Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
File:                     IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft (raw, json)
Hash identifier:          wqYrPrjHzmGPTDo5FPYBSONB1SNJVN3rTN6gHzlmZp4=
Subject key identifier:   B3:5F:1A:CA:01:A1:8D:1C:0A:77:6E:74:CD:17:E2:62:53:FF:1C:E5
Authority key identifier: 20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B
Certificate issuer:       /CN=2037512e5355e815acf064603f8ae3f5528a5e3b
Certificate serial:       01A0DB3AD250806334A03BC1876F61540A66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
Manifest number:          1955
Signing time:             Sat 26 Sep 2026 01:01:00 +0000
Manifest this update:     Sat 26 Sep 2026 01:01:00 +0000
Manifest next update:     Sun 27 Sep 2026 01:01:00 +0000
Files and hashes:         1: 7NU7YP8yxLFpnQBBYtcuaRDEGUA.roa (hash: k/zbB18PgkPmziRqyXI4Gk2XiCOO31h3yiv35i98mj8=)
                          2: IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl (hash: TWGwMH+nK858dHKVB8jS0SFNGLxekejFmWG9sXLnmFM=)
                          3: PlbevzEYKM-qoh1CjpvoAB1dXbA.roa (hash: YKiIoTrsFM0sqDV9b32wDyD2g4ipCQJX8lIN5RJ11x8=)
                          4: lj_OVhtyzOOGAl8O2ZX2b9-uYP4.roa (hash: /IN+PkswpcNIMIACvoERnunbvdFhIwO4BCUWqEEWkVE=)
                          5: pcsFeaV3Q92b77GWIua8iGThjjs.roa (hash: 8le0MnhJOxmuv/SwPpz3iJKzt5RMjg2jdBaWOK5fgdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 00:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:3a:d2:50:80:63:34:a0:3b:c1:87:6f:61:54:0a:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2037512e5355e815acf064603f8ae3f5528a5e3b
        Validity
            Not Before: Sep 26 01:01:00 2026 GMT
            Not After : Sep 27 01:01:00 2026 GMT
        Subject: CN=b35f1aca01a18d1c0a776e74cd17e26253ff1ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:85:ae:d0:2b:04:39:72:77:ac:62:aa:de:
                    f9:60:75:bd:96:93:ff:9d:87:91:1c:83:76:de:c6:
                    93:70:fa:85:35:35:43:fc:4d:c4:b2:a9:82:c3:2a:
                    d5:06:e0:25:cc:97:33:c2:0d:42:8d:5e:d8:33:65:
                    d3:3e:8b:e0:1e:b7:af:1c:b3:fd:c8:12:44:63:76:
                    a1:a3:75:82:77:62:99:83:c1:29:14:33:4e:0c:7a:
                    d2:e0:c9:6f:19:87:bc:16:ee:83:7b:85:d9:16:1d:
                    43:50:ec:ca:20:47:68:80:87:c3:9f:f7:9e:ab:1c:
                    6a:af:70:3c:3e:31:8b:1c:22:ac:67:3a:56:55:c5:
                    4b:fc:f8:fa:87:f3:92:18:a8:30:5e:13:29:ea:49:
                    ce:8d:4a:20:aa:c4:08:43:55:19:97:d8:80:fe:c1:
                    11:75:36:6d:f4:23:11:21:69:2e:64:0d:f7:b7:ff:
                    11:25:95:6d:97:47:4b:9e:f4:46:ce:d8:d3:c9:81:
                    a6:59:48:33:08:cc:b5:ac:24:b7:fd:0f:df:16:1a:
                    54:5b:64:de:b5:42:6e:8c:99:26:a8:3b:c0:b5:69:
                    b1:17:05:84:df:d1:db:40:47:3f:cd:48:f3:45:99:
                    d7:72:0a:8d:97:8c:85:e8:58:05:66:3b:f6:5d:19:
                    c4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:5F:1A:CA:01:A1:8D:1C:0A:77:6E:74:CD:17:E2:62:53:FF:1C:E5
            X509v3 Authority Key Identifier:
                keyid:20:37:51:2E:53:55:E8:15:AC:F0:64:60:3F:8A:E3:F5:52:8A:5E:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IDdRLlNV6BWs8GRgP4rj9VKKXjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b1475d-fcc2-48bb-ae01-c2ba24653f7b/1/IDdRLlNV6BWs8GRgP4rj9VKKXjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:a3:7a:54:0d:49:76:34:24:f6:14:a7:76:2d:3f:90:06:27:
         db:ec:a4:1a:a2:aa:58:c3:97:4e:c7:68:9b:2a:e8:7c:80:93:
         c6:20:70:60:50:40:57:1c:50:58:53:dd:99:64:03:64:fb:3f:
         8f:be:dc:83:fa:2e:b6:9f:7e:6c:56:d8:9d:b2:73:72:cf:06:
         3b:06:dd:b2:5e:25:c9:ca:55:b8:bf:41:1f:73:05:e8:ca:81:
         22:aa:a0:13:06:f7:cf:b2:d3:08:a3:c5:08:9c:d4:90:40:c1:
         1b:f9:a4:51:b6:0c:8e:f3:1b:94:a3:6b:36:64:bf:7e:ae:9a:
         34:4a:cc:6f:04:53:98:63:d8:47:39:fe:56:6b:41:49:4f:36:
         1f:91:b7:bb:9c:3e:9f:e6:48:10:a0:fd:53:95:61:09:1e:59:
         a4:f7:55:de:bf:aa:52:b9:a4:d1:ff:0c:d5:38:38:4f:f3:d5:
         0a:35:e6:82:85:14:d3:64:af:c3:9c:72:12:f1:07:7d:94:9a:
         ec:12:f0:54:4f:4c:11:d4:c3:e5:5d:83:45:25:66:13:d9:16:
         83:1b:31:24:10:a8:0f:aa:6f:b0:43:ec:30:45:ea:97:a9:43:
         41:65:2b:50:ae:5a:a1:b2:06:37:f6:d5:ee:84:ba:06:4f:7c:
         05:8d:d8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:41:44 2026 by rpki-client