Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
File:                     4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json)
Hash identifier:          pdxr1V2bf9Xdlw8OYj3tnCHCRRthB1Hoxa53Wh7Z3xQ=
Subject key identifier:   10:5A:DF:D4:94:AA:EC:F2:A8:03:BE:3E:F2:2E:A1:B9:30:98:1D:3B
Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
Certificate issuer:       /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Certificate serial:       01A0CFDACC08F749CE32704B5775E02D3F18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
Manifest number:          1A6B
Signing time:             Wed 23 Sep 2026 20:00:17 +0000
Manifest this update:     Wed 23 Sep 2026 20:00:17 +0000
Manifest next update:     Thu 24 Sep 2026 20:00:17 +0000
Files and hashes:         1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: +O/sw7wrLctpBBOv31vT22LRPwUnwlHC36CxDkTBnEc=)
                          2: 8WgF1FeeAMIWLEqNHsEmrCFfWUU.roa (hash: l9CCrON/4HDYrH0Vj7tQlkfUKI21p0hKJL3nNR+WrZ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:da:cc:08:f7:49:ce:32:70:4b:57:75:e0:2d:3f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
        Validity
            Not Before: Sep 23 20:00:17 2026 GMT
            Not After : Sep 24 20:00:17 2026 GMT
        Subject: CN=105adfd494aaecf2a803be3ef22ea1b930981d3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b0:8a:10:3a:90:40:df:cd:19:44:44:c3:09:
                    2a:c8:df:0b:34:84:ec:cc:9b:f0:31:d7:e1:3a:fd:
                    6a:1e:93:7b:a5:50:7e:a1:7b:de:75:34:5f:9f:37:
                    50:35:cb:9e:73:24:44:01:ce:66:8e:20:aa:01:77:
                    30:a4:d6:ad:75:01:a7:f1:ce:da:aa:d7:0e:e8:f0:
                    94:a7:e4:b2:52:8a:d4:d7:91:48:b2:e4:e9:f8:1d:
                    23:6f:09:3c:d3:ee:56:60:68:9f:fa:e5:d9:d3:b3:
                    d3:31:6f:58:8c:33:f7:9b:e5:c4:5a:7d:6f:ba:37:
                    96:1a:11:28:f1:91:80:bc:63:89:32:5b:25:44:df:
                    59:44:68:67:f6:5b:a4:b7:be:07:fa:bc:e3:b3:d7:
                    6d:e3:ff:e6:6d:ad:f6:4f:ba:b1:42:3f:4d:ba:9b:
                    05:fb:76:d0:a1:74:16:00:7d:70:61:72:02:2a:92:
                    5d:85:fb:7c:94:ef:98:d6:64:a1:1a:e9:6e:bd:c0:
                    67:d8:e2:cb:24:47:26:1f:50:2e:60:ff:9a:f2:a4:
                    7b:28:59:45:0a:f2:11:63:29:32:85:b5:8b:fd:1c:
                    c7:46:37:cb:58:52:d2:a2:9f:01:46:27:7f:d8:79:
                    2b:31:50:26:46:cc:e5:73:1f:b5:e2:c5:d5:ea:7f:
                    f8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5A:DF:D4:94:AA:EC:F2:A8:03:BE:3E:F2:2E:A1:B9:30:98:1D:3B
            X509v3 Authority Key Identifier:
                keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:64:2d:51:3f:ce:02:3c:9b:b4:df:f8:63:38:98:2e:eb:d4:
         39:fb:32:c7:31:f1:3e:8d:ad:51:30:3e:89:53:cf:5b:f3:2f:
         09:f9:74:96:04:be:1c:de:5e:c6:17:08:c9:2d:54:92:8e:c4:
         c0:4b:0c:96:ce:dd:d2:24:1d:af:a0:60:65:b2:1a:da:03:e3:
         8a:e1:27:45:cb:b3:37:2e:2c:e9:a8:43:71:c7:30:72:69:c8:
         02:b4:91:ab:67:9f:4b:6f:fa:38:95:b8:5b:70:9d:c2:78:f5:
         2c:40:cc:b8:49:4c:d3:e6:42:23:56:d4:0f:a0:14:67:1b:11:
         dc:c9:ff:2a:44:a5:a2:b6:ec:01:33:ed:20:56:65:2d:78:4a:
         82:b6:c6:c5:c6:58:e3:aa:6f:22:45:81:ca:31:71:11:8a:54:
         b8:2e:01:e2:72:ff:e9:8a:86:1b:d9:24:99:dc:6b:2c:b8:f3:
         64:85:a3:73:c4:95:8a:39:6e:28:c9:af:4c:c7:d7:a2:5b:41:
         91:09:5b:0b:70:85:8b:a6:88:53:78:c5:b5:eb:11:86:4c:e9:
         f3:19:47:d7:b5:f3:9e:2e:0a:d7:a9:5d:fc:da:34:79:56:1f:
         d6:0c:23:45:f0:06:ea:ac:cf:df:2c:7c:58:62:60:85:b2:c7:
         66:a3:3b:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDP2swI90nOMnBLV3XgLT8YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzY4MTZlMGEzYTJmNjE2YzNhYTc3YTM2YjRjYWY3YTky
MjQwMzQwHhcNMjYwOTIzMjAwMDE3WhcNMjYwOTI0MjAwMDE3WjAzMTEwLwYDVQQD
EygxMDVhZGZkNDk0YWFlY2YyYTgwM2JlM2VmMjJlYTFiOTMwOTgxZDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLCKEDqQQN/NGUREwwkqyN8LNITs
zJvwMdfhOv1qHpN7pVB+oXvedTRfnzdQNcuecyREAc5mjiCqAXcwpNatdQGn8c7a
qtcO6PCUp+SyUorU15FIsuTp+B0jbwk80+5WYGif+uXZ07PTMW9YjDP3m+XEWn1v
ujeWGhEo8ZGAvGOJMlslRN9ZRGhn9lukt74H+rzjs9dt4//mba32T7qxQj9NupsF
+3bQoXQWAH1wYXICKpJdhft8lO+Y1mShGuluvcBn2OLLJEcmH1AuYP+a8qR7KFlF
CvIRYykyhbWL/RzHRjfLWFLSop8BRid/2HkrMVAmRszlcx+14sXV6n/4rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBa39SUquzyqAO+PvIuobkwmB07MB8GA1UdIwQY
MBaAFOLGgW4KOi9hbDqneja0yvepIkA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zYmE3Y2QtZTgxNS00NWNlLTkyZTEt
MjAyYzUxNzIwYWI3LzEvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zYmE3Y2QtZTgxNS00NWNlLTkyZTEtMjAyYzUxNzIwYWI3
LzEvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmQtUT/O
AjybtN/4YziYLuvUOfsyxzHxPo2tUTA+iVPPW/MvCfl0lgS+HN5exhcIyS1Uko7E
wEsMls7d0iQdr6BgZbIa2gPjiuEnRcuzNy4s6ahDcccwcmnIArSRq2efS2/6OJW4
W3Cdwnj1LEDMuElM0+ZCI1bUD6AUZxsR3Mn/KkSlorbsATPtIFZlLXhKgrbGxcZY
46pvIkWByjFxEYpUuC4B4nL/6YqGG9kkmdxrLLjzZIWjc8SVijluKMmvTMfXoltB
kQlbC3CFi6aIU3jFtesRhkzp8xlH17Xzni4K16ld/No0eVYf1gwjRfAG6qzP3yx8
WGJghbLHZqM7kQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 00:51:31 2026 by rpki-client