Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
File:                     IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft (raw, json)
Hash identifier:          bOR7jUI/VRAI1NJxRfdr352uEU+qAt9hINFmUPyODY0=
Subject key identifier:   9F:C5:64:72:BB:45:41:1E:1C:1D:62:14:5D:E2:C8:D6:2E:F2:2C:C5
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Certificate issuer:       /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial:       01A0D237541B022501311F205236C4797461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
Manifest number:          1356
Signing time:             Thu 24 Sep 2026 07:00:36 +0000
Manifest this update:     Thu 24 Sep 2026 07:00:36 +0000
Manifest next update:     Fri 25 Sep 2026 07:00:36 +0000
Files and hashes:         1: IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl (hash: shU72PQcYRIFtOh9tkMPPzqrsK130dng4FzYxF+gz7w=)
                          2: Mlg2-dFb_pDIGLBjBDPo1_IYStc.roa (hash: 3gsMMrCsLQ277PtzM/yqX0/jKqAoyQGVpd57kpWn5Y0=)
                          3: Panm1LrJmzFbCeMY6auzDqltMH4.roa (hash: pK/SKAriGKfng+iefu9gjvhHjR0adoVJ2FdRhaw344s=)
                          4: p0Xs1g2gPrpuR1TetywC5LyG04w.roa (hash: Z4fC0K+qHQ0x60Cz0JhKoddXxrrHYGk8WlzQTKAj6OU=)
                          5: t1JuJqtlm5tkcuv11rLCrZPDDhA.roa (hash: W72v12TOiNZdKxjgiVDf5vxJzfgbF5c3IIwEwUVHgBQ=)
                          6: uXzbb7T22o7J6EkVQREXQcswsLw.roa (hash: ydW5n2G12ZkBLCFYY+WI/eQDK/fBHPVgfipaLbRLN/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 07:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:37:54:1b:02:25:01:31:1f:20:52:36:c4:79:74:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
        Validity
            Not Before: Sep 24 07:00:36 2026 GMT
            Not After : Sep 25 07:00:36 2026 GMT
        Subject: CN=9fc56472bb45411e1c1d62145de2c8d62ef22cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3c:3f:94:e9:7f:31:b8:dc:cf:24:38:3b:65:
                    46:32:bd:4f:49:74:8a:cc:b2:fb:3e:b4:ef:0c:b1:
                    76:2f:fa:c3:11:64:47:4f:4f:a2:bf:a7:6f:b5:00:
                    b0:be:35:96:8d:13:f5:a3:43:6a:9c:dd:41:f1:3f:
                    35:44:2a:4f:c8:79:0d:ea:05:73:db:48:1c:23:06:
                    54:03:68:52:0b:f2:4f:e3:ed:fb:dc:71:93:2b:56:
                    89:4c:8e:d8:63:9f:42:75:42:f6:be:47:79:41:d3:
                    7f:e8:a4:9e:07:e0:43:c0:1e:d0:de:01:c3:a3:71:
                    e4:00:2e:22:75:34:5a:26:c6:5e:8e:f9:aa:0d:9d:
                    07:f2:79:4d:e2:98:29:bc:9d:06:50:ef:15:fc:3a:
                    ec:82:86:31:3f:fd:b6:b3:d0:29:98:d2:9c:7d:04:
                    c6:b7:7a:fe:27:dc:a1:e1:7a:eb:5b:18:89:8b:99:
                    40:94:dc:bb:ab:97:11:9a:9f:c5:ec:df:56:a5:b3:
                    9d:ee:71:6c:ee:fd:d4:ca:38:89:0a:7a:8e:73:03:
                    85:bd:f7:a6:cd:10:ab:57:e2:58:b7:5e:fd:d4:df:
                    58:05:48:6b:23:c4:8c:90:51:1f:8b:7c:68:0c:2e:
                    f6:cb:9f:f4:21:d4:72:05:ae:69:e2:db:64:3b:57:
                    57:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:C5:64:72:BB:45:41:1E:1C:1D:62:14:5D:E2:C8:D6:2E:F2:2C:C5
            X509v3 Authority Key Identifier:
                keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:13:b8:2c:f7:93:bf:1b:e7:14:a1:be:ea:fe:90:91:23:0a:
         48:67:ce:3d:19:0b:e0:70:19:a9:60:7a:60:a1:fe:aa:a1:7d:
         45:0a:15:a4:f3:6a:ee:0e:9e:23:cb:2f:a0:85:90:60:a0:ba:
         a0:5c:21:20:eb:cd:b0:25:95:0a:cd:ed:17:f2:dc:c2:71:2b:
         b3:61:56:c4:b6:49:00:02:79:09:21:9e:bf:5c:e4:e8:28:00:
         c0:8e:1a:ca:20:ea:e6:d1:f8:fc:f8:48:83:68:ed:dd:ac:2b:
         49:81:e8:ca:9d:a8:35:c8:78:d2:c4:34:bf:50:30:f8:c6:1e:
         71:7d:b0:52:3b:d2:06:3c:ce:66:e5:8a:3e:94:56:95:84:3f:
         a7:c1:6f:45:44:7e:fd:66:5c:6f:28:6d:c1:16:87:48:15:47:
         c0:1c:31:f0:92:41:67:06:d0:a4:ae:5f:92:f1:11:66:75:0c:
         36:b5:bf:13:87:d0:06:fb:11:9a:4f:8a:5a:91:36:95:e7:07:
         55:2a:de:8a:a3:79:41:bb:75:de:02:49:dc:00:86:c7:40:35:
         22:0d:e6:5d:50:75:59:e6:2e:f2:37:6d:6c:77:a5:76:54:b0:
         7b:87:78:03:e1:b2:2a:b2:43:db:21:22:73:12:67:8b:16:fc:
         d0:6f:28:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:36:48 2026 by rpki-client