Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft
File:                     Suvuj-dUnRqa5Vnl2ggWQunqwng.mft (raw, json)
Hash identifier:          +2RjBbs+nq37NkXHu6C1Sfypc4UHFZ4Repp1q8813so=
Subject key identifier:   74:5F:C4:24:7B:C3:8D:B3:5D:DE:3C:12:0E:ED:08:23:93:A6:24:1E
Authority key identifier: 4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78
Certificate issuer:       /CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
Certificate serial:       01A0CEFF5211439DE50392BA19887421F5E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft
Manifest number:          1A75
Signing time:             Wed 23 Sep 2026 16:00:34 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:34 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:34 +0000
Files and hashes:         1: DvIXkhqBYB1CNCsvtOQdhfIz6iI.roa (hash: WtwbKx7EDAG40O4+pnLNdkRgCJIycpEiuUwlCosElYc=)
                          2: Suvuj-dUnRqa5Vnl2ggWQunqwng.crl (hash: c0ivhyi6N7XeteP2lrozFDDYRWYy1wqJObVwOUHY5+Q=)
                          3: _goFycSckx1Lbo5ENUIWZUP0Egs.roa (hash: /wDlnHymJ5pu0rVWdrm5goCMIyva4ia4QEM+t0S0ncU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:52:11:43:9d:e5:03:92:ba:19:88:74:21:f5:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aebee8fe7549d1a9ae559e5da081642e9eac278
        Validity
            Not Before: Sep 23 16:00:34 2026 GMT
            Not After : Sep 24 16:00:34 2026 GMT
        Subject: CN=745fc4247bc38db35dde3c120eed082393a6241e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a6:de:0b:0a:72:8a:ae:88:6f:db:5d:fc:64:
                    20:36:26:0e:15:83:03:09:d3:a8:fd:98:d3:67:a9:
                    fd:4d:e6:7a:20:86:32:50:d5:d7:fa:a3:1b:a2:d4:
                    f2:79:db:d3:29:69:4f:2c:75:07:ff:d8:b4:61:23:
                    0c:10:da:d2:e5:0d:48:8d:ee:a8:07:df:0f:b7:44:
                    fe:99:ea:a4:03:a0:af:e9:ea:5b:f7:ee:5d:05:88:
                    05:c0:31:6c:38:81:bd:86:a5:fb:de:9b:49:ad:68:
                    e9:69:e4:29:24:95:25:4b:d2:40:ba:d5:fb:64:2c:
                    2b:1e:eb:02:e9:ed:84:0e:0e:eb:27:9a:ed:d2:76:
                    30:ee:f8:d3:7f:bd:65:12:c7:6c:41:56:5f:36:15:
                    e4:35:a0:ae:2e:f0:2a:dc:4b:a1:5f:ac:b9:f8:9e:
                    f2:4a:0e:5c:6a:85:f5:79:19:b0:e9:64:d8:64:86:
                    9c:3a:5b:ac:16:4f:46:5a:c6:36:81:ed:b0:1d:97:
                    29:48:36:e5:85:84:bc:66:b4:aa:1b:13:21:00:5c:
                    ac:f0:ef:76:0e:d5:28:c5:01:4e:a7:9c:ef:16:7a:
                    fd:e1:98:39:c7:55:09:2b:86:e5:60:eb:14:5b:32:
                    5d:c5:a6:a5:e7:6a:56:ee:6f:5f:4d:a7:b6:4d:c6:
                    95:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5F:C4:24:7B:C3:8D:B3:5D:DE:3C:12:0E:ED:08:23:93:A6:24:1E
            X509v3 Authority Key Identifier:
                keyid:4A:EB:EE:8F:E7:54:9D:1A:9A:E5:59:E5:DA:08:16:42:E9:EA:C2:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Suvuj-dUnRqa5Vnl2ggWQunqwng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/a18960-2cfa-46b7-8e5a-2e2d93c4754b/1/Suvuj-dUnRqa5Vnl2ggWQunqwng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:af:db:af:43:8c:75:68:48:40:fc:e9:09:31:a4:78:f6:c0:
         db:12:ff:bc:f2:25:e4:7e:3b:af:77:84:be:34:62:a0:e0:c8:
         88:86:d5:76:5e:65:78:63:4e:4e:98:ce:c5:df:b3:25:8c:e2:
         c4:bd:54:ac:63:71:90:d6:87:20:01:d8:36:e0:d2:28:54:d2:
         1b:86:ea:ee:3c:ba:4e:af:76:ca:be:0e:fd:6f:8b:12:99:89:
         d5:26:e3:be:3b:3f:1d:80:1d:db:45:9c:7c:61:dc:1b:c6:c4:
         cd:34:dd:a1:24:ca:f0:83:3b:d6:06:9b:6f:22:b3:ad:58:4a:
         70:61:47:27:85:eb:7c:98:8c:bd:dc:76:1c:6a:59:78:b7:b4:
         d8:95:86:80:00:e4:a5:31:d8:8d:3c:16:96:a2:43:1b:5f:98:
         72:d2:bf:1c:1c:1e:0c:e4:6f:f0:3c:d8:21:3d:6d:34:27:e9:
         fa:a3:cf:f8:7d:20:22:10:10:dd:fa:d8:5d:04:31:f1:e4:ac:
         be:e9:0d:e8:cf:4d:bd:35:19:ca:7f:05:82:74:61:01:f3:44:
         0a:fd:ac:bf:f9:74:4f:5f:ae:58:df:c7:8c:d8:4c:ff:cc:eb:
         8a:f6:6a:22:8c:67:d8:b1:77:f8:05:89:f0:60:fa:f2:b4:34:
         d1:81:ff:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:14:07 2026 by rpki-client