Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
File:                     Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft (raw, json)
Hash identifier:          YA/EMoDkVC2nVgTSVzpompyfQqbrneD8BkAn0jSZwgM=
Subject key identifier:   84:01:1A:97:D8:E1:74:6C:B0:F6:1D:1B:50:41:57:35:9F:21:44:AB
Authority key identifier: 09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73
Certificate issuer:       /CN=09f93d62beb75bb4232dcd052d270276d36f8573
Certificate serial:       01A0CF6CCCD172A381676CBB531129CE911B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
Manifest number:          18B4
Signing time:             Wed 23 Sep 2026 18:00:09 +0000
Manifest this update:     Wed 23 Sep 2026 18:00:09 +0000
Manifest next update:     Thu 24 Sep 2026 18:00:09 +0000
Files and hashes:         1: 6VbfAtk74cEPjvjgLQEhtLrP81U.roa (hash: rizvPmOdwzBXEQAhSRAxrV7Y3yfCi8vmhR+0fDvXQ4g=)
                          2: 6jxLWgEtYzUcIeL5nZFYtWqCnfY.roa (hash: Lovb3G8X/XH3FBnrwcuSEwDdeXgPvRqXxr0SbNYBD+M=)
                          3: Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl (hash: TI7iP0lQ0af640koAJ7zMLTOZpMOaasduZnnkk0j/C4=)
                          4: nyJdPy5Bsxrv9RkeGDs6hh13eEw.roa (hash: E+DEgJCHAZ1XErRECJ9yeRTJenD3kJR7V8Lsa73CEVk=)
                          5: zmJzZmVY8NtwzftSPErinNzKjGE.roa (hash: yU1t8HphTqzqKJyMuPkrerGT4L8SmhaXm7BHsn47/0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:6c:cc:d1:72:a3:81:67:6c:bb:53:11:29:ce:91:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f93d62beb75bb4232dcd052d270276d36f8573
        Validity
            Not Before: Sep 23 18:00:09 2026 GMT
            Not After : Sep 24 18:00:09 2026 GMT
        Subject: CN=84011a97d8e1746cb0f61d1b504157359f2144ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7e:d5:ff:9d:7a:57:78:b9:a2:07:69:6b:c1:
                    bb:d9:52:09:38:3e:1a:4b:77:bc:5c:65:75:2d:39:
                    6f:74:e0:02:e2:cf:c3:24:ac:ef:da:05:86:44:ed:
                    dc:71:06:05:c9:9c:c9:2d:b6:8f:4f:6f:10:bf:f2:
                    7f:b3:bf:84:a3:0c:95:2d:52:c0:32:cc:ac:5c:e6:
                    53:20:b2:bc:b8:97:0f:c2:5a:87:a8:73:51:94:9c:
                    5c:09:7c:46:0c:3c:89:d8:2d:bc:65:da:d3:c1:8f:
                    ee:f8:18:be:b4:4a:1b:a9:12:ef:35:6a:3a:02:b4:
                    fc:e9:a6:d4:15:c4:b6:b9:26:c6:51:b5:2e:f5:b9:
                    f1:4c:4a:f7:c2:4b:ea:09:b6:16:a5:1f:07:37:2e:
                    92:19:d4:bd:08:ed:10:bd:b6:e6:9c:72:13:80:28:
                    6f:ff:4f:65:2c:05:90:87:10:6e:a4:eb:c8:a3:86:
                    c9:16:3e:54:51:e7:c6:74:2f:51:0e:09:78:19:f2:
                    c4:e7:48:61:76:39:ea:4a:4b:40:ca:3c:4b:09:29:
                    c2:22:30:85:14:7e:77:1d:2f:3d:1e:2a:b5:6e:35:
                    50:5f:3a:a8:9e:aa:67:4a:61:0e:4c:da:b9:75:11:
                    29:1c:ce:b9:a8:4d:83:af:45:d8:64:4e:91:9a:bb:
                    0e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:01:1A:97:D8:E1:74:6C:B0:F6:1D:1B:50:41:57:35:9F:21:44:AB
            X509v3 Authority Key Identifier:
                keyid:09:F9:3D:62:BE:B7:5B:B4:23:2D:CD:05:2D:27:02:76:D3:6F:85:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cfk9Yr63W7QjLc0FLScCdtNvhXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/705aad-59b2-474e-a3d8-bf34d01f8b0a/1/Cfk9Yr63W7QjLc0FLScCdtNvhXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:b3:bb:c5:ed:a7:3a:81:99:8a:48:a0:8b:8a:15:b6:77:50:
         eb:38:7f:1a:a0:98:4c:aa:ff:e1:6a:c3:19:8a:72:8e:09:62:
         cc:54:ce:bd:a2:34:59:8a:c2:e5:58:30:e2:fb:8b:2c:b0:85:
         9d:f2:7c:f8:8e:e2:3c:5c:34:7d:ff:0f:a5:3c:a8:4d:64:07:
         34:a3:04:af:e1:90:73:0b:5e:fb:b8:67:64:7c:77:0e:2b:2c:
         03:4d:6d:49:1d:b7:f3:ed:b3:d0:2a:15:d9:20:72:11:44:19:
         4f:72:28:4a:bc:c6:6a:34:22:81:9c:50:fd:e8:b2:38:35:25:
         15:30:92:b6:42:6c:b3:39:99:4c:30:95:ac:29:bc:e2:6b:86:
         4e:09:ea:57:69:0b:25:32:f1:5f:9a:f8:d8:8c:63:e6:b3:8f:
         e8:17:89:22:69:58:dd:02:8e:68:1c:d7:42:66:8b:05:2e:f0:
         db:92:7f:99:87:ec:63:8a:f2:77:58:59:86:04:34:c2:06:60:
         49:c8:0a:5e:bb:89:0d:39:f7:e8:16:d1:28:fd:73:db:5a:66:
         76:30:20:74:42:85:20:82:43:33:ea:89:79:4b:20:04:8b:b6:
         40:6a:57:67:ea:23:a8:1c:57:48:ee:c6:7c:6a:e1:3c:a2:ee:
         8c:27:55:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:47:07 2026 by rpki-client