Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
File:                     rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft (raw, json)
Hash identifier:          o83vf5QKL5GzzSHd4g2U8++iOhza7cgmoOx/w25JuvA=
Subject key identifier:   1D:1D:A9:D9:11:01:8D:F3:AA:05:6E:31:A8:DF:26:12:43:65:32:C2
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Certificate issuer:       /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial:       01A0D6B92D5970115AA17A54A8AB904AAE3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
Manifest number:          1A33
Signing time:             Fri 25 Sep 2026 04:00:54 +0000
Manifest this update:     Fri 25 Sep 2026 04:00:54 +0000
Manifest next update:     Sat 26 Sep 2026 04:00:54 +0000
Files and hashes:         1: 6BPdGU_-MzQ3p-QVBS5wxsSbqIA.roa (hash: OTv2XEJolNR8TAIm4a6NTDxE9WsD3wHCkSRiEecs+hA=)
                          2: AVPuOu9WJgQFeY3OKziZugz6I8w.roa (hash: GA/D9jB65LyEclzGHWIX2nscOtPzaUo+KGMXTzHX+8Y=)
                          3: CWyUYsYrHl5cCZr6qaohHLKpdJI.roa (hash: IvmnQYp72Ns3lgs7TiLYlWSG657dtK8bI8cQG8CHOEM=)
                          4: awM-mF2LuJSHr5AQaHNMqJ1enTM.roa (hash: Y5juHU/HVAVlVF39MoV3F3X1JaAmaMtik3VRP6Mzl6Q=)
                          5: rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl (hash: 9BvQtp6xCiyxB7S1BoNU0SMl4ALdCBJhR4msgrW24h0=)
                          6: uzf55yC-7djRSVx8Sh-FlrIF-Kk.roa (hash: zoa8rEN1vewB6fKTwGs9R6JAyCcSTUzhxoihIuKJC6U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:b9:2d:59:70:11:5a:a1:7a:54:a8:ab:90:4a:ae:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
        Validity
            Not Before: Sep 25 04:00:54 2026 GMT
            Not After : Sep 26 04:00:54 2026 GMT
        Subject: CN=1d1da9d911018df3aa056e31a8df2612436532c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3f:80:3c:f3:01:7c:50:a8:45:56:5f:6d:c4:
                    2c:02:cd:01:4f:e4:2b:b0:57:d4:6c:98:99:80:69:
                    f1:a4:73:a0:9d:91:1b:12:f3:b7:50:66:5d:d2:42:
                    af:5f:d3:04:93:a2:cd:cb:4d:c9:46:bb:c3:4f:02:
                    8e:9c:48:6d:af:30:ac:f4:8e:a6:33:34:f6:fd:ea:
                    49:ad:6e:19:9c:81:f7:af:ff:db:44:01:a0:4b:d2:
                    f5:af:d7:55:7c:c5:95:fa:62:f6:96:e7:92:12:ec:
                    d4:6e:3e:d0:82:5b:5b:cb:b4:3c:c8:0d:6f:24:01:
                    94:1c:5b:d0:95:0f:82:53:a9:c7:e6:f4:0f:7a:45:
                    6d:7a:f0:1c:93:1a:38:4a:4f:c1:4a:32:e5:47:1b:
                    d1:b1:1b:d4:27:3a:93:fa:16:47:6a:de:30:72:dc:
                    92:0f:be:65:1e:fa:e9:99:8f:7a:bd:02:87:cd:eb:
                    52:a0:dd:f0:37:af:44:6b:bf:d0:a4:56:49:5b:a7:
                    8b:fc:43:d6:ce:bc:12:7c:e6:38:ba:70:a9:e9:d1:
                    ae:54:30:1a:8d:fc:88:6b:81:b3:f5:e2:7c:e9:b5:
                    33:6f:57:18:0a:e4:82:89:d5:f9:0d:75:df:1a:cc:
                    bf:7b:68:45:d4:22:a6:28:13:56:ad:99:19:0e:07:
                    d9:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1D:A9:D9:11:01:8D:F3:AA:05:6E:31:A8:DF:26:12:43:65:32:C2
            X509v3 Authority Key Identifier:
                keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:93:88:5d:54:a5:84:6f:91:0c:cb:7b:aa:51:5c:c5:13:2b:
         e5:af:43:1f:d2:1a:1d:89:4b:bb:dc:22:fd:68:65:f5:69:d2:
         1f:0b:52:c3:5c:f2:e4:17:28:80:20:1f:18:9f:dc:6c:12:72:
         c9:91:a3:88:e0:29:e1:f5:af:2e:f7:83:52:ef:ef:1b:26:a4:
         da:af:5d:69:38:5d:58:ee:f8:1f:9a:dc:02:ce:67:1b:60:69:
         ec:f3:e5:dd:57:9b:fc:6a:bb:4a:5c:eb:33:c8:4c:eb:44:91:
         ff:43:e7:54:9c:39:d9:37:4a:c3:e1:d2:3e:2c:07:b9:5c:d8:
         b4:31:86:27:d0:20:3c:d0:f4:fa:25:0c:10:ae:82:24:06:bc:
         24:47:de:55:b1:aa:9d:82:37:c1:25:0e:98:d9:63:33:cc:a7:
         17:1c:19:e3:e3:bc:3c:18:bd:e8:b0:0a:e9:57:d3:a9:50:2f:
         c7:a0:3e:ed:ca:38:4a:0f:e3:5c:b7:a3:26:0f:81:f4:f0:8e:
         01:15:8e:50:bc:80:2c:61:4e:8a:e1:a1:be:3c:7c:d3:64:18:
         6b:70:88:f1:ba:73:8e:ef:2b:f9:a8:84:b1:b2:d7:d1:7c:4c:
         b3:97:e0:a3:e1:ef:79:c3:bf:5a:bb:bd:57:5b:01:e6:78:2e:
         c6:fd:dc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:16:47 2026 by rpki-client