Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
File:                     xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json)
Hash identifier:          3h4U7T30ldn+fogfB11j2JkoWoduSlZCFC1jOBqlt+s=
Subject key identifier:   0B:BD:FD:32:45:6F:C2:E8:BF:DB:37:40:B6:E2:8B:F5:8D:1C:FF:46
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Certificate issuer:       /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial:       01A0D2377D9BFD71DB3359B81B9DF16D539B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
Manifest number:          1A72
Signing time:             Thu 24 Sep 2026 07:00:46 +0000
Manifest this update:     Thu 24 Sep 2026 07:00:46 +0000
Manifest next update:     Fri 25 Sep 2026 07:00:46 +0000
Files and hashes:         1: 7yu1vZA6sQopFbJ477QSAd_T4No.roa (hash: y294/GuVma254ox9Je2JWpyy0Aod0Bh8Uh2WyhLyqks=)
                          2: AOST2v0fOQI-ty-pWahAGdkHAEs.roa (hash: jxMvz/MnFmWAmclh3cHyqmlZEVpCA/u6934edlXvIDs=)
                          3: v1AKGSFZaX4q6-Fa9eZcOMlA91I.roa (hash: ybvXSrIxVSlC65MLiNm3lzU/6tox7zmXggGLLNkjg/0=)
                          4: v92-Eaw03d123_02nzbPzAiBgtc.roa (hash: EG21x+MWDXMZMqTlMifEMC9yWAbNwFpO2h6QDrwu7Io=)
                          5: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: jVoEL1G/FwyhGRK/QqQjTaA0ViqmKdMKbL3tcsTBtvc=)
                          6: zhrj0as10ahWXIxCrY159dKecDc.roa (hash: WKHK2NUh5/br1N6wow0LQOUivGXAj9GLsqWUzqhFbYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 07:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:37:7d:9b:fd:71:db:33:59:b8:1b:9d:f1:6d:53:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
        Validity
            Not Before: Sep 24 07:00:46 2026 GMT
            Not After : Sep 25 07:00:46 2026 GMT
        Subject: CN=0bbdfd32456fc2e8bfdb3740b6e28bf58d1cff46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:2a:9a:0e:f1:fb:d8:10:be:97:0f:4b:9f:
                    56:53:1a:31:7b:69:99:f0:10:46:b6:39:1d:51:e7:
                    ee:7a:21:cb:8a:7e:d7:19:a8:97:a6:07:9a:9d:50:
                    51:80:a0:6b:6f:f9:b4:f0:5a:ad:d6:7e:7c:61:b5:
                    4e:0f:e6:5a:fe:29:5b:09:d6:ed:92:e0:47:f5:03:
                    38:81:0b:e9:f0:78:2f:52:a8:23:7e:8f:83:5a:71:
                    64:cb:57:6c:e9:0b:e3:a4:7a:d9:ff:79:40:57:1b:
                    e9:d8:c4:ae:f5:81:7e:92:80:98:4f:f3:b5:d5:07:
                    63:85:e9:91:f9:19:ad:1a:c5:aa:3e:e8:4d:d4:e0:
                    0d:dc:38:73:30:93:cf:fe:08:09:87:63:12:cb:ae:
                    b7:e0:7e:8a:e8:4b:83:32:59:fb:61:3f:c1:4b:35:
                    28:65:44:8f:70:4d:95:41:4b:28:73:91:07:33:85:
                    51:d0:55:37:71:9d:a6:72:6b:b8:94:71:02:5a:d8:
                    c2:e0:95:5c:ba:39:0a:52:3f:1e:c1:6a:51:e6:bb:
                    db:6d:aa:97:fa:cb:f2:6a:d7:c1:5d:e8:d8:14:9c:
                    bf:c1:36:07:48:fc:49:82:c3:40:27:38:1a:76:bb:
                    64:75:f6:28:30:df:94:ed:6c:3b:36:93:7a:b4:e2:
                    40:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BD:FD:32:45:6F:C2:E8:BF:DB:37:40:B6:E2:8B:F5:8D:1C:FF:46
            X509v3 Authority Key Identifier:
                keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:f7:53:cc:61:a4:f1:b0:2c:e3:e2:c7:c0:34:89:3b:7f:ff:
         83:0f:c2:1c:1f:ce:1f:05:90:37:76:d9:4e:b5:86:fe:85:e5:
         5a:ed:11:92:ea:b1:0e:4e:42:9b:3f:86:cd:8c:2d:de:c5:42:
         fa:f8:29:8b:1a:bb:72:7d:b7:95:c1:6b:b4:76:7e:8d:27:3a:
         94:01:b0:e7:51:42:da:b6:1c:8a:f1:e1:1c:c5:f1:f8:be:63:
         43:0c:2f:5c:1c:86:c8:60:d5:2e:1c:32:c9:1b:11:9b:eb:a4:
         80:a5:ab:9e:7e:a9:7a:38:7c:bd:91:84:e8:49:61:82:2a:3c:
         df:f2:19:98:c8:bf:a4:9c:5a:c5:0e:d4:09:54:79:62:e0:6d:
         ee:7b:3e:07:c8:ec:42:69:9b:ed:6c:53:e1:4f:0e:9b:e8:78:
         5e:b1:2e:43:da:62:77:58:e6:00:a5:ab:53:bc:0e:1d:d8:d9:
         79:7e:91:a6:f9:d7:9a:98:44:d1:6f:ff:11:b1:12:38:56:3e:
         82:93:7b:9e:2f:56:86:e5:0d:34:2f:9e:06:c7:ac:e0:55:03:
         2a:56:1f:a0:1d:e5:2e:29:2a:ed:dd:f1:4c:0e:a8:15:99:5b:
         f7:30:23:ff:61:cf:8d:40:95:30:e1:67:d9:1d:5a:0f:c0:cc:
         00:83:5c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:56:54 2026 by rpki-client