Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File:                     s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier:          wh0tL2eK0gkW7LP3CKLv1CgTpxQ/liGBg4/eaVR1Uvg=
Subject key identifier:   7C:60:C9:9E:D0:3C:7F:71:51:C9:8C:57:46:40:36:7B:D0:8B:1D:C5
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer:       /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial:       01A0DE05B4C7D22097922856A4F6B7B42E92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number:          1A77
Signing time:             Sat 26 Sep 2026 14:01:50 +0000
Manifest this update:     Sat 26 Sep 2026 14:01:50 +0000
Manifest next update:     Sun 27 Sep 2026 14:01:50 +0000
Files and hashes:         1: 5pbnClUh_kjLeLo2LMo1Y3vUlB0.roa (hash: Df2su1WC1f8Y96ErLqJKLUxdchUeDa/xX3IGKu6zDvE=)
                          2: cvG-jh0yKd3zLB32ubBPh1-7dwo.roa (hash: V6xzuEneOg5ndhVSUWtzhVClWw0yZUrA/g0C/6rX9iw=)
                          3: gBeSyX3OIacsVNGP8Mb0jV9GelU.roa (hash: /xqQeuzxIVD73VffQlPGbA5YqJe0ZE3mXWCLH1Yq3B8=)
                          4: jgJjnBaMcQo884ecdwwWeiiVGwE.roa (hash: uwiSgB/KcqJF3KmjqsXsLwBRecZ/E7ry8OXiZq9C8PQ=)
                          5: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: xsl0LPktDetOiHLuSsz+TgMUTRkewAd/KpbIlqG39FY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:05:b4:c7:d2:20:97:92:28:56:a4:f6:b7:b4:2e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
        Validity
            Not Before: Sep 26 14:01:50 2026 GMT
            Not After : Sep 27 14:01:50 2026 GMT
        Subject: CN=7c60c99ed03c7f7151c98c574640367bd08b1dc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:66:c3:85:ca:72:eb:c4:f8:90:b7:11:65:1c:
                    87:24:de:a4:97:00:73:ac:1c:40:aa:8f:02:be:f3:
                    07:1c:4e:d1:b8:bd:68:77:46:df:3e:76:57:74:8d:
                    6d:26:17:0c:f3:0b:b5:5b:c8:6e:df:c6:04:bb:f9:
                    40:da:76:22:1d:31:f7:d9:1e:3b:ef:7b:6e:1f:7d:
                    95:b7:ed:71:68:61:6b:3c:d4:23:67:97:8b:1c:d4:
                    9c:b0:13:42:f2:ad:d0:ad:58:ac:45:dd:04:8b:8c:
                    e4:ca:c8:71:67:75:80:dc:e4:ef:4b:5b:03:20:21:
                    f3:51:64:9b:d8:28:a2:99:b6:3a:5b:9b:20:63:b6:
                    66:c9:c7:fa:d6:c7:ce:f2:0d:3f:30:58:a9:e1:d2:
                    e5:f8:74:b2:7a:43:3a:53:1e:54:45:37:80:07:61:
                    7e:2f:48:c4:1f:1b:aa:c7:24:4e:a4:0f:8a:75:01:
                    79:06:56:35:2b:1f:10:c0:bc:f0:f5:05:cd:d7:40:
                    67:40:56:de:15:63:80:62:5c:6a:70:8d:c7:79:32:
                    9c:9d:df:06:60:e0:55:01:22:96:d4:31:f8:6f:55:
                    b7:60:33:be:eb:7b:59:c2:7d:01:33:27:ac:ce:45:
                    46:45:e9:4e:20:bc:68:75:3b:12:ae:4b:f5:ec:8f:
                    fb:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:60:C9:9E:D0:3C:7F:71:51:C9:8C:57:46:40:36:7B:D0:8B:1D:C5
            X509v3 Authority Key Identifier:
                keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:aa:43:52:b4:92:97:bd:ec:31:4c:72:41:08:3b:c0:00:37:
         29:46:ab:6c:e6:e4:46:85:7a:90:dd:26:33:4d:24:72:ed:4f:
         2a:72:3a:1c:c0:96:77:59:07:10:38:b9:ce:60:bd:70:c2:2e:
         20:e7:2f:33:8d:43:06:d5:af:90:4d:b6:e5:fb:8f:6f:01:67:
         01:78:ff:c3:6d:9e:20:4e:22:33:f1:75:a3:3e:71:b2:ad:9f:
         e0:49:73:ff:05:f0:0d:bf:25:c6:a7:3d:14:91:ce:89:6a:0e:
         02:3e:db:e1:ad:5e:6f:d5:f6:dd:6b:47:b4:c7:22:86:3b:7d:
         f3:74:7b:73:6f:a5:90:b5:83:5b:cc:22:8d:1c:a8:ca:a9:d3:
         b8:ff:89:53:a2:90:f6:b7:08:2c:0c:b3:87:c9:93:da:7f:76:
         a0:f8:4c:6e:67:9e:2d:cc:9c:bb:22:cb:bb:6a:5e:5d:36:83:
         35:32:14:92:21:51:cd:07:55:e1:b7:08:9c:5b:32:0a:14:20:
         c2:5e:5a:a6:07:35:0b:9c:eb:b3:b4:f6:e4:62:4b:5a:35:d5:
         b5:50:51:c5:1c:32:c3:5b:69:4b:55:3a:42:0f:c3:14:a0:9a:
         1b:40:63:8e:4f:c6:d8:65:c5:4e:3f:c7:00:66:53:b3:c2:29:
         f8:2f:ff:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:35:22 2026 by rpki-client