Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
File:                     g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft (raw, json)
Hash identifier:          bhBxlf8rQbTWtAbNNPnbBeHzGegXNUdc1WUdbBr/4Ro=
Subject key identifier:   90:26:44:51:E2:9F:33:FA:B6:43:80:28:89:84:20:E1:9B:3F:85:24
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Certificate issuer:       /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial:       01A0DDCEA273963E759DE88E19DAF569FC88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
Manifest number:          1A9A
Signing time:             Sat 26 Sep 2026 13:01:41 +0000
Manifest this update:     Sat 26 Sep 2026 13:01:41 +0000
Manifest next update:     Sun 27 Sep 2026 13:01:41 +0000
Files and hashes:         1: 1--JUDppRbu7T0stV0TMFX_JdJqk.roa (hash: 7ElxaU2FrJVBWuFjmaI5WPADPHQpzQarn/tOamW8ol4=)
                          2: 2a_uy4DA086BpyZucBJ1RKLvGB0.asa (hash: WXt1+GiMi8yguUv71CdSXteV8ij1KFQD4MWVZRlVGGo=)
                          3: F6V95NvKIPnP0tmYoAEtHc-x5Bc.asa (hash: 5EJJJJTtBq0BMEfKnD57LEly92Ux1IDLT80gLRVXa+s=)
                          4: GvIMpzg1BrWyJZnNUgc-c9Cv_wE.roa (hash: QqPKk6SddSUzOWwAEp4MtmTKN+FX4BL1RGH8TdopCcU=)
                          5: Hxy4OYK276xESCf3Anb_fwGbVFA.roa (hash: OEZqLe2GA3/g06uklHFF+Qr+gAumMT+wNuHWtE1vS0I=)
                          6: MywVTrCitZ0jjbFx7Ww-pldZ2-E.roa (hash: 3AQWbOwtzZshqM3V2nv18YVl7dRi4sEO32WjYpoQrG8=)
                          7: P5DeZi-NZPhI3zAbu6P2URQXDh0.roa (hash: 3xwHLPA2O8drb+zjl4yg8vS/CGvVdoGiWmy4gUvfoNs=)
                          8: PvOMcu6kkYu1VaD3XwX_1ePatyY.roa (hash: FOWoO0sh/7LnR+o/5+ENcU9IVroksYKfAOK89ZHzs8M=)
                          9: XUgse1SVG2LYV88Lp4UVNGgo6_8.roa (hash: g7ViDtzqv8KPcw50VAZhPz4xcsCIQITUrXQJTHZp81Q=)
                          10: dID3LhBrOI7h-JjxBCDXGS6Ka90.roa (hash: Rx7lZVpO1Kcn3Rd9uI0ZIiOCJf4fpdx1CaamZMAapoY=)
                          11: g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl (hash: lACOvf/zKIgOb7Fy1qRTcaXA7zP50gErUh8iGkF9uvY=)
                          12: h4qnmgZvvV6hazj9Xn7cghOv6uI.roa (hash: vjv4+ammuobmFm2l5IQ69DMODD0qU4CxTRycj23fFCA=)
                          13: jPosKpC4jbWbnigp_N_xbEGwtdU.roa (hash: PKivQvn7H0k9WsK5zKGzhI4jllClxyjJNOUB8aA/6s0=)
                          14: nfSZBgblqY4hDbV-RAcbJ9qyUpc.roa (hash: 8ijpB21chkCGF/aduPmL2pt7xjwG/XOf0XxCs4lLVxo=)
                          15: nyYCtMbd7TZK8VqIfB53aS7KNLs.asa (hash: BqapecHd3LVpjtUiBcf/9yimCcVOdhG5vEebX7N6HDE=)
                          16: o5BKntmZ9JtZu-kMInHB78iso3o.roa (hash: y3nwxUjTAtP6jlMnZQwlOLiitgv+xb6KltP0aX7WOCQ=)
                          17: tjzdvWQXGyuZr6RYVMx1Yjk9et4.roa (hash: E99Roql1GDYJZd5vONjmCjCyvJPv3bXeRSYT36UiYFk=)
                          18: vc3_2HwZU1b1IDix6yqY246HGsI.roa (hash: C2RwLxlNEFwKzGr5sfPtGfDi2mMkvqCKZMvxOHJKA+M=)
