Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
File:                     98Dr2f99xugfjDVIx8LozceWfW8.mft (raw, json)
Hash identifier:          bNW2SfHT/r+7h9NvgmCKWvp2rWTbGt7uVVefgi+0gvg=
Subject key identifier:   F6:27:D7:D8:2A:54:50:9A:E7:6E:92:69:3D:DD:56:C5:62:64:14:C3
Authority key identifier: F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F
Certificate issuer:       /CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
Certificate serial:       01A0D94CC2BB770A4301134E0C5D5E4021DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
Manifest number:          1246
Signing time:             Fri 25 Sep 2026 16:01:21 +0000
Manifest this update:     Fri 25 Sep 2026 16:01:21 +0000
Manifest next update:     Sat 26 Sep 2026 16:01:21 +0000
Files and hashes:         1: 98Dr2f99xugfjDVIx8LozceWfW8.crl (hash: 5jwod9zZQG+rJKgHP8HpL9adK6wr5Q+3fT6mozqWox0=)
                          2: PhYlTTJSDAG5ZShmlzAGSwIOBLM.roa (hash: v304FWDl/pr5++u+nRKS1u+LXVotGD3ulsE5/EGGhSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 16:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4c:c2:bb:77:0a:43:01:13:4e:0c:5d:5e:40:21:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7c0ebd9ff7dc6e81f8c3548c7c2e8cdc7967d6f
        Validity
            Not Before: Sep 25 16:01:21 2026 GMT
            Not After : Sep 26 16:01:21 2026 GMT
        Subject: CN=f627d7d82a54509ae76e92693ddd56c5626414c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0c:1d:d1:8c:62:58:31:5b:58:9f:aa:84:d9:
                    93:3f:27:13:cd:0c:f2:fb:56:51:55:19:ac:94:9f:
                    57:ad:da:ca:89:c0:0a:62:5d:30:a3:fc:9c:d5:bf:
                    c8:30:e0:38:ff:80:da:47:58:f8:96:9f:ce:43:ec:
                    ea:c1:11:e8:ee:e9:4a:e5:d3:be:ae:06:93:33:26:
                    2c:ce:a6:95:d4:ee:b2:3e:34:b2:13:26:38:9b:1c:
                    13:3f:2c:56:88:b3:71:10:8a:35:63:82:72:5a:e4:
                    5b:76:f3:83:92:3c:01:53:cd:dd:3e:8f:ea:e4:69:
                    a7:b5:20:f9:bb:90:ae:ee:76:68:95:24:38:20:08:
                    b2:ac:35:02:5c:8d:40:ac:fc:1b:55:f8:d9:97:c0:
                    e6:c6:03:76:62:a0:a0:90:d7:09:0d:0d:39:52:41:
                    2d:8e:f4:c8:6e:70:4a:37:6a:ec:5b:8b:fe:b7:92:
                    ee:0f:95:bd:39:f0:ca:43:de:7c:42:f1:74:ed:4a:
                    9e:78:81:ae:df:55:d3:89:11:9d:c7:bb:aa:7e:87:
                    ac:6b:d4:a5:8c:e4:ed:79:8f:e9:e2:63:98:c9:1e:
                    78:09:e0:db:af:55:e2:51:f1:38:ce:a8:4c:ca:4b:
                    d0:ae:75:a8:09:9e:6c:f3:aa:07:97:2e:68:3a:ac:
                    b0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:27:D7:D8:2A:54:50:9A:E7:6E:92:69:3D:DD:56:C5:62:64:14:C3
            X509v3 Authority Key Identifier:
                keyid:F7:C0:EB:D9:FF:7D:C6:E8:1F:8C:35:48:C7:C2:E8:CD:C7:96:7D:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/98Dr2f99xugfjDVIx8LozceWfW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d3684a-4525-476f-8c48-69d71bf2d353/1/98Dr2f99xugfjDVIx8LozceWfW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:20:54:cd:c7:73:9b:7e:ed:42:17:da:3c:98:33:16:98:8a:
         52:9d:15:64:61:ba:4f:fa:9b:cd:1f:ee:05:b3:2c:7b:16:44:
         4f:d1:23:de:ba:14:7d:2c:53:4b:8e:4d:33:d6:dd:11:c0:5a:
         6c:98:89:3e:18:5d:15:80:90:0c:a8:02:59:6b:ac:e1:e5:cc:
         30:db:dc:78:b7:31:31:7d:af:f8:39:f6:30:66:05:2e:73:68:
         80:a9:da:d4:3e:d7:7a:2f:a9:41:96:16:61:e6:c0:18:65:6a:
         6e:05:8c:4f:5d:9a:05:02:17:42:35:68:08:c7:58:0c:e8:d9:
         96:c9:7a:26:11:e8:f7:6a:39:4d:a6:71:5c:c7:ce:f7:9a:f5:
         45:0d:7e:2e:ee:1d:82:d9:d0:98:cc:10:e1:1c:6a:18:a5:a1:
         00:c4:8b:53:1e:b6:15:8c:2d:cf:1b:d5:83:5a:c6:a9:f5:b4:
         9e:d1:e7:f4:2a:1c:f7:77:b4:fe:84:8d:71:c0:31:e5:25:da:
         d0:13:92:6b:a2:19:b5:8f:6b:90:6b:05:e5:27:b2:08:fa:c6:
         98:8c:2d:af:ef:57:26:18:80:a7:e0:e6:90:6b:80:b6:6a:51:
         2c:92:01:05:8c:f5:3f:75:e3:30:80:33:b1:71:4f:92:e3:5e:
         f2:8e:83:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:25:40 2026 by rpki-client