Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
File:                     YAluN0CSzDAL0LsGxBZAky7Pi0k.mft (raw, json)
Hash identifier:          3TfdON3xk2Ik02E2oJ0cJ1hnXGLLFgkWiMxIVZ3F+Tk=
Subject key identifier:   37:20:30:C2:8F:1E:C9:A4:FB:93:3F:FF:FF:68:A0:9B:69:B8:03:6D
Authority key identifier: 60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49
Certificate issuer:       /CN=60096e374092cc300bd0bb06c41640932ecf8b49
Certificate serial:       01A0E62D2B58162AADB7C7C8EA5E5ED23C6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
Manifest number:          1A09
Signing time:             Mon 28 Sep 2026 04:01:54 +0000
Manifest this update:     Mon 28 Sep 2026 04:01:54 +0000
Manifest next update:     Tue 29 Sep 2026 04:01:54 +0000
Files and hashes:         1: 09iLJ-Mwt-oGGlQePzLwscf0h0A.roa (hash: q4J6TqoqIEXUXDGYbj1FaACI7n8SQOOCFeV3Q5IYWCQ=)
                          2: YAluN0CSzDAL0LsGxBZAky7Pi0k.crl (hash: UfTKF4Up2Zlc8/CWMrBfz1wc0spvsxpfSInN5PWr0/w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 04:01:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e6:2d:2b:58:16:2a:ad:b7:c7:c8:ea:5e:5e:d2:3c:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60096e374092cc300bd0bb06c41640932ecf8b49
        Validity
            Not Before: Sep 28 04:01:54 2026 GMT
            Not After : Sep 29 04:01:54 2026 GMT
        Subject: CN=372030c28f1ec9a4fb933fffff68a09b69b8036d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:20:5b:29:61:79:8f:b2:4e:75:e2:cb:5a:1c:
                    1b:bd:6b:a8:e8:f5:3b:76:a9:f2:79:76:e9:5a:f2:
                    28:66:df:21:72:5d:9c:6e:d3:7d:0d:e2:b4:8d:4d:
                    6d:44:74:76:75:ee:77:30:4d:c7:84:c4:57:ae:6f:
                    5e:96:d0:b4:e4:a7:24:f3:c8:49:55:9a:fb:53:fd:
                    76:ed:a4:2f:b8:05:84:cf:be:2a:a4:80:29:6c:cd:
                    5c:d5:8f:c2:4a:aa:64:91:3a:60:8e:d7:3e:fc:29:
                    10:e4:5b:8b:46:25:ee:a8:87:fb:82:d5:43:b9:6c:
                    c9:5b:81:73:96:b0:63:78:37:89:99:17:97:60:d4:
                    27:ac:7c:e2:ed:08:21:16:76:91:56:8a:7b:a0:96:
                    5d:23:d1:09:e1:3f:1c:c6:33:1b:0d:8a:98:df:c9:
                    06:56:bd:03:47:f3:90:88:73:f2:e8:f7:85:68:8d:
                    b7:84:cf:d7:44:17:5a:ec:24:34:40:54:02:fc:7d:
                    af:ff:f5:89:c7:9b:b8:e0:25:16:3d:b3:11:12:72:
                    4e:1c:0a:28:2b:2c:2d:1e:a4:b9:5c:4d:5b:22:d5:
                    78:ad:34:27:92:4e:c2:83:0d:16:00:8b:60:bc:fd:
                    ee:ec:44:57:43:db:3c:a3:9c:09:fc:11:9d:44:6f:
                    90:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:20:30:C2:8F:1E:C9:A4:FB:93:3F:FF:FF:68:A0:9B:69:B8:03:6D
            X509v3 Authority Key Identifier:
                keyid:60:09:6E:37:40:92:CC:30:0B:D0:BB:06:C4:16:40:93:2E:CF:8B:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YAluN0CSzDAL0LsGxBZAky7Pi0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91cfe7-5c2d-474a-b587-c45852c7be20/1/YAluN0CSzDAL0LsGxBZAky7Pi0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c0:df:18:f5:a6:96:35:0d:97:7f:dc:71:95:70:e4:a9:ae:
         b3:1b:f5:3a:56:b2:b7:24:65:5a:fd:19:fa:fd:80:a8:dc:6f:
         ac:25:d7:53:9e:90:42:92:0d:2e:e5:92:29:74:10:fc:e2:d4:
         f3:3e:2f:98:b0:0f:4e:d7:68:e4:e6:ba:b4:62:29:e7:c9:f4:
         99:66:40:62:4d:1f:0f:12:c5:02:87:39:07:56:75:d6:d8:40:
         16:a3:b4:31:5c:f0:76:7e:69:96:8f:a3:73:81:aa:d3:e7:0a:
         50:e8:8a:9c:1b:96:ce:77:12:8c:de:fa:ea:97:ea:2e:38:f0:
         be:a9:ea:25:c5:aa:77:a0:88:a9:29:97:f0:52:0f:13:52:81:
         00:17:3b:12:12:a8:54:48:3d:af:f7:97:bd:80:12:ad:c4:75:
         10:14:33:af:2d:cf:09:28:5a:2b:10:1c:da:31:a3:d3:51:a9:
         96:8d:9a:07:0e:b0:cb:ca:4a:3a:e0:db:3e:15:1c:cd:6f:6a:
         b4:0d:eb:66:dd:73:a5:70:2a:1c:f9:8d:cf:f2:fe:77:6d:55:
         fc:a5:5b:96:c6:12:0e:ad:04:56:48:c4:42:8f:e7:b6:63:ee:
         f8:46:c3:67:b8:92:3b:13:7b:c7:6b:8a:9a:be:0a:0b:c5:ac:
         15:ab:47:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:46:19 2026 by rpki-client