Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
File:                     mWchgxr7izgwe0n1ue5ikq0eWFA.mft (raw, json)
Hash identifier:          nTmk4cXIfxZeN3QZ02TqBzl/+hf/+cfhHDR+n3qzyXs=
Subject key identifier:   5E:6A:A0:BC:79:B3:DB:85:65:BC:DC:04:BC:E9:70:C4:19:AD:0F:65
Authority key identifier: 99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50
Certificate issuer:       /CN=996721831afb8b38307b49f5b9ee6292ad1e5850
Certificate serial:       01A0E106E8449FBFBFD89885CF67EF6A6A39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
Manifest number:          1A97
Signing time:             Sun 27 Sep 2026 04:02:01 +0000
Manifest this update:     Sun 27 Sep 2026 04:02:01 +0000
Manifest next update:     Mon 28 Sep 2026 04:02:01 +0000
Files and hashes:         1: VE_LZ5OEVy7OtiwnakNbQlXOUx8.roa (hash: nZT5dviNLBhgGj5zg6mzO60GRglFXHbvUdAHc/xzhdo=)
                          2: VGE1McKV1fObE1-qcqalIcbniqM.roa (hash: eZC03RfnlRHK+KPGMyItH5RKFEP6Dc/vQtXvyRoCh6I=)
                          3: m72BlK4pK3nz4quwny73cERWUUU.roa (hash: 3sQVvJAEO+cZVJVe28TC5M0aUTp2A0mSxPgJfwLQboM=)
                          4: mWchgxr7izgwe0n1ue5ikq0eWFA.crl (hash: s+in1e6riRpKIIuHzn746bbMZmxJ1hGg3TOoqZPwxWw=)
                          5: nbN6QTJFxRMXWB7BZSEIH-SMH3g.roa (hash: pyiyGBs40xwh8+LBH6NUqQq8ar9YtwxRrDXfuF15LbA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:06:e8:44:9f:bf:bf:d8:98:85:cf:67:ef:6a:6a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=996721831afb8b38307b49f5b9ee6292ad1e5850
        Validity
            Not Before: Sep 27 04:02:01 2026 GMT
            Not After : Sep 28 04:02:01 2026 GMT
        Subject: CN=5e6aa0bc79b3db8565bcdc04bce970c419ad0f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7a:63:93:86:05:41:41:c2:85:93:c3:e2:b8:
                    b3:f5:f9:4e:b0:ab:23:73:8e:2b:a7:c1:61:bd:af:
                    37:f7:3f:12:51:0d:40:1e:d6:0f:64:7c:01:fd:dd:
                    c3:47:3f:1f:54:dd:7e:65:7e:a2:77:25:cf:bf:93:
                    59:95:42:a0:27:04:aa:7c:b3:c4:4e:fe:7c:90:d5:
                    8a:c4:e5:41:3f:ae:b4:1d:bf:b1:25:7f:c2:9d:89:
                    ff:73:f7:4f:36:33:fc:6c:05:06:03:67:63:46:36:
                    02:2c:d6:61:ad:bd:2c:02:1f:42:b0:99:6a:ed:2f:
                    ac:89:2a:31:30:1b:60:09:1f:e2:ec:ee:e9:1a:9f:
                    26:f9:fe:26:67:9e:c8:09:da:ce:eb:62:a1:25:d8:
                    6f:38:65:aa:ba:ff:b1:5c:08:5f:80:ca:23:12:0c:
                    8f:9a:fd:94:b7:be:6b:1b:8c:df:67:52:2a:70:53:
                    d0:5a:76:c3:f7:5c:d4:18:df:59:1f:dc:7f:8a:d0:
                    dc:94:da:b8:0c:83:c3:7d:4d:24:38:c7:f6:a1:6b:
                    0e:4c:62:c6:20:8a:99:1f:93:10:2d:49:45:10:9d:
                    96:ec:37:33:4f:60:3d:8e:aa:f1:fe:ec:3f:29:0a:
                    e3:e2:64:c8:55:4d:be:54:d9:67:fe:aa:2c:73:9c:
                    60:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6A:A0:BC:79:B3:DB:85:65:BC:DC:04:BC:E9:70:C4:19:AD:0F:65
            X509v3 Authority Key Identifier:
                keyid:99:67:21:83:1A:FB:8B:38:30:7B:49:F5:B9:EE:62:92:AD:1E:58:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mWchgxr7izgwe0n1ue5ikq0eWFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/1c1eb2-1f65-4f71-8b32-b4bfe456dde0/1/mWchgxr7izgwe0n1ue5ikq0eWFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:39:d3:61:90:a7:1c:d0:a6:30:af:53:a9:6a:ce:56:21:5c:
         0a:80:d0:9d:f0:51:4f:e0:61:c8:0e:46:0a:64:a2:8c:e6:05:
         12:29:dc:4c:27:04:fd:cb:3c:c9:c7:91:53:2e:b4:d2:46:59:
         b8:81:a4:c4:b7:76:3b:54:1f:0a:c3:7b:6a:01:b4:11:50:0a:
         89:aa:8d:dd:67:50:45:68:5a:69:64:96:3a:3f:c0:52:01:d6:
         60:ab:08:9d:59:c2:fb:7a:b7:bf:b9:16:b2:dc:89:8a:b4:bd:
         f6:98:7e:4c:0e:8c:cb:fc:36:2a:f9:58:a4:4e:c1:09:e1:b8:
         c4:14:69:31:9c:48:40:56:09:2a:58:b1:68:c4:f8:1c:60:dc:
         cb:01:f4:ac:bc:e1:87:8b:6e:28:f4:b7:85:66:96:16:a2:61:
         3e:75:db:4e:da:b2:6d:c1:14:64:5b:94:d4:03:47:bf:f9:28:
         7b:e5:28:0a:65:39:d2:82:36:dc:ce:34:a5:02:2a:8d:1d:ac:
         15:8a:a5:8c:7e:cf:31:18:a5:39:a0:84:1c:b0:1f:87:c0:e1:
         63:17:76:7a:dc:fb:f2:c4:01:88:46:a8:b8:4e:02:17:80:e6:
         18:8f:13:69:3b:cc:da:80:a6:9a:93:d7:31:3c:24:e8:4e:d6:
         97:50:08:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:04:48 2026 by rpki-client