Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
File:                     p0xnBuP769_xRqihTsKjKEqSumI.mft (raw, json)
Hash identifier:          oHZG0Ya5aGE+3eAfYUpZzzYAXRFAf7901Xri+gF1xeE=
Subject key identifier:   31:EF:39:44:21:A4:1B:6D:6A:7E:FB:66:21:71:41:C5:52:97:5E:07
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Certificate issuer:       /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial:       01A0ECD3780C19B2BAC9BCACBC631BE7ACEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
Manifest number:          19E5
Signing time:             Tue 29 Sep 2026 11:01:16 +0000
Manifest this update:     Tue 29 Sep 2026 11:01:16 +0000
Manifest next update:     Wed 30 Sep 2026 11:01:16 +0000
Files and hashes:         1: 4dIwW5at7FQWoB7Bcz_6uYRfLtw.roa (hash: mQop19T4ncECxQq+Z6Yf4kaQ7YiJVsFd1/CEXYQ60hs=)
                          2: Z9r0mo-cvy5UdKpZcBAx03n3nPo.roa (hash: Aqw8lxJKzRJWghSFPMzx3T1KZ7+I/RcC+00vjuoBl7w=)
                          3: apMckl_x5LcdR_beZIyAo4rk0Dk.roa (hash: I5Qds8uqRDqOxfiCNxdxJVvfewu9+/A3Y6nbRWgkwZ4=)
                          4: egNs0fvR0rvTeNy38L9Ly5HNBxw.roa (hash: n+9hTIbfmjtYB8IlfS0V4nQrh2GVHp+ZwL3oJyr2kwA=)
                          5: p0xnBuP769_xRqihTsKjKEqSumI.crl (hash: fLGLa9V6BCt4o15Q4uEd/f/vfUP6Fxz6wyuRlOpmrzc=)
                          6: tjw3CCsnBBLU1y3bKSuU8GAeu3o.roa (hash: 3Zet0K9hWLK6IRYOUnQC2wta7J6aQdy6xd+8jE8VWBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:d3:78:0c:19:b2:ba:c9:bc:ac:bc:63:1b:e7:ac:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
        Validity
            Not Before: Sep 29 11:01:16 2026 GMT
            Not After : Sep 30 11:01:16 2026 GMT
        Subject: CN=31ef394421a41b6d6a7efb66217141c552975e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0c:b4:5f:2f:6f:2d:53:5b:4d:25:a7:f9:fd:
                    42:c2:d7:3c:10:98:7f:ef:d2:c8:5b:dc:6e:4c:1a:
                    6f:a5:ed:aa:1d:bd:c1:73:14:a8:96:76:d3:5f:f1:
                    04:6c:65:12:06:4e:c3:45:81:3b:3a:c1:93:40:1a:
                    6e:f3:bd:ce:62:e1:69:be:ed:38:0a:7d:e3:ae:89:
                    27:67:69:9e:01:e8:df:9f:0a:5e:5f:58:7d:a1:93:
                    52:b3:ee:58:6b:b4:e3:51:64:08:46:3d:65:08:1b:
                    54:c2:8f:ef:07:50:b0:09:28:7a:f9:5b:67:27:94:
                    f5:40:91:4b:2a:e3:de:89:0b:22:01:03:aa:3c:dc:
                    38:52:16:34:80:cc:3c:37:3b:cc:59:a0:b8:a8:99:
                    dc:d1:69:a4:32:b2:d8:ee:9c:86:7a:21:ce:a0:52:
                    ef:94:76:2d:59:41:d6:3c:cd:e1:62:bf:5a:05:6c:
                    c6:35:dd:f1:4b:ec:21:4d:82:1d:99:2e:21:b2:cc:
                    67:aa:8e:fb:e9:e8:f2:f5:6e:7d:9d:4a:7b:3c:c1:
                    48:db:45:5c:34:87:09:a5:1a:dc:5d:d1:73:76:51:
                    9b:17:dc:dd:bd:b6:d4:f6:09:0f:b7:2f:92:a6:74:
                    6a:e2:6d:dd:8a:5f:c9:64:46:13:ff:7a:25:0c:83:
                    af:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EF:39:44:21:A4:1B:6D:6A:7E:FB:66:21:71:41:C5:52:97:5E:07
            X509v3 Authority Key Identifier:
                keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:48:be:a0:c3:95:dd:8d:7d:ef:c4:bf:37:09:43:62:d4:f5:
         35:2c:0d:45:84:9e:3c:7d:0e:50:22:c2:65:82:d9:bc:54:39:
         8d:fe:9f:2d:c6:64:99:45:10:82:1d:3f:2f:17:71:98:61:c3:
         b6:25:a0:ed:e5:34:42:14:79:3b:67:0f:d1:dc:84:c3:80:ab:
         2d:1b:79:80:f8:49:ca:41:23:4d:f3:68:0f:b4:47:cb:40:3b:
         2c:1f:e3:35:74:90:2b:4b:33:6f:b3:e2:83:fb:c8:04:c6:46:
         6b:cf:cb:7b:a9:0b:b0:29:b1:26:e2:66:11:6c:0b:36:06:77:
         a2:6b:61:7c:0b:3a:41:71:b7:e8:0c:fb:53:cc:4b:fa:aa:ac:
         80:e8:2b:4d:9c:9d:df:a5:5f:f4:95:de:29:c2:d2:0e:f4:39:
         e7:c0:9a:3e:72:85:f4:0a:37:d6:bf:0a:3e:7c:b0:19:b5:98:
         16:94:14:48:73:94:84:79:ff:3a:d9:bb:65:5a:60:75:39:63:
         c8:62:12:70:e8:62:41:11:01:34:e5:d1:fc:21:7b:53:04:48:
         d1:f8:3a:08:96:f3:47:f8:9d:ca:1c:4d:d4:62:96:8a:8e:ce:
         5d:b0:9f:bd:a6:9f:1a:87:69:a1:4c:11:0d:17:e2:47:59:0a:
         01:04:0f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:19:39 2026 by rpki-client