Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
File:                     AxRRSJegqj_79FtIYGEkYn8V5QY.mft (raw, json)
Hash identifier:          vlvGl4dhR4tN9AyEZ6J+hmr22zaxqaIliDocs2sME5U=
Subject key identifier:   8B:2F:2F:AF:F0:01:B1:87:72:FB:CF:32:69:AC:E6:B3:EA:F8:5A:3D
Authority key identifier: 03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06
Certificate issuer:       /CN=0314514897a0aa3ffbf45b48606124627f15e506
Certificate serial:       01A0CE24B0C510845E1656477EB35554CEB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
Manifest number:          13EC
Signing time:             Wed 23 Sep 2026 12:01:46 +0000
Manifest this update:     Wed 23 Sep 2026 12:01:46 +0000
Manifest next update:     Thu 24 Sep 2026 12:01:46 +0000
Files and hashes:         1: 1zy72V2wriaSR0HKRS6NKVr6ReM.roa (hash: 2UDDjiSozqkjCpyeYUYKzzS2k3igXU0suU9TIqRl8BM=)
                          2: 2A0tOUxx1jRAdQbbBEQYCyO6q2A.roa (hash: /b2wneTZen/fW0tEw9EyQoVhwLVdm5eunsXsaX5W9vg=)
                          3: AxRRSJegqj_79FtIYGEkYn8V5QY.crl (hash: ZEXVY4U7l54JYZ/OrJz0NKA7cY7Gyc8LHq3VZjFhTgQ=)
                          4: wC7Btg2M06QDjiihU8mKSzWp5h8.roa (hash: kuu4Nks2Rjh8eFlTc82CmwEI6yyNJcnC/Z9zLfsyT1A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:24:b0:c5:10:84:5e:16:56:47:7e:b3:55:54:ce:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0314514897a0aa3ffbf45b48606124627f15e506
        Validity
            Not Before: Sep 23 12:01:46 2026 GMT
            Not After : Sep 24 12:01:46 2026 GMT
        Subject: CN=8b2f2faff001b18772fbcf3269ace6b3eaf85a3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:64:7e:d1:2a:e4:63:27:b5:88:f8:62:b5:
                    f3:db:bb:48:61:24:70:ce:8c:59:68:4b:0d:fb:b8:
                    16:0c:6c:db:67:17:6e:e2:24:a6:16:6f:5f:c1:36:
                    63:85:67:ac:d2:f9:9e:82:a5:91:e7:ff:ad:be:50:
                    95:2a:3a:32:87:b5:fd:09:84:9f:e0:02:e0:89:13:
                    38:5c:51:ae:4b:12:3d:d6:35:15:3a:c6:88:7c:8c:
                    08:b2:67:91:cd:1b:2d:39:f3:3d:ee:3f:c3:e8:c4:
                    84:dd:a4:ec:a1:3e:47:b1:12:e6:e5:2f:4f:96:ef:
                    12:5b:5b:b6:5d:54:3c:b9:cb:1b:c5:bf:38:6a:36:
                    07:7e:ee:7f:e6:31:1a:e4:b4:e2:56:66:4b:58:6f:
                    89:69:4e:80:8a:2b:1a:0f:ca:90:56:15:92:f6:fb:
                    4c:16:f3:30:a6:35:c4:e6:f6:0a:fb:e5:6c:db:1c:
                    82:c2:9b:87:1b:b8:85:04:d4:00:fa:75:7a:57:f1:
                    eb:6b:70:f6:bd:0b:ff:73:0e:56:1a:7a:bf:8e:af:
                    63:38:d9:c7:92:ed:0a:07:ca:d0:c9:37:9a:e2:f3:
                    79:b3:e5:15:6b:d5:b3:ba:12:6f:af:b6:33:01:ae:
                    fb:19:10:5f:32:07:76:cf:8c:59:f3:c9:77:53:85:
                    65:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:2F:2F:AF:F0:01:B1:87:72:FB:CF:32:69:AC:E6:B3:EA:F8:5A:3D
            X509v3 Authority Key Identifier:
                keyid:03:14:51:48:97:A0:AA:3F:FB:F4:5B:48:60:61:24:62:7F:15:E5:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxRRSJegqj_79FtIYGEkYn8V5QY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/dff181-2b76-4ca2-96e4-6b158b22b48f/1/AxRRSJegqj_79FtIYGEkYn8V5QY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:af:a2:2e:2c:5d:74:06:30:49:ae:be:43:82:65:cb:00:87:
         30:99:64:97:1f:07:b9:4e:8b:4d:57:5b:76:ad:b5:00:fa:6e:
         06:f3:5e:71:7c:b5:97:e0:16:b6:dd:b4:4f:cd:5c:a0:d2:9b:
         af:0d:1a:a1:89:dc:59:0d:e7:ed:88:e7:d0:58:8f:f2:7c:3b:
         6a:b4:a4:8a:42:6a:05:a7:0d:53:ac:f9:ce:a4:b8:83:60:bb:
         ff:94:d6:d9:64:d9:29:98:53:e9:b8:ac:d4:79:67:fb:c2:95:
         01:f5:41:5f:a2:93:cb:28:55:be:33:f8:b4:11:c2:45:f9:3d:
         be:3a:25:34:c1:7c:ad:bb:63:b1:ef:96:32:f4:c8:a0:df:23:
         b6:7b:78:0b:91:6c:2a:db:52:f0:73:e9:b1:95:ad:4a:9c:fe:
         f3:a5:2f:b0:b3:fd:18:f4:fb:0c:01:73:cc:89:47:62:c7:5a:
         8d:cc:94:16:18:36:07:6d:9f:82:a8:d4:1c:73:f2:9a:f8:e7:
         82:62:a1:bc:ee:a7:df:9f:7c:ba:eb:ce:77:28:03:12:7f:a7:
         79:59:53:e3:4d:8b:56:1a:5d:39:fa:f7:16:29:3e:ee:d7:08:
         8a:a5:98:75:59:6b:eb:9c:af:1b:30:02:d3:bf:1e:8f:a3:5e:
         a4:0a:0d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:25:55 2026 by rpki-client