Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File:                     IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier:          OH6GXL+n0RQvX2HXq/A9FmKv5IAk6LjhPd+oElPu7uo=
Subject key identifier:   9E:D2:C9:E3:EA:15:E7:73:B8:E5:C4:99:63:02:59:0D:18:A5:4D:CE
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer:       /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial:       01A0EF9D87D22763F962004692AF43C861D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number:          144F
Signing time:             Wed 30 Sep 2026 00:01:13 +0000
Manifest this update:     Wed 30 Sep 2026 00:01:13 +0000
Manifest next update:     Thu 01 Oct 2026 00:01:13 +0000
Files and hashes:         1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: jeiSzG+X0RVI5GgY45wOdR87EzRIP0yG+UlTwDqvi/Y=)
                          2: RvjdrZHQvT2b90nWXdsgoaDdips.roa (hash: qK/UmJeSS3Eli2K0IV23Gv9PIRqLGK5MHBRUfrzwD3E=)
                          3: YfMmn3NTxzanjSoW2CgtmSyKoBw.roa (hash: R1/beSy+NbtBJBgUSOR66DtF7b/TO6ueQaOcS29ElbE=)
                          4: gqwIfeOwcdN5zJF3BMDK2dzYhXw.roa (hash: 7iUUJHU3Ro9I2PuHJdPsxHdUPMeo4KXSStQJ1AA6gPo=)
                          5: osG6SqIqqmIP3iBJplJkK58I_pQ.roa (hash: b1xSqqWBFOEz+K1E0t9Y9zbsAyRCIW7qvBJSCpg4lHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 00:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ef:9d:87:d2:27:63:f9:62:00:46:92:af:43:c8:61:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
        Validity
            Not Before: Sep 30 00:01:13 2026 GMT
            Not After : Oct  1 00:01:13 2026 GMT
        Subject: CN=9ed2c9e3ea15e773b8e5c4996302590d18a54dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:34:00:8e:3c:54:60:50:ea:b0:03:22:10:dc:
                    c1:f5:84:4e:c8:9e:56:73:e5:73:80:59:63:b8:7b:
                    7e:7d:9e:f1:f9:8b:98:c6:57:10:62:4a:ac:9f:d2:
                    4e:be:dc:59:a2:6a:6c:d1:ae:61:a0:c8:3f:6c:47:
                    05:68:7f:f6:a1:1e:39:0a:c7:35:d6:01:01:e3:23:
                    c2:10:b7:99:f3:3e:16:84:cf:95:36:bf:fd:9e:68:
                    5a:85:07:98:f4:78:ef:44:2e:84:f8:8f:5c:ff:9c:
                    b8:b8:76:a1:bc:59:22:34:44:8c:45:ca:7f:c9:c3:
                    cf:df:4b:19:fb:a6:51:90:29:f2:8f:93:87:7a:5d:
                    24:86:56:84:51:45:61:03:55:0c:f6:79:e9:38:0a:
                    6a:5e:56:09:98:f2:59:67:7b:a4:dd:00:59:47:52:
                    48:40:7c:2f:38:2f:6a:fa:8b:47:db:4c:08:2a:99:
                    40:bd:65:98:90:b2:5c:8b:63:2a:f0:d9:b7:06:3e:
                    12:77:24:50:b3:7d:0b:44:b5:77:5f:36:14:11:b4:
                    b4:f4:8f:5c:86:76:6f:a8:91:e2:41:95:3d:45:44:
                    d9:9e:01:1d:3e:8a:ff:f3:d9:84:eb:06:a5:58:a2:
                    f0:fa:39:43:33:96:7f:82:d5:82:2a:df:99:ad:2f:
                    24:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D2:C9:E3:EA:15:E7:73:B8:E5:C4:99:63:02:59:0D:18:A5:4D:CE
            X509v3 Authority Key Identifier:
                keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:8d:c4:f1:f0:64:a5:3d:aa:f4:62:4d:86:03:72:f5:8a:46:
         be:19:e0:1c:aa:82:26:02:18:18:10:56:ee:12:ca:c0:a6:95:
         0b:af:8e:16:c3:fe:fd:d9:fd:c9:26:3e:bf:6e:7d:79:26:61:
         30:6e:99:5e:65:9a:68:50:59:1a:2e:9b:9e:ff:79:79:a8:2d:
         5d:2a:5c:9e:49:cc:4b:b6:0b:68:0e:af:e1:ef:0a:df:f0:89:
         01:cf:26:c3:f9:1a:30:55:17:70:1e:3c:8b:87:16:a5:02:db:
         28:42:a3:11:4c:a1:db:53:e4:75:ed:74:69:be:49:c2:3b:33:
         db:6c:e5:06:45:7a:58:39:b9:3d:46:4a:21:e4:13:fa:1a:b7:
         ae:db:9d:30:44:dc:88:e1:7d:17:62:a0:70:08:8a:3d:ad:95:
         3f:73:3c:3b:27:b5:29:7c:1f:26:02:fd:1a:f6:fe:32:ec:a7:
         d0:0c:9f:e2:0b:f3:e9:35:d9:d5:e5:84:00:c5:e5:d4:84:20:
         07:69:cc:58:cf:9d:65:04:80:62:c9:06:36:64:9c:e1:f9:26:
         72:bb:24:83:37:41:79:8e:36:1b:57:91:89:00:d6:49:e9:36:
         34:e8:0f:87:70:15:8a:bc:aa:d6:cf:70:ff:9f:21:bd:0e:5c:
         e6:78:3e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 09:37:16 2026 by rpki-client