Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
File:                     Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft (raw, json)
Hash identifier:          r53o4IIZ7vvsnjFGM63FMI/KOjH1Nce9vtjSc1A0DBs=
Subject key identifier:   15:64:97:85:05:52:CD:37:5A:1D:0A:BD:DC:52:F8:3D:86:D7:ED:8F
Authority key identifier: 09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4
Certificate issuer:       /CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
Certificate serial:       01A0D5026648E86A1C0899D05380CC59533C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
Manifest number:          18BF
Signing time:             Thu 24 Sep 2026 20:01:39 +0000
Manifest this update:     Thu 24 Sep 2026 20:01:39 +0000
Manifest next update:     Fri 25 Sep 2026 20:01:39 +0000
Files and hashes:         1: 4c-GbGdVRIrY9IqPjRy0nzn_VSE.roa (hash: icjwc3qakSmAHiw3iEGT6Xw+HBGCPaCuGNR8zcJ+6LU=)
                          2: Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl (hash: 88xhlmrJ89vRhIz+hoXpFKC0qP/G0vKvAw+7VKeTfzw=)
                          3: G89I4eFQRreVo-7aKBmhJUYUtfE.roa (hash: Y0sI6cJ3p/tnjubSMmOmQUTjHM00CIS1iUsc5f8JH6o=)
                          4: dYdu6qoIQ4XCeyHdAC497fGCxxs.roa (hash: oc3k4EGMJTIdaq924ORNmciOrYjNG46O7CO8iE2EBZI=)
                          5: lgCyYbtiym8UQxlU3Wsnfuin5Po.roa (hash: Y0pYZtEe50I9gKfovWkm1yNE+nmUWXQeAcc9hn8uT60=)
                          6: u3tl30EyAJsURqJzM6oI5-sRJh4.roa (hash: +MJkYGw5uZPSvZdWWPtxlmooe+ag+H3pOtple6Ilz3I=)
                          7: zR5fs6PTrjyplvT56u1K4BvWPlc.roa (hash: O8dzuCsmazQPoLBfGqOiMn2tNXQbancZpn0bojUcLR0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:02:66:48:e8:6a:1c:08:99:d0:53:80:cc:59:53:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09dcf1e897e598ec3f1ab60bd443328726dedae4
        Validity
            Not Before: Sep 24 20:01:39 2026 GMT
            Not After : Sep 25 20:01:39 2026 GMT
        Subject: CN=156497850552cd375a1d0abddc52f83d86d7ed8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:58:7c:67:5f:e4:7a:2f:6e:78:ea:45:42:31:
                    dd:ab:27:4e:97:e6:8f:a0:08:83:7d:31:ae:6b:0d:
                    ae:df:11:3e:c8:e4:cd:01:e1:c5:89:ac:aa:bc:07:
                    e4:b4:fe:0e:1e:42:7e:c0:69:d2:f5:8a:a9:7d:4f:
                    77:42:ef:12:a8:3c:b4:19:0a:dd:92:01:04:2e:26:
                    4c:c7:f8:6e:5b:2d:ea:11:7b:84:4c:37:a6:c1:8d:
                    ae:37:cf:14:1c:bf:90:76:3d:39:29:ca:9f:e9:20:
                    07:20:58:c5:d1:5b:05:3b:eb:b5:06:c0:32:ca:75:
                    de:34:46:1b:41:a2:f6:e4:30:23:7e:b9:d7:dd:ee:
                    ed:dc:32:a5:35:de:8c:3a:ac:38:25:0a:84:4f:8f:
                    77:ec:4c:b0:f3:c8:a7:26:5a:07:37:07:46:9f:7f:
                    9e:fc:5c:cf:a9:0e:d0:f9:11:ee:4f:db:10:a0:2a:
                    79:3b:0d:84:ad:2c:8b:7d:28:af:6d:55:ec:0f:35:
                    c4:fb:c1:0e:33:03:16:5c:7c:30:26:f7:4d:60:2a:
                    7e:2a:77:28:e2:9d:25:a7:30:a3:27:65:8f:e5:62:
                    cb:d8:d8:6e:1c:a2:04:94:17:a7:7d:f2:a3:1d:2f:
                    22:fe:91:5a:55:76:22:ea:7e:bf:7c:c0:bd:53:a7:
                    fb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:64:97:85:05:52:CD:37:5A:1D:0A:BD:DC:52:F8:3D:86:D7:ED:8F
            X509v3 Authority Key Identifier:
                keyid:09:DC:F1:E8:97:E5:98:EC:3F:1A:B6:0B:D4:43:32:87:26:DE:DA:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cdzx6JflmOw_GrYL1EMyhybe2uQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/9bc4cc-b646-4701-8975-623e199fdbe9/1/Cdzx6JflmOw_GrYL1EMyhybe2uQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:16:69:d0:f9:13:04:35:59:5c:7f:b5:79:d1:38:e8:01:e4:
         dc:e7:8d:4b:68:12:f1:f9:20:cd:89:07:a5:57:69:90:21:82:
         ad:0f:a4:93:82:19:17:3f:95:09:ac:cf:22:5f:38:c9:52:d4:
         bd:f9:d3:9f:63:39:d1:83:bf:66:fb:da:1b:f1:cf:bb:a6:12:
         ee:a3:85:af:28:31:43:93:d1:3c:12:56:c6:24:01:14:57:ce:
         cd:c4:77:6a:f6:46:79:dc:3a:37:e8:4d:51:50:d5:1c:78:81:
         14:1e:e9:3b:ef:60:66:95:e8:9d:15:51:10:fc:ef:19:39:4b:
         d1:fc:5f:ea:a8:77:2d:82:0e:b6:ad:f0:40:7c:b9:2a:8f:c0:
         70:41:4c:6d:af:03:51:15:a3:39:ff:49:a0:a9:9a:90:27:86:
         8e:a4:f4:fc:45:13:bb:43:c3:56:f0:f7:44:17:41:c1:3b:30:
         7a:70:b4:c5:43:78:3c:70:9b:0a:88:3a:4c:bc:ce:98:f0:65:
         60:45:7f:ab:58:6d:aa:94:ec:bc:cf:ae:0f:58:35:26:e8:7b:
         b4:b9:19:69:c2:82:b3:ee:a1:7c:40:f8:de:96:fc:09:84:88:
         ba:84:cb:6c:22:fe:58:fc:28:dc:d0:10:24:43:78:b0:8b:2f:
         4f:cd:db:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:56:00 2026 by rpki-client