Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
File:                     iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft (raw, json)
Hash identifier:          NDfoLRw/g96sJ694N4TtN7z1TUOAsiYm/v0E9dvGh3M=
Subject key identifier:   34:4D:D4:CD:F3:59:56:4E:64:EF:12:C7:74:E2:3A:1E:C1:9A:9C:72
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Certificate issuer:       /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial:       01A0D9BB68EDC029160779C40C09B5B958A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
Manifest number:          1232
Signing time:             Fri 25 Sep 2026 18:02:12 +0000
Manifest this update:     Fri 25 Sep 2026 18:02:12 +0000
Manifest next update:     Sat 26 Sep 2026 18:02:12 +0000
Files and hashes:         1: 9D_hL6BTFMqVDteQVeKe20j1dLA.roa (hash: NIOHGASDD2CfBiUud4MTlBzLoCpd2hk9q9QgBiWLS7s=)
                          2: BWlmWVMxkNnS9PCmlrzVPHTr0Qw.roa (hash: 0mnB5pl7WzlDcgHTanlrlKrT0b7HdGshZ3gTbOkWWLE=)
                          3: MYqosqYznshSBHhJRCRXz5w9vvU.roa (hash: YCd4lsvChvCvSXFOE9n0zc8M89HnW32oRzu9rQpmrMo=)
                          4: XXAxLeR9iCjxs0KN2sJV-GUTLrs.roa (hash: vbwqyD/MHd4gIhRBk8aJrlF68pfDvRkIiGup6DojcAQ=)
                          5: iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl (hash: Lizf56YNZay2S+pVPnrk5K2AwvLcAfYBxt+nZ8DaNHk=)
                          6: v2pVbuDIo2QFLf9tgf0AgEZfKsg.roa (hash: gXOCFkUMTWDAXQIKNOf9kMl0WJuvQJli0ZTnKwQ3NNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:bb:68:ed:c0:29:16:07:79:c4:0c:09:b5:b9:58:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
        Validity
            Not Before: Sep 25 18:02:12 2026 GMT
            Not After : Sep 26 18:02:12 2026 GMT
        Subject: CN=344dd4cdf359564e64ef12c774e23a1ec19a9c72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:41:4a:38:3a:ed:1f:be:a1:93:63:e6:af:06:
                    a1:88:e1:e1:98:5c:05:2d:a8:ed:ca:6c:56:fa:61:
                    fc:27:cc:ae:d5:13:5c:af:65:29:bb:21:b3:e8:35:
                    55:a6:84:e2:95:b4:55:45:a9:e0:a7:2b:8f:c3:94:
                    ab:7e:02:94:34:58:64:bf:84:c4:68:e6:bf:cc:03:
                    32:ec:ba:e3:68:1e:51:f9:c5:ea:e6:09:aa:e0:24:
                    f4:7d:32:f9:2b:6e:0f:62:57:6d:c7:f0:56:f7:2b:
                    3b:70:81:4f:85:27:94:36:ba:54:37:c7:07:40:f7:
                    69:ff:7e:34:fa:2e:1d:d0:cb:20:f4:71:bb:a5:b3:
                    0b:d3:ea:fa:b8:11:35:fd:5f:be:53:eb:a8:a0:7d:
                    c1:46:b7:4e:e4:14:e2:96:2a:27:4c:b6:50:c9:2a:
                    c9:15:54:dc:81:29:55:bb:0f:90:1b:fb:46:cc:ac:
                    fc:66:d2:79:c5:84:83:c1:39:2d:f7:85:29:df:8e:
                    eb:5b:2f:d5:b1:2c:42:87:d7:7b:3e:56:59:77:e7:
                    22:5f:e5:47:ee:9e:41:66:59:a8:92:24:21:46:4a:
                    40:e2:f3:b3:f7:99:40:4c:0e:5d:e4:81:c3:3d:bc:
                    90:28:0a:6b:f5:0c:e9:a9:6b:96:0b:39:19:96:4c:
                    06:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4D:D4:CD:F3:59:56:4E:64:EF:12:C7:74:E2:3A:1E:C1:9A:9C:72
            X509v3 Authority Key Identifier:
                keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:34:ff:f7:71:75:34:55:cc:55:54:7a:86:96:0b:45:68:c5:
         e2:47:a8:3d:19:80:d0:ac:e3:fe:7d:5f:5c:73:23:36:04:0a:
         88:e1:da:0d:f9:df:8a:95:85:4d:9d:1a:9e:c0:e7:5d:b5:f2:
         96:b1:2a:d2:12:9f:e8:bb:42:cd:24:ed:d9:2f:e9:10:d3:b5:
         7d:10:b6:0a:84:82:e8:5a:6f:89:2f:e5:b3:b7:5e:e7:96:bb:
         eb:02:15:c7:4d:01:68:7f:55:e9:22:eb:e9:54:62:a3:93:ee:
         70:0f:5e:e5:e4:f0:ab:73:83:79:9c:95:48:ec:cc:6e:89:4f:
         a5:bc:55:3b:f9:b1:1d:52:96:e3:8b:ee:a6:b4:de:87:37:69:
         4b:36:e2:11:5d:8a:76:7d:34:fd:95:99:28:5c:03:03:ec:31:
         cc:19:98:db:d5:41:85:64:d8:39:63:51:2f:d9:1f:65:96:fd:
         ae:9e:8a:2a:68:5b:df:53:9e:cf:dc:1f:48:40:b3:a9:77:66:
         a6:36:ad:b7:8b:1b:1a:54:54:81:a3:7e:b3:fa:2d:8d:56:05:
         f6:91:3a:7c:dd:4a:07:05:3b:34:de:11:e8:b5:c1:99:1e:1e:
         39:8a:3c:10:74:7f:fb:59:e6:09:fe:4a:27:12:2e:74:dc:7d:
         da:17:22:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:01:41 2026 by rpki-client