Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
File:                     W1JjSi6wP4VlteM9wrn0kEH3z7A.mft (raw, json)
Hash identifier:          qOEMeTwf03pfjFfrnqc4sUOs48wyjZwz/6OCifV/EMk=
Subject key identifier:   6A:A7:2D:BC:35:75:E6:59:E8:B3:C3:3D:5C:4C:DC:AF:3F:1A:E7:EF
Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0
Certificate issuer:       /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
Certificate serial:       01A0DFBC6708608A6F4952AA38C9546AD175
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
Manifest number:          1ABB
Signing time:             Sat 26 Sep 2026 22:01:01 +0000
Manifest this update:     Sat 26 Sep 2026 22:01:01 +0000
Manifest next update:     Sun 27 Sep 2026 22:01:01 +0000
Files and hashes:         1: B9bDnFJ0Z_m4nm9NyQ0zVMEbmmA.roa (hash: SEltG6CcX4YsTGQ9C3CIwloWPPOisv1HL/KHIEv3qMY=)
                          2: Cs2Zd6251zSrXetle0RtfRConbA.roa (hash: KkGAJBf83tGNHk/erAN4nfXgLUS3Li7zOHUT08OSsww=)
                          3: DcPJY2T-iadNWVBVg9TulaMJxgU.roa (hash: Sc0jVXAeKo7uCrOmz/45A6u6jOCVJZAN2NhxbFpBFAs=)
                          4: Gi_wkUk1O19_KmaHsQsDFBOXTIE.roa (hash: 2T32K0VJv8Ggm1hzjm3o1OxWBTjf+TvCCcIN+lwHDQs=)
                          5: PgIPYwyvLlFrlDL1OcN1KHfq_nk.roa (hash: lRQU/FRaygR7Dce1LG6adooBtMcSBRllXgx3nAIvIXA=)
                          6: R9oqRXkDi9NstDQGawy9QSNPBao.roa (hash: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY=)
                          7: VKXxOgyJHe3appcdWiLeWe8_fUo.roa (hash: h/W9WCGUyJYCh1KYoDWAiD2M4C6vtEkuFV/oHnqf2gY=)
                          8: VeHqLROfdS_jL-AwmtThhDT6_is.roa (hash: bthkP9gtLN/4aiiE6DC2cKIrlkuNIheKgwvQOnnXSN8=)
                          9: W1JjSi6wP4VlteM9wrn0kEH3z7A.crl (hash: Kfnt0j58b8Ex5UGjrgVtoZT1CMI1m8TLokXE39rEBJA=)
                          10: W2jeEkJFTO9bACNffoYk-rjSW8Q.roa (hash: m4jSnkSV7Yo4l9lkgzwkyhUhUusXlTKCtLHnJjH21k0=)
                          11: WmRvkZMy2Hjm5w-_D5nk-YDinqM.roa (hash: Fv3Rkdc6wkfFjBuPF/b3LY9M+HiVMJiwVC83qqA5+wA=)
                          12: XPEjOR9wfMRq3tc6C9A_BMhG_wo.roa (hash: GmkdYdin0NadahEWqjYD5B4MFdZI4+3bV+vumXZ+bRQ=)
                          13: a4QitiFkvHlyADqZPe61hq4QSJo.roa (hash: ZflxZn/wYuAC4bp1wfswm6AML7gKo+CZIuAoV9rW0yQ=)
                          14: bIT3IKoer-jZOwqexvz80un01Ag.roa (hash: nkHH/tm6q2tYfS61XXMRcKDcBRWbEe3yQxisNF7ABDo=)
                          15: rDwGu9ius0Iys44GbQFnwlznBbg.roa (hash: 6W6SljJLEnVIuQM1Wqui/VKmw47Cj6szip/P8PaEH1A=)
                          16: sJ-4q9BNKDWXPK7vQlMwv90EyeQ.roa (hash: 7N9kbNVvBQfZIqrrEUMiDoe5nVwGSES4cx8TzWr1eCA=)
