Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
File:                     epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft (raw, json)
Hash identifier:          A8OIy/jS46YBPHo71cuOn7bXHaAO7iRRmzf6Pq1Hn94=
Subject key identifier:   67:CB:A1:B2:CA:41:6D:A0:A3:58:14:31:5F:02:4D:8F:A7:D9:B4:76
Authority key identifier: 7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4
Certificate issuer:       /CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
Certificate serial:       01A0CFA46379DBD841A0340C052338632968
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
Manifest number:          16E3
Signing time:             Wed 23 Sep 2026 19:00:52 +0000
Manifest this update:     Wed 23 Sep 2026 19:00:52 +0000
Manifest next update:     Thu 24 Sep 2026 19:00:52 +0000
Files and hashes:         1: WVAJdgjbItg7Mo643n_cLFQt5QM.roa (hash: wQEt73D3Ylc7pRRWF2c8VCcNEdJAA1g1dE2/T5MxO+A=)
                          2: epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl (hash: WFCCAmtarmsCy7I+hAZuuGX3ApRzwCjTqn8z+d4/jLg=)
                          3: ifkhfkR12chdZx40iDC75Z6ZvtI.roa (hash: VCtx1LYyqYZzs+BoTifxqmMrsa75EWc9KzbMGXKx/XI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:a4:63:79:db:d8:41:a0:34:0c:05:23:38:63:29:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a91b34153da0d5d121cff43259fcd9e3dbfc7d4
        Validity
            Not Before: Sep 23 19:00:52 2026 GMT
            Not After : Sep 24 19:00:52 2026 GMT
        Subject: CN=67cba1b2ca416da0a35814315f024d8fa7d9b476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7a:70:3b:d4:ad:c0:7a:1d:1d:fd:6e:5f:c2:
                    5a:8f:6d:e3:68:45:88:3d:3f:de:0d:ff:fb:73:fe:
                    e6:0c:c5:0b:d3:24:48:86:4c:d0:7c:a4:1f:d3:87:
                    64:27:d8:80:ff:da:2d:ac:66:d5:a2:40:09:3e:01:
                    78:2c:ff:a5:40:e2:77:a9:32:29:78:68:ec:47:b2:
                    b8:e9:69:4d:42:19:3d:0d:cb:cb:85:70:19:3a:1f:
                    bf:90:91:f4:f7:64:47:1a:c1:b9:d5:74:e5:5a:99:
                    5f:62:f8:c1:fe:67:b6:fa:53:57:c6:92:e2:78:b0:
                    b2:42:1d:c6:43:3b:ee:bf:c8:44:48:41:37:d6:b8:
                    1a:e8:4d:42:4a:37:b8:7e:dd:30:69:aa:3f:8a:82:
                    59:96:37:50:05:89:66:e3:bc:2c:36:f1:e0:db:f7:
                    95:24:f6:70:e4:67:74:73:7f:a2:14:b8:93:8e:df:
                    c0:95:df:bf:88:a0:08:dc:58:c4:24:af:6f:d8:c5:
                    f8:06:31:86:d9:d7:35:ed:09:ff:5f:d9:15:a2:ba:
                    58:40:56:7d:2f:61:3e:f0:e8:db:b7:20:52:1d:de:
                    05:da:f1:5c:05:cf:99:64:f2:67:e1:81:76:ab:32:
                    ff:78:57:ca:15:f8:f8:c8:c3:5c:05:17:2b:bd:c3:
                    33:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CB:A1:B2:CA:41:6D:A0:A3:58:14:31:5F:02:4D:8F:A7:D9:B4:76
            X509v3 Authority Key Identifier:
                keyid:7A:91:B3:41:53:DA:0D:5D:12:1C:FF:43:25:9F:CD:9E:3D:BF:C7:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/53f652-01b1-42f2-85e9-4dcb23fdb06a/1/epGzQVPaDV0SHP9DJZ_Nnj2_x9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5d:ca:f3:59:0e:9d:44:e2:80:11:0c:f7:44:b7:c1:ab:e8:
         21:7e:17:0c:66:5d:e3:f1:1e:b7:6c:dd:7c:9c:98:13:da:f5:
         c9:a5:ba:2c:77:29:32:d0:81:4e:14:aa:15:89:67:8c:70:37:
         dd:b2:60:75:f5:a3:56:87:5c:d7:ff:c0:34:2b:bd:7e:70:ba:
         fb:76:da:ed:a7:c4:ad:d9:ca:6d:d6:f6:f5:16:af:2c:cc:57:
         7c:07:34:9e:24:5f:1d:71:d8:62:e9:27:68:b6:e6:9b:d5:94:
         c7:96:1e:0e:f8:c6:aa:82:cb:94:c7:87:84:c9:e3:9a:03:09:
         14:1b:d5:f6:64:b3:d9:6f:a8:17:36:ee:dc:c8:0e:b1:29:be:
         99:16:60:f4:57:bc:88:eb:a3:2f:6e:ee:eb:40:3d:b4:8f:21:
         fd:53:d6:b9:60:7b:03:2b:fb:3f:95:7a:5e:a0:b3:33:0b:3c:
         0d:5b:5a:01:f0:10:4c:27:e2:b2:38:2a:95:9a:15:60:b5:fb:
         33:5e:a5:54:88:7e:91:6b:87:0e:ee:de:ed:68:aa:dc:92:39:
         40:34:c9:dd:f4:0a:3e:76:aa:bd:68:61:56:be:b8:40:ca:26:
         45:73:d8:e1:d1:a2:16:a6:f1:d7:0e:45:79:d6:ec:b8:da:94:
         91:20:7a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:04:25 2026 by rpki-client