Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
File:                     1pI99NrpGVDPANI1_jngDuo4FtI.mft (raw, json)
Hash identifier:          rV0+a7zocd08HJVrT8LmUDTUnbTufYq3rOXoeFzZXW0=
Subject key identifier:   18:59:34:C5:BA:45:F5:10:CE:99:0A:5A:4E:D0:12:BE:12:6E:1C:5D
Authority key identifier: D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2
Certificate issuer:       /CN=d6923df4dae91950cf00d235fe39e00eea3816d2
Certificate serial:       01A0DB723BAA53EF9AECF11CB83AC6C8F5F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
Manifest number:          1A73
Signing time:             Sat 26 Sep 2026 02:01:31 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:31 +0000
Manifest next update:     Sun 27 Sep 2026 02:01:31 +0000
Files and hashes:         1: 1pI99NrpGVDPANI1_jngDuo4FtI.crl (hash: Sp9merhftXqnUgF9540YC5RF6cKyg5qvd8ngkHpvhUs=)
                          2: 7WrVoWRcLHU2Bsy4ilW5Cx0arVE.roa (hash: /TUreq9BRtjv30vH+llUuJBYCO9XE8y+WYf/yceedfM=)
                          3: GitVxaMY3Sl8aXlmBwl_1UkJSHk.asa (hash: gFvdXhsjUWkWQyOZfjUWvwTNTmEyIH2hO4nrhMiNZNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:72:3b:aa:53:ef:9a:ec:f1:1c:b8:3a:c6:c8:f5:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6923df4dae91950cf00d235fe39e00eea3816d2
        Validity
            Not Before: Sep 26 02:01:31 2026 GMT
            Not After : Sep 27 02:01:31 2026 GMT
        Subject: CN=185934c5ba45f510ce990a5a4ed012be126e1c5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:48:be:73:99:7c:6a:cd:ec:73:6a:9d:aa:
                    b1:04:aa:83:25:aa:99:04:cf:c9:2a:ed:7f:15:0e:
                    e4:33:20:e0:f2:8a:ae:a2:99:c5:00:06:73:ec:c9:
                    d1:1d:6c:e2:4f:90:e2:03:d1:ef:e1:c6:4c:b2:58:
                    ee:86:89:a8:99:f2:8a:30:f4:5e:6a:2a:b5:17:46:
                    83:f6:84:91:41:80:df:42:15:91:06:e9:ec:a3:1b:
                    94:21:20:98:1d:0b:30:fb:fb:b0:64:92:46:cf:a3:
                    ee:19:96:94:3b:40:72:88:08:9a:76:33:8b:f9:63:
                    da:fa:19:f4:37:8a:2a:f8:1f:3e:ab:a8:7a:14:f5:
                    17:20:65:3e:19:2f:22:c5:a8:4a:bc:6f:c7:14:e5:
                    6d:d3:44:09:c5:fa:6f:b2:19:5b:21:d1:4e:52:5f:
                    ff:08:ef:ea:71:90:1d:e2:d1:8b:2f:ef:ad:98:6e:
                    c7:a7:9f:0c:53:9d:4a:be:4b:6a:6b:9f:18:5b:2c:
                    2d:fb:f9:3f:88:9a:92:9b:85:99:b3:f9:26:8d:8f:
                    92:18:79:c4:9a:fe:88:15:4c:09:b5:0f:33:5d:ff:
                    6c:31:2c:1b:aa:6c:ea:fb:03:ed:4d:8f:82:5c:66:
                    1c:71:d5:78:30:79:2e:9b:7d:e0:86:e2:72:25:85:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:59:34:C5:BA:45:F5:10:CE:99:0A:5A:4E:D0:12:BE:12:6E:1C:5D
            X509v3 Authority Key Identifier:
                keyid:D6:92:3D:F4:DA:E9:19:50:CF:00:D2:35:FE:39:E0:0E:EA:38:16:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pI99NrpGVDPANI1_jngDuo4FtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/32680d-03d9-4afa-9416-8d6fc010523d/1/1pI99NrpGVDPANI1_jngDuo4FtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:dd:09:08:ac:7b:e1:26:16:07:58:bb:a7:71:b6:65:88:be:
         27:6c:1e:91:74:eb:18:8d:cf:b4:b2:03:f6:b8:84:6e:06:da:
         1b:7e:7e:6c:93:5a:16:98:c6:9d:6f:8f:66:83:2c:ac:37:5f:
         d4:bc:34:7c:9a:ef:31:7f:09:b3:26:ae:8f:ae:3f:a4:f6:4b:
         f9:a6:ce:d6:e7:c3:61:c3:c0:f1:54:13:74:0f:13:e0:b8:f2:
         bb:a4:52:cb:1c:f5:ea:79:fa:4d:55:1f:72:21:73:16:91:95:
         22:99:88:b3:d6:d1:ab:b4:ab:e5:33:1b:59:4c:44:5b:d2:7d:
         9c:ba:34:e0:a7:b8:d6:d2:a0:d7:99:35:fe:8d:bc:e9:10:83:
         a4:42:bb:3b:04:17:d9:a2:30:fe:31:ed:59:fa:29:16:12:d9:
         d8:da:00:23:d6:9e:d6:ea:cc:3b:e8:98:e0:8d:2f:75:ac:8c:
         46:76:0e:2d:10:b3:33:53:0e:e4:55:1b:3e:99:fa:cd:1c:98:
         e5:67:d2:58:ee:17:03:d0:89:ca:f6:0d:eb:48:95:e8:b3:83:
         6d:95:d7:51:42:59:ba:a9:ae:22:a8:bb:7c:32:c1:86:58:10:
         df:d1:c1:b2:b0:3c:22:74:da:46:e2:d4:24:25:51:35:df:af:
         e7:99:e9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:35:43 2026 by rpki-client