Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File:                     hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier:          5EXa07UjaVPSX/Yseo7tBWxh8xBzl8iJNd0AHAT8dZ0=
Subject key identifier:   7C:33:CD:43:99:56:A1:D4:C7:3F:3A:52:BB:D5:D4:1C:45:C2:98:13
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer:       /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial:       01A0E36378B6EA51869D4F1695E08EE1CA04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number:          17B6
Signing time:             Sun 27 Sep 2026 15:02:21 +0000
Manifest this update:     Sun 27 Sep 2026 15:02:21 +0000
Manifest next update:     Mon 28 Sep 2026 15:02:21 +0000
Files and hashes:         1: 1-3Gcx58fzra_v9eEZ6N_xRMnk-U.roa (hash: LxQsMlE6dccDgJVSFe4kQrNckGUI9bmtbjF5OIYdtrs=)
                          2: 4KN1agjGCetNojWRsDbUJbjhQKs.roa (hash: yTfVhH1Hf4jYfP2TiWx0oinRMtZ2QHu/x1BdH7OqRl0=)
                          3: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: NFcAxwSF21ZdrjVKUdEHa/hkL7jJriEwbaPigtSo+rM=)
                          4: yyn2geOIU_--UUnG8pkuvnJsDpQ.roa (hash: bxmnlrGKd567WF+3ZEEy2gfmdqW2wGXYEodGeY8tXEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:63:78:b6:ea:51:86:9d:4f:16:95:e0:8e:e1:ca:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
        Validity
            Not Before: Sep 27 15:02:21 2026 GMT
            Not After : Sep 28 15:02:21 2026 GMT
        Subject: CN=7c33cd439956a1d4c73f3a52bbd5d41c45c29813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:67:02:56:8b:e5:ff:5f:28:d8:1c:40:19:89:
                    e3:ec:c8:70:c0:22:90:47:f9:4b:0b:2f:79:53:5f:
                    82:28:60:b5:ff:e5:3a:28:62:9d:81:b1:d0:83:90:
                    f6:8e:9e:c0:19:6d:75:95:ef:5c:cd:0b:8e:ad:18:
                    8d:54:9b:85:f1:cb:8d:20:5f:be:8a:e8:71:33:c0:
                    2b:fd:47:85:fb:a7:07:da:ad:b5:00:24:79:54:a6:
                    2f:ff:14:76:85:e8:6b:70:bd:e4:b8:66:d2:04:21:
                    cd:7d:ad:52:97:d3:34:51:72:13:57:d5:35:cd:63:
                    df:44:ce:00:9d:7d:ed:1b:cf:df:52:97:6a:ee:9d:
                    43:f0:62:0e:9f:9d:0f:bb:2a:89:ba:2b:7b:6f:94:
                    87:2b:8d:3b:b2:fa:3a:a3:5d:71:12:ab:df:a7:d9:
                    41:62:35:fc:1e:18:e6:4d:b8:ea:3c:df:a3:12:d4:
                    93:0d:61:6a:76:10:37:51:9e:c2:1e:fa:5c:42:66:
                    3d:82:ed:ff:63:b9:a1:5d:72:8c:27:64:e1:fe:44:
                    a7:c2:8b:b2:d3:a5:8a:67:1e:bc:c9:d0:a6:b9:51:
                    71:7c:00:90:60:e4:42:54:a7:7c:b1:29:06:33:c9:
                    25:e2:70:55:27:e9:ed:8a:e4:f7:01:1e:26:6e:68:
                    0e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:33:CD:43:99:56:A1:D4:C7:3F:3A:52:BB:D5:D4:1C:45:C2:98:13
            X509v3 Authority Key Identifier:
                keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:d5:51:ce:a0:4a:16:47:ae:5a:e5:74:4b:54:da:91:1d:4a:
         03:e0:d7:af:a5:c6:5a:c4:5c:18:c9:cd:5b:00:c1:70:77:01:
         8d:98:3c:b2:b0:8f:d9:40:62:0b:cd:03:04:9d:14:b0:d2:4e:
         bb:8e:29:5d:c0:37:3d:23:ca:73:b2:24:7d:5b:2d:37:d7:08:
         0b:ee:0f:43:fc:96:a4:36:64:c2:98:b6:90:a2:7b:12:d8:72:
         34:30:a4:89:d0:c8:e1:81:5e:61:16:37:aa:9a:6d:3a:9d:33:
         55:b1:d9:9d:57:5d:21:33:5b:20:ca:d5:6d:9a:08:65:7b:81:
         c9:db:ef:da:0a:2c:42:7f:fa:81:31:66:8e:f6:d6:38:e1:37:
         85:a9:0e:37:2f:b5:e7:a1:07:a2:75:78:6e:ae:a4:4d:39:90:
         49:dd:bf:6e:07:c1:27:d2:cb:ba:e3:bd:bf:b5:8b:52:c3:cb:
         d0:86:c4:a0:ee:c4:03:aa:d0:bb:4d:51:65:10:d0:98:69:ea:
         b2:c1:d6:ab:8b:39:d3:33:56:95:fa:d2:44:3c:9e:39:01:57:
         2f:ef:b2:ea:8a:4b:02:91:40:b2:c0:b9:31:c0:5f:26:81:0e:
         ed:2a:14:a5:ec:d8:8f:a6:36:a3:fe:85:49:79:b2:56:cc:f1:
         17:2b:f4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:57:43 2026 by rpki-client