Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File:                     mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier:          u6+GEW3IxXLp6BYRcuWFFRfkybKwrzkGidNPgl3KktM=
Subject key identifier:   F0:D5:9C:DE:01:64:1B:94:8E:54:3E:83:35:36:87:3E:C3:7E:C3:3D
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer:       /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial:       01A0CC3635C1F05C727BD61B165CFB230DDB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number:          1A6F
Signing time:             Wed 23 Sep 2026 03:01:39 +0000
Manifest this update:     Wed 23 Sep 2026 03:01:39 +0000
Manifest next update:     Thu 24 Sep 2026 03:01:39 +0000
Files and hashes:         1: 1-M17FsedROaF_Kne-5Hqf60_ZF0.roa (hash: dEdEroRDmqUptgIx5X9EfWXuPhIB2SKqFgAL57TKHAs=)
                          2: WMPpPZf121FGb5nB2wRyHO8v-RI.asa (hash: mKLFbSlwYIzmMfnFA89CJdrlniFC0Y+HVLJcXPAW800=)
                          3: iOPKRCMcUAyvxDbxa94mSh4aVLQ.roa (hash: 853t8WhJ4kw5HbkYp7EUF9CdroSNYLBypKw+/lvJndw=)
                          4: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: dpjJIXTW2Szn39XxIgu3YFD0b477uZEQf4dy4JInOP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:36:35:c1:f0:5c:72:7b:d6:1b:16:5c:fb:23:0d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
        Validity
            Not Before: Sep 23 03:01:39 2026 GMT
            Not After : Sep 24 03:01:39 2026 GMT
        Subject: CN=f0d59cde01641b948e543e833536873ec37ec33d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:27:70:06:2c:c8:6e:4b:9e:fd:0b:d5:71:b1:
                    5e:83:02:17:f9:30:49:89:d8:af:c2:c7:11:92:52:
                    3a:69:f6:be:79:9e:ab:9e:97:8c:72:19:21:50:fe:
                    f5:8e:04:4b:9b:d9:0c:f0:2a:70:20:01:43:2f:fb:
                    5d:0f:34:0e:e9:97:c6:2a:c3:ab:fb:0f:46:6e:4d:
                    15:c2:cb:c1:d1:2f:d2:e4:77:69:40:64:a7:6b:76:
                    a5:d2:73:3e:71:12:53:af:bf:8a:e9:2e:30:4b:85:
                    9a:63:85:72:17:6f:47:b9:59:44:54:b6:c3:80:8f:
                    43:41:3d:8b:a9:35:33:91:86:af:fb:af:c1:39:51:
                    3d:55:4c:7f:18:40:1c:57:58:56:a8:b8:93:a6:73:
                    d2:bf:0c:35:86:7a:3e:ab:71:73:c6:cc:9d:70:88:
                    6e:cd:5f:27:30:3d:99:53:b0:6e:4b:9f:77:73:c6:
                    ea:f1:b0:6c:1e:e0:1b:cc:44:14:e9:e7:24:98:49:
                    0a:63:60:09:6e:00:27:18:05:be:a5:82:aa:20:1e:
                    91:4f:97:45:5f:97:d1:2e:17:df:91:79:df:4e:f4:
                    fe:c7:87:55:bd:0c:14:e6:e7:d1:0b:f8:d2:9c:cc:
                    99:d9:ef:90:5b:b7:5b:a8:bf:83:fe:4d:af:06:4b:
