Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
File:                     96oDm4hrImV4vbakJ4G_WQRLsTg.mft (raw, json)
Hash identifier:          cvf+4qa/ndkRjumMMy+XZcq5n9PnzWmPm+6r2VwNm0c=
Subject key identifier:   33:0C:F4:69:7C:07:5C:6D:0D:EC:FD:41:15:3D:AC:3E:7B:87:AC:A1
Authority key identifier: F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38
Certificate issuer:       /CN=f7aa039b886b226578bdb6a42781bf59044bb138
Certificate serial:       01A0D1928B85DF8045A47FA17A69DD1675BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
Manifest number:          1A72
Signing time:             Thu 24 Sep 2026 04:00:37 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:37 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:37 +0000
Files and hashes:         1: 96oDm4hrImV4vbakJ4G_WQRLsTg.crl (hash: 075aDZdDKq+8SNRzt5Me1aN/tOoJiUAVx7ugzFu87Xc=)
                          2: AdZDptogFPfZkzR5C2w7ewUy5fM.roa (hash: eY6m5Pfp09t+29CrdJcppfTJAkMyMsubBMzfDZuh9Pg=)
                          3: Mhow_zubVnvAcwQbBcXt37SkVbo.roa (hash: 6hC28liE87/PAEstEfDeR9v3wr68y7o5n3aUzo7i9jo=)
                          4: lyKU2cRz1rwVy67EiMdpJEVU-uw.roa (hash: MyEdGCpP2vsnLyoMOlKjt9pc63D/h3XJBUfmhnb515g=)
                          5: qS5aITzh8bm2lSNZ9w-1v_OwEkM.roa (hash: nyRJgnJF5E43/9qDPBbeFHXa4kSfjJ0ENxyk0mTysYQ=)
                          6: uBEokvW7aAgryoMWD6Cv0elcFmo.roa (hash: H/a3hMppgWLont3KdCAnRpO2zISV9Otu71OhQuyZUU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:8b:85:df:80:45:a4:7f:a1:7a:69:dd:16:75:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa039b886b226578bdb6a42781bf59044bb138
        Validity
            Not Before: Sep 24 04:00:37 2026 GMT
            Not After : Sep 25 04:00:37 2026 GMT
        Subject: CN=330cf4697c075c6d0decfd41153dac3e7b87aca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:a6:42:b6:1f:f9:3b:4d:4a:b3:8b:68:7a:2b:
                    ed:a9:c0:0c:0e:bf:3e:75:38:52:70:c0:7b:77:61:
                    a9:1a:05:58:6a:1a:17:3b:68:38:63:61:2b:7c:34:
                    ec:21:08:2a:79:c5:49:ea:ff:e7:3e:1c:50:b5:1d:
                    63:d4:6f:c0:34:c7:f5:b4:98:79:5c:df:7a:96:18:
                    50:af:b3:71:48:53:cd:ae:2f:86:1f:4a:75:0c:26:
                    ce:14:41:16:d9:83:a0:0c:d2:d2:32:49:72:5c:01:
                    66:ec:1e:f2:c9:fe:4e:8f:f7:29:1d:4d:41:33:82:
                    af:f9:88:1b:79:fe:f5:2f:b3:ba:52:d8:db:ce:35:
                    88:cf:4f:59:e0:61:84:95:f4:39:8d:94:2c:f4:ee:
                    b9:69:26:11:e5:0e:bb:80:25:03:fa:3d:8b:f4:40:
                    03:9c:74:15:10:47:e0:86:e1:8a:49:9d:7e:69:80:
                    09:fb:58:dc:6b:44:44:ea:89:4f:b5:a6:27:e2:7d:
                    a2:df:47:03:24:1a:c0:61:d2:3a:d1:c0:b2:f8:a3:
                    59:50:35:d3:e5:6b:9b:ef:d4:bf:b6:74:06:70:4b:
                    2b:40:34:5c:39:0b:73:a9:ed:9b:b4:f3:81:96:27:
                    43:b3:06:c6:fc:de:fb:6d:19:f7:17:88:a7:d8:8a:
                    36:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0C:F4:69:7C:07:5C:6D:0D:EC:FD:41:15:3D:AC:3E:7B:87:AC:A1
            X509v3 Authority Key Identifier:
                keyid:F7:AA:03:9B:88:6B:22:65:78:BD:B6:A4:27:81:BF:59:04:4B:B1:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96oDm4hrImV4vbakJ4G_WQRLsTg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/4bbd6c-91ef-4461-821b-6f621d736aff/1/96oDm4hrImV4vbakJ4G_WQRLsTg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:4e:52:f3:16:7c:37:4e:9c:c3:7c:5c:b2:82:17:04:f7:89:
         50:06:d5:71:01:1f:e1:a5:01:89:28:f0:17:9b:73:ef:d5:d0:
         b9:cc:e5:18:93:9d:64:95:16:16:d1:95:4e:f8:c2:dc:e7:09:
         6f:5d:60:90:81:0e:89:1e:e8:5e:f6:b6:12:a1:51:38:5a:fc:
         da:08:82:10:3d:c8:30:58:08:2c:b8:0c:e8:c4:ef:17:3a:ad:
         b8:56:f8:6f:82:60:97:c0:d7:8b:18:a9:4e:53:a1:e1:c2:9b:
         93:30:c4:af:e8:15:0c:a8:6e:f3:9a:0e:28:e3:28:ca:e9:59:
         d2:c9:30:6b:72:db:dd:0a:90:23:22:ed:53:c1:69:39:23:da:
         69:64:ad:f2:47:fc:cc:ac:8f:e5:8c:94:c2:12:6f:c0:ca:5d:
         b4:53:e8:c7:0e:9c:ba:e7:0f:6c:e1:ba:9b:66:61:fc:03:5c:
         91:26:60:57:80:48:c6:a5:e4:03:0e:1e:5b:c4:16:b2:e3:96:
         46:e6:99:1c:58:6f:d4:f2:22:e4:b1:3a:41:5e:6a:54:f7:bd:
         69:c7:b9:c8:bd:d0:24:64:26:1a:3b:17:a8:18:ec:00:77:fe:
         80:7e:74:32:d6:c9:25:3c:66:d1:bf:ad:08:4e:c2:0a:cf:e1:
         d4:1d:5c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:58:29 2026 by rpki-client