Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
File:                     kMuqazbmzWh0x47UWk-N1xcwMdk.mft (raw, json)
Hash identifier:          M9r4GymXdEUvqoXRGKgSXnaD0diKS04QGW8l7MeblU8=
Subject key identifier:   E8:86:41:E2:5B:45:B2:BA:BD:7D:16:26:AE:8B:AA:25:81:F4:30:F4
Authority key identifier: 90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9
Certificate issuer:       /CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
Certificate serial:       01A0EBC147712AC217E725AA628BC598A670
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
Manifest number:          0FEB
Signing time:             Tue 29 Sep 2026 06:01:47 +0000
Manifest this update:     Tue 29 Sep 2026 06:01:47 +0000
Manifest next update:     Wed 30 Sep 2026 06:01:47 +0000
Files and hashes:         1: kMuqazbmzWh0x47UWk-N1xcwMdk.crl (hash: 6KntUrfwb9bdCn0cR2oFIMUzGD3WiJ8TeIpBCwNaM2o=)
                          2: pMXoRrm1A-T70xPjALrZ4oMq61E.roa (hash: FsTM7joUHNqdKecmC2zVhM+EhuHDUQROQu4Azrsbbr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 06:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:c1:47:71:2a:c2:17:e7:25:aa:62:8b:c5:98:a6:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90cbaa6b36e6cd6874c78ed45a4f8dd7173031d9
        Validity
            Not Before: Sep 29 06:01:47 2026 GMT
            Not After : Sep 30 06:01:47 2026 GMT
        Subject: CN=e88641e25b45b2babd7d1626ae8baa2581f430f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:30:d4:7c:88:75:95:8d:fe:fd:13:f6:17:
                    e7:5a:de:bb:ac:86:77:97:23:69:8f:27:cd:da:cb:
                    f3:ac:47:8a:69:83:4c:ee:38:e9:f6:42:01:2a:08:
                    e3:14:7b:ed:17:42:98:91:c8:51:0f:c1:07:d6:6a:
                    4f:83:28:42:97:87:7e:54:34:12:38:92:72:64:b8:
                    5d:8a:3b:81:4b:0f:f2:00:90:29:06:d5:ae:9d:04:
                    07:eb:3a:bd:b9:d1:f0:92:e4:2a:6f:f8:c5:ef:a6:
                    89:4b:1e:2b:51:8e:f2:1d:e5:cf:ea:f6:ca:6d:82:
                    31:43:58:d7:7b:f0:bf:d9:df:07:8d:03:17:f9:02:
                    6d:ad:e1:63:8a:78:43:53:31:0e:6e:ba:4d:f7:1b:
                    63:86:94:be:8b:ed:38:64:bc:c0:c1:24:e8:e0:cc:
                    a5:88:bf:3d:f6:7e:3e:1b:41:f9:1d:6c:9b:1a:f8:
                    2b:19:e4:f1:96:81:40:a4:e1:4c:a2:89:19:df:96:
                    3e:e4:3f:e0:dc:6c:51:65:c0:eb:8d:37:49:c0:18:
                    4f:6f:d5:7f:95:f9:1d:fc:6b:f0:12:c8:fe:dd:62:
                    ad:e7:53:68:99:7b:e8:c6:37:be:51:74:28:64:68:
                    cc:a5:c0:2f:e4:9e:82:0e:d0:db:c6:1d:7a:79:67:
                    d5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:86:41:E2:5B:45:B2:BA:BD:7D:16:26:AE:8B:AA:25:81:F4:30:F4
            X509v3 Authority Key Identifier:
                keyid:90:CB:AA:6B:36:E6:CD:68:74:C7:8E:D4:5A:4F:8D:D7:17:30:31:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMuqazbmzWh0x47UWk-N1xcwMdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/06ca5d-d0c4-4215-8968-b6d4c4fc0c21/1/kMuqazbmzWh0x47UWk-N1xcwMdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:bc:7c:c8:6e:7f:9d:88:74:e1:54:84:11:5b:35:38:36:a9:
         6e:f8:0e:31:e1:67:e8:7f:7b:90:82:9a:ea:77:e5:ac:e1:30:
         4f:8f:84:4f:74:fb:f2:54:ca:68:c5:b0:e9:35:a0:b2:8b:6b:
         bf:c5:49:7c:d7:d7:0f:e3:7f:bd:49:ea:de:7d:d3:d5:11:dd:
         c6:46:bc:7b:8b:6f:66:d1:4d:57:2c:0d:ba:66:87:e0:da:1e:
         5c:9d:12:46:9d:77:ec:af:9f:43:88:12:e4:99:21:8f:80:54:
         30:07:d9:4c:03:ee:a4:aa:e5:15:10:4f:3f:7a:1c:34:ce:fb:
         72:ec:41:82:4d:a7:03:f8:57:28:6d:84:72:14:5c:ba:ce:d6:
         e9:10:88:25:ee:ca:2d:8e:5b:7b:21:b4:ed:7c:00:0d:9d:eb:
         49:1b:4a:c3:c3:56:26:5c:d2:0c:a5:a1:00:d2:5f:f9:bd:bd:
         34:0a:07:f5:ab:47:b9:92:06:7f:2d:e7:4a:44:4a:0f:49:eb:
         9c:64:f3:7f:0b:b5:32:b6:f6:8b:ee:c4:96:9b:2e:4f:c8:2e:
         c9:b8:18:84:4f:9f:4e:40:fc:be:64:51:9a:b1:81:b0:c3:86:
         b2:ed:f0:76:a0:89:20:32:c0:66:ce:73:34:68:40:00:79:4d:
         ee:1d:89:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:11:33 2026 by rpki-client