Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
File:                     818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft (raw, json)
Hash identifier:          N3aHuPamE4BOdQPDnpip6ugo5NEd7VdCx9Olw1fltos=
Subject key identifier:   69:D5:D2:90:49:2B:BE:D9:C1:B1:90:40:54:FF:76:A4:00:9B:CD:DF
Authority key identifier: F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35
Certificate issuer:       /CN=f35f3f2ebf80c77669250a759be1e5c91e388435
Certificate serial:       01A0D64BF870E1663234ACA1A8F2EA234AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
Manifest number:          1A6C
Signing time:             Fri 25 Sep 2026 02:01:37 +0000
Manifest this update:     Fri 25 Sep 2026 02:01:37 +0000
Manifest next update:     Sat 26 Sep 2026 02:01:37 +0000
Files and hashes:         1: 3bQ5jO0RUuXsW22069a_-nQHYK0.roa (hash: onknVg8brIZzx6BgExEtaYuz5FQlW8luXFcHhl4b8nc=)
                          2: 818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl (hash: CzU8Pt1ibPNC/R4EbQAguRCOq/AjCHvkJ4/HRyBBeww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4b:f8:70:e1:66:32:34:ac:a1:a8:f2:ea:23:4a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35f3f2ebf80c77669250a759be1e5c91e388435
        Validity
            Not Before: Sep 25 02:01:37 2026 GMT
            Not After : Sep 26 02:01:37 2026 GMT
        Subject: CN=69d5d290492bbed9c1b1904054ff76a4009bcddf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:20:5c:e0:64:31:a4:41:67:96:55:59:90:a2:
                    2a:b4:14:62:40:5e:66:70:88:fa:98:a6:55:78:72:
                    6a:dd:51:99:98:2a:f9:ec:f8:72:91:43:5a:52:8e:
                    6a:9d:e5:25:1d:c0:ba:42:39:de:ad:31:05:d4:29:
                    37:ab:99:e4:c2:a3:a3:e4:0d:10:5b:48:d3:82:42:
                    c9:41:3d:f8:8f:17:25:5e:56:d1:8d:08:bc:64:a7:
                    19:52:04:de:50:03:52:11:65:52:5d:64:cd:f5:02:
                    5c:ce:14:f9:d7:b3:3c:b4:35:80:dd:79:e5:4a:11:
                    ba:c3:9c:5f:42:71:b4:e0:00:8b:48:0d:30:99:f7:
                    72:83:13:f5:fc:60:a8:f6:e9:a9:1e:0c:f5:4b:57:
                    e5:ca:bb:5c:c1:50:18:ec:ba:78:b5:73:b8:c3:de:
                    aa:3b:d1:ff:54:fa:55:5e:db:c9:da:98:84:6b:df:
                    13:ac:25:60:d0:dc:11:26:50:ec:7e:c3:0e:3c:3b:
                    eb:b8:af:ba:ed:f5:87:30:13:a2:62:b5:03:c0:3f:
                    4f:56:08:16:1d:85:b8:a8:d5:3d:4e:ba:1b:b5:6f:
                    49:e5:59:6a:bc:5c:f8:c5:32:57:f9:e8:b2:7c:7e:
                    75:45:e2:17:2b:16:93:e9:c3:9b:25:a6:5d:af:26:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D5:D2:90:49:2B:BE:D9:C1:B1:90:40:54:FF:76:A4:00:9B:CD:DF
            X509v3 Authority Key Identifier:
                keyid:F3:5F:3F:2E:BF:80:C7:76:69:25:0A:75:9B:E1:E5:C9:1E:38:84:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/818_Lr-Ax3ZpJQp1m-HlyR44hDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e1f09a-b49f-4f69-8eb9-5cac94b836b6/1/818_Lr-Ax3ZpJQp1m-HlyR44hDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:5c:87:29:88:bb:1d:fb:25:46:59:86:ce:3e:5b:7a:52:78:
         47:dc:18:c3:15:39:9f:00:aa:2b:4e:d5:21:db:3a:10:a9:a9:
         d8:90:d3:88:df:ce:e1:11:d2:05:01:0e:6f:3d:84:0c:aa:e3:
         97:0e:b0:8d:25:00:3c:7a:39:c0:e2:0c:ec:c6:08:82:7f:3b:
         20:6f:df:b8:37:10:a8:58:2d:5f:16:5c:fc:fe:26:ea:9c:9f:
         ea:12:6e:f1:b6:11:a8:59:f7:65:3e:91:f7:68:d7:68:4c:69:
         a9:f2:e9:49:10:0f:5a:b4:f5:55:ec:c6:9c:59:a0:23:74:e3:
         75:c4:d4:75:2d:7f:c3:79:02:ca:5f:af:6f:98:64:7a:d6:81:
         eb:68:d8:2b:3a:71:3d:7c:5c:27:f1:4f:22:c1:2c:79:7f:7b:
         b3:1f:76:a2:76:85:21:e3:9b:e0:9e:40:10:15:b8:3a:34:7b:
         b1:b6:64:c2:d8:23:92:e1:e2:83:30:e7:90:50:8e:25:5a:73:
         f4:63:96:74:85:61:24:30:fa:83:63:0c:9a:de:af:75:7d:10:
         82:5d:67:45:d5:f6:69:04:40:52:10:ed:71:28:6a:ea:02:31:
         f1:bb:55:17:d5:6c:59:c1:3a:ee:3b:9e:d7:a2:84:64:91:a8:
         91:a9:9c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:30:27 2026 by rpki-client