Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
File:                     mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft (raw, json)
Hash identifier:          za8LEIYLyHNcRJq3QezqWWW1MElh4sbpYiKqABOuO9k=
Subject key identifier:   78:CE:50:5D:6E:AE:63:59:66:41:43:6E:0E:15:0E:B3:16:49:DF:65
Authority key identifier: 98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54
Certificate issuer:       /CN=98b5ca718f3b9a939a513641bd85cc94fa401954
Certificate serial:       01A0CFDAD0BFDF93E1FC14A38B8E19213D74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
Manifest number:          144D
Signing time:             Wed 23 Sep 2026 20:00:18 +0000
Manifest this update:     Wed 23 Sep 2026 20:00:18 +0000
Manifest next update:     Thu 24 Sep 2026 20:00:18 +0000
Files and hashes:         1: NrA991AGhswKHoCiVV7wuFGnlL4.asa (hash: U1LKdoZrRBxa/FCyy+LusNc8waRRDWwz6HuAWeQTgYo=)
                          2: mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl (hash: zKUNVVJMQ5qDtw7COkGJkA4riqAw6Jmqf1YiMGGlFcU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:da:d0:bf:df:93:e1:fc:14:a3:8b:8e:19:21:3d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98b5ca718f3b9a939a513641bd85cc94fa401954
        Validity
            Not Before: Sep 23 20:00:18 2026 GMT
            Not After : Sep 24 20:00:18 2026 GMT
        Subject: CN=78ce505d6eae63596641436e0e150eb31649df65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:e1:4a:84:8a:3e:37:b5:b5:fd:25:50:77:
                    e0:1b:0d:09:3e:be:9a:1d:2d:c6:7d:cf:78:d2:e7:
                    1b:19:3a:a2:bd:36:4f:09:8f:6f:95:aa:3c:f5:22:
                    a3:be:71:14:94:4c:c5:53:6d:f8:a4:9b:21:57:00:
                    82:9f:14:58:ce:c8:32:2f:a3:fe:ec:8f:2f:b6:08:
                    46:d9:73:73:0b:a6:8a:15:6d:fa:d6:58:1c:a5:c8:
                    8e:39:ff:a5:61:53:3f:89:f0:b0:e7:43:49:c0:ae:
                    52:99:c0:4a:a4:a4:9d:2b:31:93:bd:02:80:a9:50:
                    c2:48:96:5b:9f:16:dd:d5:e7:9f:79:1b:e2:01:26:
                    f1:30:15:4c:ae:58:7f:5f:24:93:83:c3:5a:6a:87:
                    26:9d:27:37:dc:77:23:f5:8e:a5:06:87:e2:61:c6:
                    a6:b7:41:ff:b5:01:a5:23:d1:c0:74:f3:24:88:6e:
                    0f:7e:9d:92:19:e2:12:69:04:76:9b:82:fd:39:75:
                    1b:86:6c:74:1b:19:af:5e:ae:e6:1f:39:d8:49:96:
                    08:9d:e3:7d:07:87:2b:48:7b:1d:30:1d:98:78:f0:
                    07:cd:06:b4:a9:0e:45:fa:d5:ad:d4:11:ed:dd:bd:
                    96:e9:6a:41:16:90:24:8f:ad:3a:7b:bb:b9:3d:06:
                    f2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CE:50:5D:6E:AE:63:59:66:41:43:6E:0E:15:0E:B3:16:49:DF:65
            X509v3 Authority Key Identifier:
                keyid:98:B5:CA:71:8F:3B:9A:93:9A:51:36:41:BD:85:CC:94:FA:40:19:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mLXKcY87mpOaUTZBvYXMlPpAGVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4d93b9-2c79-4e52-be41-c42ab0198373/1/mLXKcY87mpOaUTZBvYXMlPpAGVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:2d:be:cc:eb:54:2b:81:0f:22:c4:d6:40:eb:8a:88:1d:52:
         4e:fe:17:0f:cf:5a:11:41:b0:85:88:59:6d:e1:50:65:1c:09:
         da:b1:3f:05:71:a0:ff:72:74:de:46:70:37:ad:b1:ed:60:66:
         46:9f:c7:6c:da:99:ba:99:9f:87:59:46:88:16:a3:cd:57:1c:
         0c:f9:51:3e:3a:eb:d1:aa:0e:84:2f:80:88:0f:41:f6:9b:37:
         68:4f:7a:93:da:6c:a7:a9:b5:62:b9:8e:84:56:dd:7f:48:95:
         0a:f0:b0:8f:9d:a4:b8:35:2f:9e:d8:99:39:c8:cf:83:aa:a2:
         59:56:96:76:b9:b6:17:53:c7:9b:5d:40:22:dd:7c:4d:bf:87:
         80:1f:81:72:dd:62:bb:dd:fb:ce:a9:2f:cc:7b:98:31:e0:b5:
         73:91:df:51:bd:79:27:6e:86:cb:06:f5:7f:d2:12:56:e0:bf:
         51:b0:c8:cb:a5:d6:d5:23:9e:df:46:ac:c9:d0:58:2f:1c:b0:
         7e:1e:89:76:1d:c3:9c:42:e8:8c:4b:45:af:9c:41:ed:32:98:
         b6:d1:82:11:74:a0:d3:70:7e:c6:3a:e2:c3:0b:8a:4a:c6:b8:
         ca:a6:3d:97:82:5d:f3:60:38:a4:81:30:9a:bf:3b:c9:f5:44:
         6f:f3:94:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:34:32 2026 by rpki-client