Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
File:                     MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft (raw, json)
Hash identifier:          nnYsQVCGUzCsPlr/jez+iPGytxxhyIG9+eJmTYFwBao=
Subject key identifier:   42:80:9F:A0:F2:7F:2C:F3:CA:15:3B:EE:2E:54:A4:3C:6A:60:B3:05
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Certificate issuer:       /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial:       01A0DC84EA0BFB95A7CFF6440C32DB11E909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
Manifest number:          140A
Signing time:             Sat 26 Sep 2026 07:01:33 +0000
Manifest this update:     Sat 26 Sep 2026 07:01:33 +0000
Manifest next update:     Sun 27 Sep 2026 07:01:33 +0000
Files and hashes:         1: AczQ5m07bagbCSpYHKyOOUGJiuU.roa (hash: ZZkvh7a+nFDXqMju+v84npxtkZQE+y45PmWF7YuV5vg=)
                          2: E50dRzelevPp0RPUUn-X1whUhzs.roa (hash: ESKLNPEXcUQlYreIgYSRyGc6RpOOENWjDiinLW02gqM=)
                          3: KnXc9wIdUwOgGPZNVY_TSbLRRoY.roa (hash: Ur+szLOeyaAy0p6WFfKNCA4+hET9D0q8Orh268HfdLU=)
                          4: MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl (hash: 2sQ+niAXcEsrlKP6WfQ+f2Ih7Q4Jeom8Aq7VDsIWCRM=)
                          5: _YrGQaV-xv0pIG914t75tY-lgq4.roa (hash: mceOdmff8pDALeUaOfa99NehQO4QsbAd1TsnHGDmlpY=)
                          6: fyxsLRJZFn7CTFSJ2VnoPkiPR2s.roa (hash: 8HFUKsLTWzFpdFnaVvVRZkBC3eF7vcFOlN74+dbWE3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:84:ea:0b:fb:95:a7:cf:f6:44:0c:32:db:11:e9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
        Validity
            Not Before: Sep 26 07:01:33 2026 GMT
            Not After : Sep 27 07:01:33 2026 GMT
        Subject: CN=42809fa0f27f2cf3ca153bee2e54a43c6a60b305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:37:53:a5:84:0f:5e:2a:f5:a4:a8:f9:e0:2d:
                    24:0f:b7:cd:c2:cb:fb:44:55:d0:00:3d:ed:81:4a:
                    88:de:4b:be:ed:f3:cf:f7:3c:93:84:3c:3e:18:9b:
                    02:80:22:f2:a9:a6:3d:f6:84:ac:49:01:07:fe:e2:
                    28:91:f6:6c:83:b9:85:c1:58:03:2d:b0:6b:11:83:
                    ee:c7:88:f8:ec:35:d8:99:dd:80:e2:d6:16:49:4a:
                    2a:d5:35:8e:b2:50:d8:75:bd:b1:ef:31:cd:2b:c1:
                    fe:6c:d3:07:9a:04:06:51:10:39:29:60:7a:f2:48:
                    2c:ff:89:58:4a:2a:19:e2:f1:1c:ee:0b:20:53:a1:
                    f5:f6:6d:d9:77:d9:7a:de:74:ef:26:76:74:3a:52:
                    54:5c:92:81:39:7a:27:8f:2c:b6:91:50:07:42:92:
                    94:2a:46:2e:ab:dc:97:16:b9:af:54:6b:a9:77:de:
                    98:97:ec:b0:4f:16:c5:68:fe:63:65:5a:f2:c5:7e:
                    8a:48:4d:ad:dc:bc:16:1f:ca:14:a6:f3:63:71:a9:
                    40:26:f9:ae:a4:00:cb:d1:46:11:1d:1a:19:ad:e8:
                    31:de:a3:c8:53:67:2d:e5:74:f2:eb:32:f9:38:d5:
                    3d:c0:c2:33:27:94:ca:e0:fb:80:7a:dc:3e:e6:bf:
                    4c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:80:9F:A0:F2:7F:2C:F3:CA:15:3B:EE:2E:54:A4:3C:6A:60:B3:05
            X509v3 Authority Key Identifier:
                keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:3d:da:b6:5b:69:1e:af:40:9a:10:bf:2d:6e:44:ac:ff:0e:
         91:83:05:82:03:35:1c:d1:bb:7a:57:48:19:6f:a7:0a:bb:b8:
         00:98:43:15:3d:f1:e4:df:ef:f7:a3:cd:31:dd:e5:d6:86:50:
         4f:a8:89:0b:2e:7f:c2:4e:b4:0f:2d:78:26:fb:af:70:91:05:
         fb:71:c9:2d:da:c8:ac:d9:0b:8e:a4:52:97:11:43:ba:31:c3:
         aa:48:04:64:6f:d4:0b:2f:e3:e4:48:ef:22:b3:88:c9:f9:2f:
         04:35:36:e7:4c:48:1d:57:4c:14:39:2f:fc:30:82:db:1a:82:
         10:76:27:f0:1c:0f:64:11:fc:f1:6b:f8:70:88:6a:f5:67:6c:
         1b:e7:b3:9a:c4:e7:84:96:be:c5:c7:ac:68:9c:eb:4d:52:7c:
         d1:24:aa:d2:4f:3f:3d:39:85:94:a1:dd:19:f5:d8:9b:13:74:
         07:52:c1:be:46:23:21:f0:6c:6d:45:67:d6:4a:a2:94:0e:42:
         ff:35:aa:f3:83:50:ab:4d:7e:75:f4:41:74:d2:e9:d9:13:76:
         31:a8:7f:cd:7a:98:cd:87:67:07:04:6d:2b:82:35:7c:21:cc:
         de:7a:49:76:a1:43:e8:cc:8a:4e:23:e7:e1:40:43:8d:f5:3a:
         0b:1e:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:13:00 2026 by rpki-client