Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
File:                     sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json)
Hash identifier:          WS7nsS0mGrPxgB23Upj1w1ODDjeRqOjug6WoAbdaVRg=
Subject key identifier:   8A:36:23:A1:8F:24:ED:FA:CA:BA:08:D2:EC:1C:17:A7:EB:A7:2D:95
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Certificate issuer:       /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial:       01A0D426966E456AE63DA83883AD71109D39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
Manifest number:          1672
Signing time:             Thu 24 Sep 2026 16:01:33 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:33 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:33 +0000
Files and hashes:         1: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=)
                          2: G_q5f4vw9sXuTqx5koUR1CtdghA.roa (hash: /DXlK/XppxG3EnWKLZh5jMXkLtlLrmR+JVAULY2Fmuw=)
                          3: Kh4_VoB6YEgaSwRCsMKIhi6qzp4.roa (hash: e0GnvRoQCozfmziXi7HSJRfK79f9SZF+NnjU+2fBto0=)
                          4: VbMi_wHP2Osb2Lj2_Em7nJaGNqg.roa (hash: DXcUvI/zDgzBNbnxDQ9BXaRP7H2Z8Bv9bfXDaGGxiyQ=)
                          5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=)
                          6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=)
                          7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=)
                          8: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=)
                          9: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=)
                          10: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=)
                          11: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=)
                          12: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=)
                          13: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: JqLuZ9VU8+dGz5TYyI3lGIVmeIS+simjC9MuhZbYOgg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:96:6e:45:6a:e6:3d:a8:38:83:ad:71:10:9d:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
        Validity
            Not Before: Sep 24 16:01:33 2026 GMT
            Not After : Sep 25 16:01:33 2026 GMT
        Subject: CN=8a3623a18f24edfacaba08d2ec1c17a7eba72d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e2:9c:be:e9:c6:50:74:3c:2a:27:ee:d9:47:
                    bc:60:13:57:5d:e8:d4:12:ab:28:03:ac:26:ec:ea:
                    44:9d:eb:4f:52:f2:e4:58:52:a1:83:08:aa:c3:09:
                    81:c3:3c:db:4f:6f:c1:2b:6f:00:7a:94:f3:b1:1f:
                    13:d3:27:73:d1:9b:3d:65:c8:b7:0f:d4:a0:4c:c8:
                    e0:40:ff:a2:ca:52:7d:c5:77:75:6e:00:4b:dc:ab:
                    b8:36:0c:eb:83:5c:f0:e7:b2:c6:4f:62:d5:07:40:
                    a8:45:86:3d:46:97:fb:5e:fe:2c:6e:15:50:38:20:
                    5b:04:4b:70:81:0c:4c:a4:90:5b:28:22:01:02:35:
                    47:d5:47:fc:9f:93:95:0e:aa:f2:ed:14:1f:0f:b2:
                    44:2a:32:16:66:ae:ee:85:86:0e:3b:2b:d3:3c:69:
                    f0:66:5a:10:2c:58:90:fb:85:74:00:80:ef:48:ee:
                    42:16:75:e4:56:b4:b9:37:1c:92:43:74:f1:f7:1d:
                    d4:49:30:93:c2:aa:b5:70:68:92:e8:b9:2e:ee:d2:
                    cb:e7:ce:47:c7:1a:36:07:f6:ef:7b:71:0c:66:b9:
                    58:ca:42:1e:d3:5c:87:52:8d:bc:c9:00:1a:88:d7:
                    e7:9d:ba:ed:da:bd:48:20:a7:f1:ca:ae:27:b2:95:
                    b7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:36:23:A1:8F:24:ED:FA:CA:BA:08:D2:EC:1C:17:A7:EB:A7:2D:95
            X509v3 Authority Key Identifier:
                keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:fb:51:f4:dc:f5:51:7a:09:9b:01:68:7d:45:42:2b:71:68:
         84:d9:20:dc:9a:b5:39:29:f3:a6:80:4b:25:58:f2:2b:ce:80:
         82:56:ee:d5:9a:d5:91:f8:b2:4c:3b:1d:3c:1e:14:72:6a:05:
         ba:1a:47:c5:85:49:fd:6c:ca:da:cf:74:87:f4:c5:15:9f:db:
         cd:ee:13:9a:f3:a6:42:30:f6:d2:bc:1c:35:1a:68:c1:21:56:
         da:de:af:74:d2:d0:90:7b:ab:ca:7b:fb:7d:7f:b8:f9:8f:0d:
         24:fa:9a:fa:9a:c8:30:51:c9:ae:28:0d:80:85:97:4c:77:f5:
         d3:4a:4e:5a:52:12:10:be:12:94:43:35:74:0d:b3:34:db:cf:
         8c:84:6b:ae:d0:1b:45:e3:89:71:b3:4f:c3:44:a9:72:88:f5:
         23:dc:ac:89:a7:3b:93:c5:7e:68:3f:17:d1:4d:f6:8e:82:fa:
         b2:8a:cb:b8:5a:3d:c6:32:d0:8c:f9:c7:a2:a3:3c:16:c8:c4:
         e9:ae:ca:70:e2:9e:8e:d5:a5:59:79:6d:65:9c:ef:22:b0:c5:
         b4:58:9d:25:86:5c:00:d9:69:34:e9:8f:21:52:e9:c1:b9:cf:
         26:ab:0f:ed:18:74:80:e5:69:0d:fe:35:08:68:86:40:ec:5a:
         ae:bd:3a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:22:21 2026 by rpki-client