                          17: xONbiFdv7WgdPOzaSwULCD22ElY.roa (hash: Ekujh3YjMgKH3iZJ1wo4eY8GMUVTfT7Ex6aMEVCo3TE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:bc:67:08:60:8a:6f:49:52:aa:38:c9:54:6a:d1:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0
        Validity
            Not Before: Sep 26 22:01:01 2026 GMT
            Not After : Sep 27 22:01:01 2026 GMT
        Subject: CN=6aa72dbc3575e659e8b3c33d5c4cdcaf3f1ae7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c9:d1:5f:d5:10:3b:6d:2f:51:dc:cb:8b:1a:
                    f7:f8:0c:83:94:01:0c:32:d1:7f:8c:87:a5:04:a3:
                    e3:6d:77:d0:15:da:80:69:09:7b:4a:8f:d6:26:bb:
                    9c:13:a0:c5:08:2d:50:29:df:9c:6e:61:f8:ac:f9:
                    47:b6:8e:49:0c:68:e1:3a:fd:b4:14:97:8e:bc:37:
                    84:4e:38:28:69:03:47:cb:94:3e:49:f0:7f:16:43:
                    ae:1e:bd:50:a3:e2:d5:63:c6:b6:b0:e1:47:0c:0e:
                    a6:50:be:e4:37:22:2d:b9:da:0a:22:c3:03:1c:bc:
                    ec:41:0e:3f:71:1e:a8:30:7a:35:84:67:7d:28:f3:
                    28:23:58:3d:e4:95:d4:a5:e3:cb:51:65:65:fa:57:
                    c0:73:be:e5:05:48:f9:1b:44:d2:55:19:aa:07:e1:
                    92:5e:f2:21:d2:fd:08:f5:dd:16:48:1b:f4:03:98:
                    6d:49:4a:23:5e:a5:ad:2d:13:6d:a5:90:0c:97:b6:
                    ce:69:ec:c9:93:aa:a4:14:7b:63:c8:25:ce:4e:65:
                    f2:f6:b7:d4:49:0f:58:da:2e:f2:0f:fb:ac:cb:4b:
                    df:96:33:6f:fb:51:fc:80:45:0d:60:83:c6:05:e6:
                    1e:21:62:e7:be:ea:bd:50:85:8e:44:9c:9b:75:ae:
                    2e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A7:2D:BC:35:75:E6:59:E8:B3:C3:3D:5C:4C:DC:AF:3F:1A:E7:EF
            X509v3 Authority Key Identifier:
                keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:0d:f5:56:4c:d5:90:c5:2f:33:d1:0d:6f:9e:2a:f3:7b:17:
         d1:dd:8b:af:d0:d1:3b:ad:d9:12:a9:e9:da:c8:ef:e5:50:50:
         ed:06:23:7b:c7:a8:c4:74:85:80:05:53:24:45:71:29:e1:1c:
         ce:df:83:4f:71:5f:eb:76:70:ff:0f:5a:a5:82:f6:31:a7:8b:
         13:7b:67:7b:44:14:83:08:16:7c:73:6b:4b:7a:e9:4f:56:9d:
         8c:3f:90:cb:cb:80:98:fc:d5:43:2c:fc:db:1e:4e:02:11:0f:
         8f:8b:03:8b:e8:37:fe:40:05:fc:c4:d1:29:c7:d0:61:4a:31:
         24:bc:36:6f:39:0c:b0:fb:39:08:f8:9b:a3:0c:13:5f:1e:85:
         5b:58:df:03:2a:b2:cd:1b:97:ee:a4:32:9d:2a:5d:82:92:c4:
         64:09:b5:cc:f7:20:a9:ce:b3:79:c4:1e:14:48:99:53:a2:b5:
         7f:40:c3:ba:89:ee:83:14:fe:db:4f:26:2d:26:18:e6:b4:e2:
         f8:1a:2d:d1:18:d5:28:2d:17:8a:44:2d:c1:00:83:88:16:b8:
         8a:06:0b:7f:82:cd:a0:29:e4:1a:d6:43:e2:8e:b2:c1:cb:cc:
         a8:67:5c:6f:00:26:c6:91:1d:09:d1:9b:97:3f:53:27:a6:6b:
         5c:06:d0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:09:22 2026 by rpki-client