Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
File:                     YVdYrqR51PMqnonpgI8w7fwjsuc.mft (raw, json)
Hash identifier:          JZKH9IsMOGgj7+vhRQ16XOsow19WaLYcTIoA7gnlvMc=
Subject key identifier:   01:13:07:29:15:59:A6:DD:B1:C3:0A:E6:43:08:7B:10:BC:A0:44:A6
Authority key identifier: 61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7
Certificate issuer:       /CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
Certificate serial:       01A0DD294ABDA29A24CC3A153A3C012A9C73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
Manifest number:          029D
Signing time:             Sat 26 Sep 2026 10:01:05 +0000
Manifest this update:     Sat 26 Sep 2026 10:01:05 +0000
Manifest next update:     Sun 27 Sep 2026 10:01:05 +0000
Files and hashes:         1: 8Gb8ioS8IZOfRTNwkMs-Mq3MmrU.roa (hash: kfne53zblTKY2xvy+E9g80qQGuUn/11CM4XRi/Nrbe8=)
                          2: HTkWVqwWdYMU9-z901Fkn7FF9qw.roa (hash: 84JM0NxqvFzDNFSOBlDrmX34vQu0On4QXXv7AseJZbk=)
                          3: MMWviOYCBW0u-v9YnjmnhatFDV8.roa (hash: yRtMl95uh8M4yTrzp5OTDyFY8UopBvd6bRvc/jRLsfc=)
                          4: YVdYrqR51PMqnonpgI8w7fwjsuc.crl (hash: gGnpyejKBeziRbHOmPQ/qMysWl4lHRwmNv2+JteoU7A=)
                          5: _VWZ0XjMvcGoTelbVe1k8IzzHlo.roa (hash: G04H0qYQyU9/pfzI/sNJzq68+ieZrRS73Fbf1e3vIW8=)
                          6: cCA0wjgUUO3sAdPTJXUOJCpOGaU.asa (hash: vuAaHA0d+fmntVENPlaiPGFPGkTEzsB/M+vM35Fie4s=)
                          7: hLbS1YYILQ9sQxDeGkNOA1MpSJs.roa (hash: aCviuUzfEy79q4aOge+wEpAQjNz6H04AGobOXXp8iek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 10:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:29:4a:bd:a2:9a:24:cc:3a:15:3a:3c:01:2a:9c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=615758aea479d4f32a9e89e9808f30edfc23b2e7
        Validity
            Not Before: Sep 26 10:01:05 2026 GMT
            Not After : Sep 27 10:01:05 2026 GMT
        Subject: CN=011307291559a6ddb1c30ae643087b10bca044a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:45:98:08:be:27:c1:c9:f4:75:2f:63:1e:
                    83:74:89:4e:8d:1b:57:e8:e5:fc:7e:5a:2f:6f:05:
                    59:90:3c:c3:9f:97:49:6b:e4:7c:ff:99:23:10:4b:
                    3a:65:d6:19:57:b3:c1:b2:f7:c9:67:0e:29:48:c9:
                    9a:26:9c:61:5d:16:5d:69:09:15:ef:54:eb:e9:9c:
                    08:a3:76:5e:39:1f:96:a7:f9:28:8d:d4:6c:94:31:
                    97:24:c1:68:45:c7:5a:d0:ea:d4:8c:1d:6b:1d:16:
                    07:89:f5:00:61:cc:ef:65:ba:73:64:8d:32:a4:30:
                    0a:8e:e1:a5:96:63:92:37:dc:f0:69:87:da:1c:64:
                    68:e1:3e:3a:6b:05:76:50:a8:6e:ce:3c:05:45:b4:
                    1c:14:81:58:3f:df:b3:d5:73:e5:90:67:bd:87:3e:
                    f5:98:3c:7e:57:a5:93:f3:32:c5:4a:76:b2:b1:d3:
                    06:98:0b:e1:f7:fd:bf:2a:09:31:0b:e2:e7:01:d5:
                    85:cd:73:3b:5b:7a:96:ac:90:93:7b:c7:27:ca:2c:
                    ae:fc:b4:fc:b9:00:b0:90:8f:29:c4:72:04:aa:ea:
                    6a:7b:ab:b9:a9:6d:14:91:3f:eb:d0:5b:73:76:ec:
                    4a:4f:18:b1:3c:ea:56:0b:fc:68:25:be:91:df:d5:
                    3d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:13:07:29:15:59:A6:DD:B1:C3:0A:E6:43:08:7B:10:BC:A0:44:A6
            X509v3 Authority Key Identifier:
                keyid:61:57:58:AE:A4:79:D4:F3:2A:9E:89:E9:80:8F:30:ED:FC:23:B2:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YVdYrqR51PMqnonpgI8w7fwjsuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a1c95f-f3e3-4531-a465-e90d9830e8c5/1/YVdYrqR51PMqnonpgI8w7fwjsuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:94:fb:09:d7:53:dd:8a:d7:e0:8f:e2:3e:74:b2:20:cb:b6:
         7c:67:a1:3e:12:12:70:cc:82:72:66:dc:e0:ab:e6:1a:70:d2:
         b2:22:4d:32:9e:d0:72:ff:c9:ca:6b:08:7e:2f:bd:77:2e:4f:
         9a:87:24:55:a4:f2:99:a4:15:ed:a4:9c:4c:63:a0:8b:0b:41:
         ce:f6:1d:2a:15:38:54:2a:6b:97:ff:68:07:c6:6f:79:28:c7:
         56:e4:93:c3:60:fa:e3:5a:99:62:4e:3d:5d:06:2a:e6:c6:12:
         06:05:25:cb:9d:12:fb:20:a3:76:af:d1:c2:ae:96:5a:a3:80:
         1d:04:51:86:00:3e:06:2b:8c:cb:1a:dc:64:b7:ac:01:4f:8a:
         56:da:0a:91:23:0f:06:ce:f3:01:a7:71:37:6d:00:5c:6f:68:
         52:9e:02:ef:81:3d:c9:a0:d5:21:89:81:85:7c:87:75:36:a5:
         f3:bd:20:ea:57:bb:80:51:7d:21:71:ce:e2:f2:00:9c:8a:da:
         ba:8b:48:5e:41:c1:6c:7b:b1:22:5a:68:28:ba:2d:5f:7f:36:
         a4:39:57:49:36:c4:d1:4d:b0:f9:56:0d:2a:02:44:b5:e1:55:
         2f:2e:2d:8b:44:dc:3f:9a:19:f0:d5:15:17:43:20:1e:ae:da:
         fe:05:40:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:33:31 2026 by rpki-client