Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
File:                     1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json)
Hash identifier:          kpjjgm8jW44HCpkQfZ5yf7Idc9JlSq2mEdxZNxf1iNM=
Subject key identifier:   A6:51:EF:0D:FC:F7:30:FD:9A:B7:4C:63:02:6D:D9:C5:77:E5:73:E5
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Certificate issuer:       /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial:       01A0CFA4748EE0502429066B68E04CEA4443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
Manifest number:          0BF5
Signing time:             Wed 23 Sep 2026 19:00:56 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:56 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:56 +0000
Files and hashes:         1: 1V2eWPwMoUqafAswREwesTHJcEg.roa (hash: 8Ljm/PxM1d30P31h1Ux7eMRQhRm58ZX/tSxXvNMir84=)
                          2: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: cs4iLGhXESBavLUlrmZM2jOLHWMd2T024GbhJcAof9U=)
                          3: B5mgROa_HhZghovwN5tBttE8vQ4.roa (hash: htlrxZ1Q52aR4gDDugtXWGZbxc/WBqlk8qnt1UWg1Vo=)
                          4: IgmLWgxDoTeSu4Zj1Iq-sm2kgMM.roa (hash: Sc1PupxYmmww1l6h7WqQdd4+okMgETcdRza36R2yaQ4=)
                          5: URQ0ixwikEDnD5vaplcoCL7PWCE.roa (hash: U9bd3yHk+qz1wvsZbw78086KKHXfP+Uyk5WS+MvNdrE=)
                          6: csxH9N8tVIrkBDMI7J2H9oHB5ts.roa (hash: YnDsKZSvVyafr0VpozmsvhXFno1wOxr2STYbFQyZa38=)
                          7: eEzl8wdO2N_6D7w_9Bax5AX4F6k.roa (hash: M2fSlXcaKrSdl8K4kyFGKfTwtRUdwGtRzjVZehMj0zg=)
                          8: ltZGgLjX0XyN_sNeCxdT7qUBPK0.roa (hash: bXF+LPFRGG+z/2Erpeh6wrq94VssmzlD+z8l/AbxQ+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:74:8e:e0:50:24:29:06:6b:68:e0:4c:ea:44:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
        Validity
            Not Before: Sep 23 19:00:56 2026 GMT
            Not After : Sep 24 19:00:56 2026 GMT
        Subject: CN=a651ef0dfcf730fd9ab74c63026dd9c577e573e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4d:20:79:cf:59:a7:d9:36:33:83:ae:1a:4e:
                    e7:eb:bb:bc:fe:78:92:f2:5b:0f:30:8a:24:3f:13:
                    75:d6:b0:23:14:a1:54:e8:d4:71:35:55:b0:10:54:
                    75:15:b1:ba:5f:57:ad:83:30:d8:11:e8:67:dc:53:
                    28:62:af:4a:34:55:f4:11:26:41:82:af:d7:a8:e8:
                    c1:31:61:4f:04:70:64:ed:9a:c8:29:98:c8:83:e3:
                    21:87:19:69:28:a0:12:01:77:ce:3c:1c:b2:f4:44:
                    b1:5f:e9:c2:0e:5f:ac:8e:a1:0e:21:02:e8:c1:8d:
                    88:6a:9f:6e:c1:58:9b:2b:c2:5a:96:c9:c7:60:c8:
                    a0:d5:f8:14:c7:e4:d7:5d:c6:47:5c:b2:41:5b:d3:
                    71:df:b0:7f:bb:05:aa:74:c4:23:cf:42:24:d2:ed:
                    54:15:5c:a3:4e:9d:1e:91:92:ac:6d:90:03:a3:08:
                    44:79:8f:77:22:55:91:bf:b7:b4:16:17:63:ba:bb:
                    10:ec:52:d4:01:6a:07:c5:fe:8c:42:44:a5:c3:96:
                    29:3c:bd:b1:de:d3:35:d7:e6:b9:5e:70:e7:d1:99:
                    7b:8f:1b:cf:8c:e0:34:65:e8:17:2c:47:71:57:c6:
                    a9:7d:02:09:5b:f0:5b:36:1d:ba:15:42:82:6d:85:
                    fd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:51:EF:0D:FC:F7:30:FD:9A:B7:4C:63:02:6D:D9:C5:77:E5:73:E5
            X509v3 Authority Key Identifier:
                keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:94:d1:44:a8:40:98:e2:b4:96:34:db:40:62:a6:8d:ea:40:
         90:ab:b9:be:1e:d7:db:0e:f1:95:4a:48:47:50:a3:b8:1a:2b:
         cd:9b:92:72:94:84:15:2b:dc:0c:36:7d:68:48:59:74:39:c9:
         1d:21:7b:b9:f2:be:75:79:9f:8e:8b:cb:b8:30:69:a1:ae:64:
         4c:4c:26:25:c6:65:02:be:82:3d:be:6a:23:8c:3d:12:48:a7:
         54:cb:21:ec:52:5e:15:e3:4d:2a:17:3e:75:75:60:9b:b9:75:
         35:8b:84:2f:d2:e8:d4:99:19:27:71:00:d1:dc:d9:40:cc:87:
         2f:c6:a7:32:3c:a9:48:2d:c5:86:8f:83:ae:df:9b:f7:79:0d:
         2d:b5:af:58:55:4c:7d:95:b8:b4:a9:97:dd:52:a6:f3:12:59:
         7a:fa:15:03:46:a5:a0:27:be:f9:c2:fc:09:3e:66:88:25:59:
         51:f6:e2:88:5e:dd:41:eb:02:6a:c1:12:31:f3:e0:aa:e8:68:
         cb:9b:3f:da:38:a8:6f:70:87:7a:82:6c:7a:ab:79:c0:7d:43:
         f7:2b:bd:7e:4a:5b:d4:fc:d2:20:e3:3c:3c:ed:83:be:85:d8:
         18:fd:5b:dc:80:bc:1e:06:2f:d3:fd:99:b0:0a:d0:59:6c:89:
         c7:de:70:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:45:56 2026 by rpki-client