Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
File:                     prswRa6njo-nZIEpcU-3NgaNw3s.mft (raw, json)
Hash identifier:          8cu41ZKYoX+ycmsVwCEyBEJUsGQECnprY5xAjvbwOrg=
Subject key identifier:   86:34:80:E9:82:E6:F6:DB:E3:C3:ED:12:A5:F6:17:D4:F3:E1:77:B9
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Certificate issuer:       /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial:       01A0CE5B08BC46FFB88A039BD9827B5A67AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
Manifest number:          0DC6
Signing time:             Wed 23 Sep 2026 13:01:07 +0000
Manifest this update:     Wed 23 Sep 2026 13:01:07 +0000
Manifest next update:     Thu 24 Sep 2026 13:01:07 +0000
Files and hashes:         1: G42-Fdl3gJAxSTqoOxR_BXG1oH8.roa (hash: pai33aN90kyIzUMmy6nzZwQfDVVekgEOsKj6Cwhhy24=)
                          2: prswRa6njo-nZIEpcU-3NgaNw3s.crl (hash: bRKfJf2pTt+DJj5r8tT2V1pHxRE1YPbbRPdgjPQMHXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5b:08:bc:46:ff:b8:8a:03:9b:d9:82:7b:5a:67:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
        Validity
            Not Before: Sep 23 13:01:07 2026 GMT
            Not After : Sep 24 13:01:07 2026 GMT
        Subject: CN=863480e982e6f6dbe3c3ed12a5f617d4f3e177b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:2a:a3:19:cb:bb:1e:33:ad:bc:50:13:d6:47:
                    b1:bb:cb:ff:68:18:a3:26:87:4a:de:6b:8b:fa:8a:
                    cf:e8:a5:6e:ef:77:1f:61:39:f0:ea:22:19:0b:a9:
                    7c:fe:dd:22:40:02:dc:b2:f0:b1:bd:4f:79:fd:f6:
                    7c:27:2a:cb:c6:34:54:e0:52:e3:81:1e:30:9d:7e:
                    07:fb:2d:1b:8d:97:d2:30:68:94:f2:47:fa:b2:d0:
                    26:3b:95:d0:4e:5f:49:50:5b:ec:a4:08:c7:56:28:
                    c9:ef:fe:7b:6f:bd:5c:05:70:87:de:3d:01:84:97:
                    33:f9:da:8c:5d:12:e3:9c:b9:34:52:e3:4d:31:37:
                    d0:33:94:d1:21:31:b8:c5:a3:31:cf:a8:28:6d:cd:
                    45:dc:51:4e:0d:6c:95:82:04:2b:6f:a0:99:20:b5:
                    41:bd:69:86:be:3f:af:c7:dd:f4:58:bd:e6:d6:56:
                    39:f5:7e:16:e3:7e:f4:33:5b:e7:9d:e0:cd:c4:29:
                    d2:e6:e7:b4:f2:d6:e0:ce:04:be:77:85:04:16:53:
                    2e:76:28:89:eb:74:eb:64:b1:d5:af:15:86:14:cc:
                    61:a5:04:5e:c5:86:c6:87:ff:65:00:c3:88:5c:3a:
                    12:5f:b2:42:74:33:87:50:4d:40:42:de:1f:ff:62:
                    aa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:34:80:E9:82:E6:F6:DB:E3:C3:ED:12:A5:F6:17:D4:F3:E1:77:B9
            X509v3 Authority Key Identifier:
                keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7d:f8:5f:7a:9b:02:48:5b:e0:c9:8f:de:5c:3e:86:a9:e2:
         df:ba:c7:40:43:0d:a1:de:73:86:9a:80:47:9d:ed:ef:4a:ca:
         59:0d:6f:e9:93:e8:8d:18:41:60:9d:be:93:d3:28:34:40:c6:
         c3:b2:07:76:32:b6:89:05:81:36:0c:51:4a:cd:44:56:32:81:
         fd:80:71:ea:c5:e2:2b:53:82:cb:17:87:b3:2a:31:88:24:30:
         dd:a3:82:16:d5:35:20:ef:34:19:7d:91:49:f7:77:fd:a8:e0:
         c6:f2:df:5c:33:1b:f9:3f:06:4b:67:ca:4b:f7:d2:16:32:18:
         83:6e:ba:28:6e:6d:91:75:83:07:e6:d4:ba:f9:2a:f9:75:d0:
         9f:bd:c2:dd:78:05:61:a6:6a:1a:88:0b:3c:fd:8c:31:28:44:
         78:fa:5a:6e:c9:b7:af:c2:82:4d:e5:f3:60:f3:b0:30:0e:83:
         f4:c9:73:37:2d:34:1e:4f:5a:31:8a:eb:7a:f5:29:cb:88:c1:
         9d:ff:61:71:3d:85:92:48:1d:7a:35:56:47:67:f2:88:98:8b:
         b5:d4:cf:f2:e5:5c:b7:26:68:1f:62:bb:13:4f:47:9c:45:97:
         93:0d:6c:7e:85:79:fe:d7:a4:6c:7a:68:df:54:59:46:41:05:
         43:e0:e0:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:48:30 2026 by rpki-client