8cde0837391015ea6591b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:fc:dd:23:c1:f2:da:c6:95:89:49:e6:bf:
                    e3:38:46:2a:a4:df:1a:86:e0:a3:95:bc:d7:c5:c1:
                    4c:43:c0:01:2c:98:52:4d:de:1b:a1:20:07:b1:67:
                    34:89:4a:a0:b8:f9:dc:37:83:56:0d:14:15:12:60:
                    12:8f:31:3a:d8:61:f4:97:7c:c8:df:7d:34:cf:55:
                    81:66:35:eb:01:30:67:2b:bb:2d:cb:c3:49:bf:e0:
                    d7:cf:9c:4a:e5:d6:21:df:a5:85:df:84:6c:fc:fd:
                    95:fe:9c:79:4a:1a:84:bb:31:11:3c:40:f8:37:5c:
                    f8:36:83:37:c7:38:d0:73:0b:b9:06:6a:8f:0b:0d:
                    fe:ba:5d:cd:30:c7:ad:7e:1d:ce:cc:69:20:e9:a2:
                    dd:60:1c:18:ac:b5:b1:70:e4:81:34:4b:15:81:93:
                    c2:34:30:71:57:71:27:d2:0d:1d:58:4d:1d:c6:24:
                    df:f6:43:bd:dd:55:0c:d2:16:9a:c6:0d:53:2d:46:
                    c5:d9:b0:a5:e3:c4:72:53:53:b8:4e:6a:0e:3d:8f:
                    78:f2:21:4f:79:d4:f4:e4:d7:09:5a:40:bd:62:f0:
                    f1:b9:00:46:7a:dd:c7:8c:22:4f:86:42:5f:97:42:
                    6f:b1:39:2d:7e:a3:58:07:e3:e3:93:0e:84:57:54:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:18:86:FC:3B:C1:11:01:EA:D8:CD:E0:83:73:91:01:5E:A6:59:1B
            X509v3 Authority Key Identifier:
                keyid:00:7E:6B:5A:A4:37:D3:69:31:51:50:2A:21:14:96:E3:7D:4A:E2:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AH5rWqQ302kxUVAqIRSW431K4sU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/518fab-7606-4832-aa66-5a8c67842389/1/AH5rWqQ302kxUVAqIRSW431K4sU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:f7:c6:3d:4a:c7:e7:29:7d:26:80:37:d3:18:d3:48:92:4a:
         3e:dd:2a:32:fa:a7:e8:b4:aa:36:51:75:72:7b:e3:9b:e3:19:
         e2:c2:cf:cc:52:1f:d3:09:ca:89:31:4a:ea:fc:0b:59:ad:4b:
         db:77:ca:89:c0:a8:46:ea:a1:fb:f6:27:cf:8b:6d:6a:e9:a7:
         3e:50:68:71:b5:14:73:0f:b6:57:db:43:51:3b:5b:ac:c3:aa:
         74:8f:43:a9:9c:2b:e8:ff:d4:36:a5:70:88:35:ed:55:cb:84:
         7a:af:eb:46:f4:9c:b5:c9:a9:4a:46:49:85:c1:d6:f9:57:a7:
         71:82:04:26:e3:fe:73:2d:fe:1c:86:0a:7d:fc:33:3c:3f:85:
         3b:24:e6:4c:da:de:77:26:b3:d8:8e:f5:bf:4a:02:3c:4c:f0:
         5d:97:f9:f6:62:b3:a4:23:00:12:b3:9b:1b:0e:e2:83:e2:b1:
         3c:94:d0:59:a6:f0:a4:20:b6:54:60:88:88:5c:05:26:0e:f6:
         ec:12:25:43:07:c4:b6:29:cc:30:42:fc:fa:7b:e0:b5:72:6f:
         ed:57:ce:32:7e:9f:ce:f2:cd:47:26:c0:a4:af:74:88:47:a1:
         a9:ba:b8:f0:0f:e1:ab:5c:08:0f:2e:06:fb:36:80:b7:90:fb:
         aa:aa:4d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:39:39 2026 by rpki-client