Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
File:                     9A68dJdsw9CsbGRtUHcPjZoWqeo.mft (raw, json)
Hash identifier:          bSnRZY4ZsWIk21QAZVNTB8Z8WB6Kd7SsXdc8/P2qdJ4=
Subject key identifier:   7D:10:B2:F3:DA:22:1B:C3:62:50:3E:3D:50:E2:63:6F:0A:72:7F:0C
Authority key identifier: F4:0E:BC:74:97:6C:C3:D0:AC:6C:64:6D:50:77:0F:8D:9A:16:A9:EA
Certificate issuer:       /CN=f40ebc74976cc3d0ac6c646d50770f8d9a16a9ea
Certificate serial:       01A0D916EF06B3A3D1F166F8136D2AB2E9B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
Manifest number:          02A5
Signing time:             Fri 25 Sep 2026 15:02:33 +0000
Manifest this update:     Fri 25 Sep 2026 15:02:33 +0000
Manifest next update:     Sat 26 Sep 2026 15:02:33 +0000
Files and hashes:         1: 9A68dJdsw9CsbGRtUHcPjZoWqeo.crl (hash: EIQoaVEIlk5HICJF4C3aK2wfcE+7Ts20Kxh58pfi3Qw=)
                          2: cchuMiAwTdP7712IVa-5EwuoTbA.roa (hash: WntKm32ijw/Zst8nMPt2C0CBnjs1jMpSXp57ZJLNvM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:16:ef:06:b3:a3:d1:f1:66:f8:13:6d:2a:b2:e9:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f40ebc74976cc3d0ac6c646d50770f8d9a16a9ea
        Validity
            Not Before: Sep 25 15:02:33 2026 GMT
            Not After : Sep 26 15:02:33 2026 GMT
        Subject: CN=7d10b2f3da221bc362503e3d50e2636f0a727f0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:85:a0:c7:e1:4b:19:c8:2d:11:1b:e0:55:9c:
                    a3:41:08:75:27:bb:17:ab:c7:c4:50:a2:fd:40:84:
                    93:49:2d:5a:10:c8:34:5d:57:72:db:51:f9:17:75:
                    cd:87:95:4f:cd:5c:67:40:78:5d:53:39:00:55:69:
                    a6:a1:ac:01:97:97:d8:74:26:dd:54:85:f8:dd:61:
                    30:cb:03:ca:44:4d:0c:7f:de:ea:fc:18:b7:14:65:
                    5f:bc:29:7f:fc:6b:4c:fc:84:4d:73:cd:08:60:a7:
                    dc:c1:e6:ec:6c:42:03:3e:03:b1:a5:7d:30:ef:f4:
                    df:df:21:13:6c:66:5c:62:b5:e3:b6:98:0d:cb:ab:
                    6f:d9:e7:fc:83:a7:85:d1:cb:d0:89:b5:06:b8:1e:
                    21:25:9d:1e:f9:6f:36:c3:b6:26:97:da:4c:e4:53:
                    47:2d:b1:36:c2:b8:df:40:32:84:7d:c4:9c:88:f3:
                    b0:32:bb:bd:10:db:de:68:3b:0c:65:57:f3:ee:bb:
                    28:d4:e3:7d:e8:8d:a5:a0:f3:d5:96:ba:89:64:89:
                    a1:b1:c4:58:8c:d1:00:68:13:70:2b:a2:1d:c8:d8:
                    f8:b0:63:bf:2f:a1:0c:dc:ef:ce:5f:18:32:d8:9e:
                    7a:cb:ef:fa:0b:04:37:14:2f:93:13:d7:9c:fb:24:
                    24:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:10:B2:F3:DA:22:1B:C3:62:50:3E:3D:50:E2:63:6F:0A:72:7F:0C
            X509v3 Authority Key Identifier:
                keyid:F4:0E:BC:74:97:6C:C3:D0:AC:6C:64:6D:50:77:0F:8D:9A:16:A9:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9A68dJdsw9CsbGRtUHcPjZoWqeo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/9ade80-afe8-4a75-957a-83ac9f6fac73/1/9A68dJdsw9CsbGRtUHcPjZoWqeo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:71:a4:c7:f5:54:89:9a:f1:ac:e5:fb:da:c6:5e:49:91:bb:
         a5:e0:b5:7f:61:31:11:95:3f:19:50:22:92:bc:be:f6:dd:4c:
         57:53:3a:8b:10:8f:94:54:f7:da:5f:c0:f5:cc:0d:7d:af:85:
         3f:17:e5:88:81:3c:15:b9:d0:0d:31:45:c9:1c:07:a6:5b:8f:
         99:af:a7:db:b0:7b:70:c1:49:ca:f5:81:db:0d:e6:17:07:b5:
         be:f8:8c:02:ea:40:d9:9a:5f:bc:88:6a:39:6c:ac:9b:cb:e1:
         82:e2:81:23:f2:67:a1:be:48:e7:b2:83:93:47:46:26:05:ab:
         b5:bd:c6:f0:93:5a:20:7c:d4:86:9d:32:a4:18:b3:97:df:4e:
         c3:ff:8a:db:2f:0e:a6:a4:17:f7:66:57:07:3e:31:07:1a:ea:
         d9:0e:4f:15:94:4b:d9:fa:eb:ee:8e:6d:52:b7:73:91:46:42:
         79:10:e9:35:11:fd:84:33:5f:8c:2d:fd:93:67:ba:88:3e:a0:
         12:47:d4:82:d0:2d:73:3b:af:bd:b9:70:ee:d1:6e:ef:e4:00:
         ad:b9:c9:84:ca:90:be:f4:38:84:67:3c:84:2c:5d:80:56:cb:
         2d:e7:41:32:13:de:2a:cb:54:dd:9c:cf:38:2a:a3:4d:1f:2c:
         20:bf:c1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:29:04 2026 by rpki-client