                          19: yhnCcvMGfFoTZMf1oJ6P5sYzLfg.roa (hash: mwt4irHC6GhVnuZ5Xr0w1wBWRdsXBhU6yRY/gWgSeJE=)
                          20: z657-juX3He43lAQRFdSrUowMuA.roa (hash: cF2Zd6GwGD3rF8S9m/D0s5xLKX+lYpS93npMzrcgzIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:ce:a2:73:96:3e:75:9d:e8:8e:19:da:f5:69:fc:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
        Validity
            Not Before: Sep 26 13:01:41 2026 GMT
            Not After : Sep 27 13:01:41 2026 GMT
        Subject: CN=90264451e29f33fab6438028898420e19b3f8524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:30:f6:b7:44:47:d6:eb:4c:f4:ea:ce:d7:f3:
                    df:7d:38:03:cb:48:2b:d7:0c:01:fa:ab:3d:ce:c5:
                    20:dd:a6:0d:0f:8b:ea:70:50:2e:e7:83:1f:68:1e:
                    4b:b2:a5:5a:0b:83:cc:ee:3a:ae:c8:7f:cd:d4:60:
                    55:e6:1f:1e:c4:d8:68:69:6d:94:07:c3:48:c2:15:
                    c5:0e:7d:3b:82:bc:d1:77:68:0d:06:55:bc:ff:3d:
                    c2:22:d5:29:10:84:82:94:97:90:78:8d:58:ff:2f:
                    6e:5d:99:43:1b:03:07:6e:81:39:e1:83:c8:7d:19:
                    ff:4b:1e:62:f2:b7:5e:4a:fb:62:69:d9:8e:5a:30:
                    84:da:1a:62:8b:7d:5f:c2:74:ee:3b:92:b3:60:73:
                    7b:6a:02:c3:ef:e4:4c:e2:73:ab:e3:9e:ab:52:18:
                    de:49:85:2c:c7:2c:7d:60:d3:ac:86:80:0b:a5:10:
                    79:a7:56:f6:fe:c1:8b:72:53:a9:2c:3d:f9:dd:44:
                    8d:f2:34:e0:2d:81:b2:f1:80:56:32:3e:dc:70:3b:
                    8d:aa:4b:d5:df:db:52:f6:c0:d3:c7:9a:73:20:68:
                    61:24:20:d5:c6:ad:9a:13:b9:7b:ea:25:b7:7f:33:
                    9c:89:f7:6e:1b:6e:77:ce:9d:83:c5:d5:f3:77:6a:
                    02:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:26:44:51:E2:9F:33:FA:B6:43:80:28:89:84:20:E1:9B:3F:85:24
            X509v3 Authority Key Identifier:
                keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:49:07:8a:8f:61:82:23:f6:8e:b0:57:2d:63:8a:42:bc:d1:
         69:64:35:6b:06:e8:09:d9:6f:39:99:94:35:77:15:32:8c:b7:
         ad:4a:a9:62:aa:52:1f:4a:63:4c:57:5a:91:1b:f2:32:43:3e:
         e5:58:41:06:72:8d:b1:13:d2:3f:7d:3d:61:8a:f5:6a:ac:1d:
         48:d6:3c:d9:8d:7d:db:68:a9:7d:d7:f7:b2:c1:40:61:f6:8d:
         f6:48:c7:86:51:14:11:da:ba:ad:26:cb:ad:89:50:5b:d0:7b:
         dd:29:c0:85:1e:a7:02:1c:b4:84:5a:35:e5:dd:7b:22:1b:ce:
         fc:60:ca:1f:a9:a2:f4:1b:46:0a:64:d6:3f:95:41:cc:4e:62:
         7e:9f:d0:6b:15:02:b5:17:3a:73:9c:00:80:f0:bc:42:3a:74:
         71:09:4a:86:2c:5c:8e:cc:31:4d:dc:7a:38:32:25:4c:fe:05:
         f7:2c:0a:4d:43:15:2f:97:7e:0f:ca:fb:db:9a:90:45:a4:7d:
         22:59:b9:21:8b:19:b8:f8:47:fc:7d:90:03:8f:67:97:78:22:
         45:5b:1a:34:d5:44:2a:df:50:23:b8:47:4e:df:d1:93:6b:76:
         82:1b:19:7f:2a:c9:69:37:31:f5:af:6d:58:47:91:b5:83:c1:
         ec:51:20:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:46:27 2026 by rpki-client