Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
File:                     mFrmxZw15GA4fa68-4Zvih67NoY.mft (raw, json)
Hash identifier:          2qrcp4zKXGjB+iYTAbwvDDXmg7Li69Wzfcn7RhBN+18=
Subject key identifier:   07:4E:42:54:92:94:A5:A4:14:46:F6:A7:E3:64:67:14:1D:5E:B9:54
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Certificate issuer:       /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial:       01A0D872B67F291EFCFB6E2745BADF7332D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
Manifest number:          1A71
Signing time:             Fri 25 Sep 2026 12:03:11 +0000
Manifest this update:     Fri 25 Sep 2026 12:03:11 +0000
Manifest next update:     Sat 26 Sep 2026 12:03:11 +0000
Files and hashes:         1: 6mr_negPNHsR5J0MSqEp_ieYKiU.roa (hash: R2V3SBjHf1L7l3zp37riDQXw6pyaQxn29F6fxbrUIig=)
                          2: GljtY0R1J1ByOdSoq7cvOo-xQ8U.roa (hash: Fqs7S4w69EF6ZT+aB+xuRmBdIVTZ/4rbTRRyrV/zgKA=)
                          3: JIvUMyg919C-AEiCOLhbtlj6cjE.roa (hash: c3tt9IXLSdvp7thburVJzoa0SnXdItptroj1j30Mafk=)
                          4: S2LndCNixy083ZTjbNt_shK0ePU.roa (hash: /dwxq7l7Ax9j0ZmPcwmkPrxtmD1WAiHSHcUMVp1m05I=)
                          5: mFrmxZw15GA4fa68-4Zvih67NoY.crl (hash: KSv121p9zyRkika4Dpoa6AESb4ygf/CmHHZi3pMVGY8=)
                          6: wMBz1OxL3HTz5yYKEtRNA_2ypJc.roa (hash: dgJQac7vUSrU8OsO7dHZl/BzAOs/LTYZ/18knGRwxgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:b6:7f:29:1e:fc:fb:6e:27:45:ba:df:73:32:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
        Validity
            Not Before: Sep 25 12:03:11 2026 GMT
            Not After : Sep 26 12:03:11 2026 GMT
        Subject: CN=074e42549294a5a41446f6a7e36467141d5eb954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:fb:8f:a6:70:12:dc:79:25:df:d3:61:0a:bb:
                    a6:7f:69:88:5e:4d:ab:d1:81:2b:ed:95:11:33:ce:
                    27:d3:3b:a2:3b:15:58:a7:74:8e:7e:cf:cf:9e:5f:
                    48:5e:b5:df:54:34:a8:d5:f9:29:18:2a:ea:ea:01:
                    71:30:2e:99:45:fd:39:8e:4d:57:ea:83:75:3d:6f:
                    d3:3f:91:4f:88:4b:c8:3c:64:8b:5b:49:b6:28:a9:
                    61:0c:85:52:a5:3f:df:30:ef:97:ed:4e:8e:d9:d8:
                    25:03:78:3d:42:ae:bb:07:81:0a:7a:ca:e0:07:18:
                    f8:00:80:40:f8:93:e1:61:92:bd:f5:51:b2:82:b0:
                    cb:0a:22:9a:1f:78:eb:9a:b7:0e:22:28:ec:6b:51:
                    88:84:fb:1a:0f:7d:39:34:fa:a7:3a:b3:61:15:9c:
                    20:96:f6:04:63:12:1f:5a:61:c7:50:7d:62:ac:57:
                    b2:73:e9:b7:93:10:bd:81:5e:80:50:3c:b3:26:b8:
                    28:bc:08:b7:32:22:31:21:b7:29:41:65:bd:16:89:
                    54:66:1e:09:08:d8:51:92:c2:42:02:37:21:3b:f9:
                    81:9b:e0:5d:42:f1:5e:a3:e1:f0:96:c4:4f:17:b1:
                    9c:1d:5e:e5:db:a8:d0:af:9c:98:7e:42:04:f8:d4:
                    72:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:4E:42:54:92:94:A5:A4:14:46:F6:A7:E3:64:67:14:1D:5E:B9:54
            X509v3 Authority Key Identifier:
                keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:9c:75:1e:0b:71:14:6e:68:c2:0b:a2:6c:14:97:99:37:22:
         1a:63:90:96:63:bf:2a:6a:4d:7f:7d:ec:98:f3:5a:a4:2e:6c:
         72:20:3f:c8:87:fe:b4:c7:66:5a:84:e8:56:4f:22:f0:06:4b:
         58:1c:8b:ff:f4:67:a7:66:99:87:1e:b9:50:36:85:85:c6:5a:
         50:68:9f:b3:32:b6:8d:7c:af:ae:aa:c2:f0:9d:dc:9d:5f:d7:
         0b:07:87:ab:d9:e1:86:10:6a:cd:4c:6c:90:af:5d:23:f7:76:
         40:86:80:50:96:2b:1f:75:fb:e7:3b:66:b5:c8:3c:4a:10:3a:
         1e:1f:a4:c4:6b:b9:d3:9c:e4:99:ac:36:11:2a:c2:d9:21:50:
         1f:11:7a:46:46:72:75:78:e6:4d:c6:0a:59:dd:3a:a1:9f:bf:
         17:ba:83:f3:4b:55:d4:52:ca:25:f0:15:c6:b1:b8:c8:d4:a5:
         b8:9f:16:0e:82:05:b9:47:62:1d:32:50:ee:6f:f1:de:50:55:
         b3:2c:d1:b0:7b:9e:e8:6d:5a:eb:b4:5a:18:a5:d4:01:1d:fb:
         46:e3:34:4a:ef:ec:3b:8c:1c:6a:e0:a3:8f:98:b3:fa:27:a0:
         7a:c9:49:0c:cb:a0:db:18:e4:05:39:2d:5c:1b:7c:84:a9:fd:
         8d:f9:63:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:52:11 2026 by rpki-client