                    fa:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:D5:9C:DE:01:64:1B:94:8E:54:3E:83:35:36:87:3E:C3:7E:C3:3D
            X509v3 Authority Key Identifier:
                keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c0:aa:f2:7c:0e:cf:33:08:ad:3d:43:38:1a:6b:c3:95:b4:
         0a:03:27:47:18:11:9d:1e:d5:00:cd:3b:ec:13:af:76:87:54:
         c2:5e:a1:34:ff:68:77:50:e1:3b:2f:99:0e:58:af:7a:3b:fa:
         22:ed:14:41:4d:29:ea:6c:f9:13:95:91:a4:a7:fd:9e:92:01:
         ba:a1:33:6c:a1:3d:61:15:40:56:ca:00:8f:58:45:28:d8:8a:
         12:3d:ff:53:bf:02:62:91:e0:9d:d2:40:de:2f:81:1d:c6:47:
         7f:31:1d:89:ae:8a:ad:85:36:99:61:df:69:e3:cd:68:e2:87:
         cf:f2:43:c5:fc:3f:52:ac:4e:8b:36:98:2f:82:b5:d0:73:4d:
         05:64:57:c2:9e:86:90:64:ac:32:e6:64:2d:b2:41:b8:d1:bb:
         65:bb:8f:23:d2:6f:5c:bb:7e:5a:cb:a8:51:c6:86:1a:70:06:
         ca:38:79:ea:37:ac:83:60:e3:11:e2:5a:03:93:0a:2c:3d:c8:
         3a:f2:b3:ae:4f:9d:87:c4:af:17:ca:f5:a8:32:b1:12:7e:60:
         fd:e9:c1:40:b1:46:a7:07:70:06:36:9d:a7:bf:6b:d9:6e:bf:
         31:fc:51:70:f6:f3:79:fd:f6:73:ec:be:c3:87:a6:2c:2f:5d:
         b4:93:20:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDMNjXB8Fxye9YbFlz7Iw3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ODRiOWViMTIyMjM3MTExYzFmOGNhNTc3MDdlYzczMDcy
OTFlZTgwHhcNMjYwOTIzMDMwMTM5WhcNMjYwOTI0MDMwMTM5WjAzMTEwLwYDVQQD
EyhmMGQ1OWNkZTAxNjQxYjk0OGU1NDNlODMzNTM2ODczZWMzN2VjMzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCdwBizIbkue/QvVcbFegwIX+TBJ
idivwscRklI6afa+eZ6rnpeMchkhUP71jgRLm9kM8CpwIAFDL/tdDzQO6ZfGKsOr
+w9Gbk0VwsvB0S/S5HdpQGSna3al0nM+cRJTr7+K6S4wS4WaY4VyF29HuVlEVLbD
gI9DQT2LqTUzkYav+6/BOVE9VUx/GEAcV1hWqLiTpnPSvww1hno+q3FzxsydcIhu
zV8nMD2ZU7BuS593c8bq8bBsHuAbzEQU6eckmEkKY2AJbgAnGAW+pYKqIB6RT5dF
X5fRLhffkXnfTvT+x4dVvQwU5ufRC/jSnMyZ2e+QW7dbqL+D/k2vBkv6JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDVnN4BZBuUjlQ+gzU2hz7DfsM9MB8GA1UdIwQY
MBaAFJmEuesSIjcRHB+MpXcH7HMHKR7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iOWMxZDctMmFlZC00Njk2LTgwYTct
ZDVhYmY1MDMxZDIxLzEvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9iOWMxZDctMmFlZC00Njk2LTgwYTctZDVhYmY1MDMxZDIx
LzEvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhMCq8nwO
zzMIrT1DOBprw5W0CgMnRxgRnR7VAM077BOvdodUwl6hNP9od1DhOy+ZDlivejv6
Iu0UQU0p6mz5E5WRpKf9npIBuqEzbKE9YRVAVsoAj1hFKNiKEj3/U78CYpHgndJA
3i+BHcZHfzEdia6KrYU2mWHfaePNaOKHz/JDxfw/UqxOizaYL4K10HNNBWRXwp6G
kGSsMuZkLbJBuNG7ZbuPI9JvXLt+WsuoUcaGGnAGyjh56jesg2DjEeJaA5MKLD3I
OvKzrk+dh8SvF8r1qDKxEn5g/enBQLFGpwdwBjadp79r2W6/MfxRcPbzef32c+y+
w4emLC9dtJMgiQ==
-----END CERTIFICATE-----
Generated at Wed Sep 23 13:17:20 2026 by rpki-client