Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
File:                     3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft (raw, json)
Hash identifier:          uu3CCogQk9j2cldIr5A7GRHO/gcVC3y3exEOhwAKg1w=
Subject key identifier:   E1:38:A7:F4:46:74:FA:56:28:4A:55:F4:11:AE:3C:63:1D:20:E8:76
Authority key identifier: DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28
Certificate issuer:       /CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
Certificate serial:       01A0CEFFCAF06D3215858C2817EB75BAFC95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
Manifest number:          19C0
Signing time:             Wed 23 Sep 2026 16:01:05 +0000
Manifest this update:     Wed 23 Sep 2026 16:01:05 +0000
Manifest next update:     Thu 24 Sep 2026 16:01:05 +0000
Files and hashes:         1: 2VjRyY35srd4tFZwYR3n2JNFpTM.roa (hash: KVtq1ksbn0eFzWJ+vieJNzHVkLQs/x4Zv2yLi0iRHw8=)
                          2: 3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl (hash: GaKpEMs9zSvvr6R1Lm3i2+pCWY2AbOQSqo8cYSezbpo=)
                          3: 9BqiZznRTC9JSPLmSXD7Iy4lCmY.roa (hash: GZIDFs4jfGkO+SNPF/qf6wnC22M8x1B+nVZUJlDdzRQ=)
                          4: O6c_sWPEuIkptHQ9GoqxdPNGma0.roa (hash: nQDbcQ+hZgM3fnmlCao10gC2Eu9sMXU4j7YHjTJV+9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 16:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:ca:f0:6d:32:15:85:8c:28:17:eb:75:ba:fc:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd5f72f0facf52705727c039bdc1fbb7cc97d428
        Validity
            Not Before: Sep 23 16:01:05 2026 GMT
            Not After : Sep 24 16:01:05 2026 GMT
        Subject: CN=e138a7f44674fa56284a55f411ae3c631d20e876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:46:62:e3:0a:f3:7a:1c:1a:73:7a:87:8f:
                    68:40:3a:4b:5d:39:21:00:48:5f:9e:cd:b6:11:41:
                    07:7a:b7:15:74:d3:67:36:92:dc:d7:8a:c4:ad:8d:
                    97:65:10:5b:aa:c9:d4:3c:06:ae:b2:15:79:2b:fd:
                    d3:37:de:1b:02:6e:e1:24:e9:3c:f4:b8:db:0f:8c:
                    f9:16:6e:6d:66:09:6b:29:0c:d5:3f:3f:98:54:91:
                    69:d3:0f:c1:05:20:48:d9:3e:83:4b:af:2e:b7:bd:
                    29:40:e5:45:08:97:0f:33:5c:a6:1e:f7:b1:fd:f0:
                    fe:b7:b9:c0:9d:1b:7f:a7:6e:bd:7d:6c:94:34:b7:
                    ee:b8:ef:63:5e:51:2b:a9:16:b1:a7:3e:fe:68:cf:
                    c6:2b:c9:a2:ad:a5:ae:99:d2:7f:a4:1e:fc:69:12:
                    9d:ea:4d:4c:ee:6a:49:75:f1:38:d5:d9:d3:a3:72:
                    dc:59:9a:e7:22:21:79:8c:fb:03:60:c9:8b:ec:6b:
                    98:d0:1d:2c:a2:b1:24:11:e1:25:04:e7:79:d4:e0:
                    96:60:e0:85:b0:6f:c8:b1:30:5b:ae:f3:1f:59:26:
                    66:98:84:d0:4f:ee:17:f0:32:6e:28:c2:00:fd:1e:
                    35:67:7f:b0:fe:a0:bf:84:5a:f6:bc:29:06:f9:75:
                    1a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:38:A7:F4:46:74:FA:56:28:4A:55:F4:11:AE:3C:63:1D:20:E8:76
            X509v3 Authority Key Identifier:
                keyid:DD:5F:72:F0:FA:CF:52:70:57:27:C0:39:BD:C1:FB:B7:CC:97:D4:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2f33ee-5590-4a22-b8e2-2880612705ee/1/3V9y8PrPUnBXJ8A5vcH7t8yX1Cg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ff:7b:33:1c:3d:ec:fd:9d:ce:2b:4b:10:5e:e2:77:25:fb:
         60:13:65:50:c7:6c:3d:d0:34:68:5a:f8:a1:fe:04:51:c2:dd:
         dc:02:da:5d:69:f5:1b:da:c9:bd:62:b6:e6:43:1d:ef:db:11:
         af:19:c7:f8:2e:81:db:24:08:ac:f3:35:9d:b7:e9:09:76:98:
         26:a4:8a:b7:91:46:3e:e3:75:be:b7:f5:5f:69:11:bf:df:4c:
         1a:f2:a4:30:8e:48:f3:6d:19:e9:7f:4a:36:bf:40:e3:2b:a0:
         7b:81:c3:fe:35:19:b7:a1:3d:69:42:96:1d:32:6d:9f:42:1a:
         95:6b:52:9f:d1:d8:19:83:62:7d:7a:64:0b:21:bf:d1:fe:73:
         fd:84:91:c4:04:37:d0:bc:7b:40:6a:ef:38:d6:01:93:6b:cd:
         4c:c0:cd:96:ca:08:d2:8c:d5:d3:ea:8a:f2:11:8e:f1:19:45:
         e8:6d:47:ae:bc:35:9e:b8:60:9d:6b:74:af:86:9c:ae:e5:d4:
         9f:04:56:28:70:4e:3f:aa:6d:f2:36:72:25:9f:b2:bd:77:4a:
         8f:ae:56:a9:7f:d0:d7:13:e3:ed:36:5e:54:12:58:60:1c:d2:
         f5:70:3d:b0:91:66:6f:63:5e:0d:86:52:b3:ab:69:35:f5:14:
         43:da:0d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:49:19 2026 by rpki-client