Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft
File:                     G7P94IsmaTklYxHhuyyD47IBmqA.mft (raw, json)
Hash identifier:          +AZfKIvJ7H0UH8V4DeUuyW/sxUvMMOd5CnVwlsMn/zs=
Subject key identifier:   F1:18:72:F6:0C:E6:C3:28:37:C5:53:98:BD:46:A8:81:62:D5:E1:CB
Authority key identifier: 1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0
Certificate issuer:       /CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
Certificate serial:       01A0D3B8536F6938035D548E3A341EB83A45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft
Manifest number:          79
Signing time:             Thu 24 Sep 2026 14:01:07 +0000
Manifest this update:     Thu 24 Sep 2026 14:01:07 +0000
Manifest next update:     Fri 25 Sep 2026 14:01:07 +0000
Files and hashes:         1: B2hGT1eFkagIo84BoxNvaIDMVIA.roa (hash: 573/CB1s6/sMNo4YjJ1CvHqqPGc0rLf2pK2SmcbOPLw=)
                          2: DmH5gRDpFfiT_eE74zyVFAM6RvE.roa (hash: Ln0A2hJEipplcNI/2hrqaUeztAp4seGSTDWnqMRb1zE=)
                          3: G7P94IsmaTklYxHhuyyD47IBmqA.crl (hash: sUGEV6pbFbZgh1pbq+TsibhIle40nADha2rGErkyWis=)
                          4: RGj9rL1wMLQwVhDUkBrVStUmsnk.roa (hash: MikgO3NO0X9g8TO+4NRN4OmI0IeK7x+Z+Rwx4lGXqJA=)
                          5: eQm7ECQvHhq1dyKk8vMd04vqJAc.roa (hash: CmWXX4RJjI+TQOnk4iGUT3yi0OCbnJ7wMFgBAsopRvw=)
                          6: g_XYYFrdF-AczNrOHWQ-2hb8Qds.roa (hash: AFVhMc4KzVQiDDONWoVw7yjTSkqbbvsOLoCm0WsRWrk=)
                          7: pj30e_0kadqwjq0L3J55WAoKI8E.roa (hash: 5DdRoX+R76hdeHDFTO1xAik3lfSUfaDcDKvdi+WYi1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:b8:53:6f:69:38:03:5d:54:8e:3a:34:1e:b8:3a:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
        Validity
            Not Before: Sep 24 14:01:07 2026 GMT
            Not After : Sep 25 14:01:07 2026 GMT
        Subject: CN=f11872f60ce6c32837c55398bd46a88162d5e1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a6:ae:ba:8b:1a:e1:ff:f3:f8:5c:cf:a2:8a:
                    56:ae:a0:a7:63:c9:d4:7c:4a:27:88:0a:dc:2f:44:
                    35:f2:e7:6e:a7:37:53:83:b5:00:60:73:25:12:5b:
                    71:07:62:d7:ab:17:b9:4b:62:e3:2b:8f:69:cd:5c:
                    fc:6d:ab:45:5e:16:cb:93:42:cc:88:5a:e7:3c:00:
                    8e:5f:02:f0:a0:44:f2:f4:10:e5:3e:1c:98:f7:19:
                    4b:c7:5b:b8:4c:ca:69:5a:e0:f7:e7:b6:5b:48:ad:
                    38:da:b3:06:db:8b:af:28:c3:6a:a5:14:07:48:f2:
                    ba:0b:06:d5:19:c4:87:ef:67:fb:4b:84:90:19:e9:
                    70:46:29:1b:54:b2:17:0a:74:82:9f:e0:af:34:24:
                    8b:2a:c4:6a:bc:5a:3f:b1:75:e1:30:6d:b7:cd:10:
                    38:de:4d:39:01:d0:20:cd:64:86:a0:0c:11:fd:d1:
                    25:ee:e7:a9:fc:88:3e:42:5f:51:e9:b1:50:e8:3e:
                    5f:31:f1:10:61:71:ac:1b:16:26:65:47:a9:1a:15:
                    68:9b:eb:5e:d8:78:62:69:13:bd:11:61:39:06:e1:
                    19:a4:b4:ca:c5:39:32:2b:da:e3:97:2b:25:9f:df:
                    6a:a4:db:0a:de:ba:fe:5b:d9:ab:f9:45:87:cf:b9:
                    5f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:18:72:F6:0C:E6:C3:28:37:C5:53:98:BD:46:A8:81:62:D5:E1:CB
            X509v3 Authority Key Identifier:
                keyid:1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5b:a2:3a:64:f1:c4:b7:42:c4:e9:c4:f5:ef:46:8c:73:34:
         bb:73:12:db:e6:d2:dd:ac:2f:a7:0c:2a:80:4b:c0:90:80:61:
         9a:e2:b7:dc:19:6a:8c:0f:71:68:b4:40:4f:ed:6c:2d:bf:99:
         30:98:e2:fe:37:3c:b4:33:fc:58:6c:38:5b:9b:fd:de:eb:72:
         10:5c:3d:33:aa:05:0f:80:f2:b3:2d:a2:f6:8d:dc:53:95:43:
         ad:92:3d:94:ea:8e:4c:93:4c:a3:58:03:41:2c:7f:62:7a:bf:
         21:79:b7:1a:59:2e:a8:6c:11:2f:f2:2f:6f:1a:13:0f:16:9a:
         ba:2c:58:eb:7e:90:32:69:e1:87:18:06:26:5c:2e:0e:0f:da:
         48:6d:1b:c5:37:ec:f9:1c:1d:47:4c:68:52:25:ac:67:55:e2:
         d5:84:d4:96:e9:09:3d:df:7c:a8:ed:06:92:0f:1c:70:53:20:
         d6:1c:73:83:de:43:f3:48:33:fd:e7:dd:ff:c5:c1:ce:01:34:
         60:3b:bf:32:50:18:82:3d:e7:7b:08:08:be:2f:35:45:7a:58:
         70:f9:bb:db:b6:dc:85:7e:0f:84:04:9e:94:28:74:d6:56:3f:
         54:72:93:a1:bc:b6:b1:c3:b3:be:77:73:d8:44:6d:a8:38:05:
         c9:de:d4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:16:38 2026 by rpki-client