Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
File:                     m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft (raw, json)
Hash identifier:          AqchYz/WLqr6sW/LnPiHuR2G0Begkvt/rwjY5++wunY=
Subject key identifier:   88:B4:42:1E:88:0F:AD:20:17:26:A1:67:F6:08:B4:F5:C2:69:EC:16
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Certificate issuer:       /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial:       01A0D15BEC1305F7417A46CC6498E8B20174
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
Manifest number:          1A70
Signing time:             Thu 24 Sep 2026 03:00:57 +0000
Manifest this update:     Thu 24 Sep 2026 03:00:57 +0000
Manifest next update:     Fri 25 Sep 2026 03:00:57 +0000
Files and hashes:         1: V2qGOcFGArZxDVhU93OkH7I5tZU.roa (hash: Qx/eCdyI2+oie6BNIEJmjhm2r/dBvwBAeJ6b6LuahQY=)
                          2: WrF8RZjbYEiiD0wqPqyzH7bojHg.roa (hash: SASBUcOpWPVFaGgXimL1oxrkpjPpL7o7jdrVHK+m9J4=)
                          3: gdPavX0yF7T7Wyp2RjBRxSe2U1s.roa (hash: YT5SSoDomUlfm9K9ESFgm6mAwjS+3bk9K/ENIJxNzus=)
                          4: m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl (hash: TzB0C2vv0b1pxysUvfHtk3SkVFCUvoyY3XmT/f30Qxs=)
                          5: m5yMYV4pBm1qpA0jit6hm99wXvM.roa (hash: 15C3Wvo3bxrDjbCmZIkVXncLYoGj5VtzpzHvZLU0GJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 03:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:5b:ec:13:05:f7:41:7a:46:cc:64:98:e8:b2:01:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
        Validity
            Not Before: Sep 24 03:00:57 2026 GMT
            Not After : Sep 25 03:00:57 2026 GMT
        Subject: CN=88b4421e880fad201726a167f608b4f5c269ec16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:81:91:b2:57:04:02:93:bf:37:63:e8:fe:
                    2e:4c:a6:e3:ca:53:1e:4c:9f:a3:e1:ea:7e:17:c7:
                    22:fb:4d:39:07:c0:70:b8:36:22:21:69:ca:62:5a:
                    c7:85:25:c2:32:3e:28:35:eb:49:23:54:d5:32:89:
                    89:2a:7f:28:8d:7b:17:47:a9:ba:47:c4:ed:e7:a3:
                    b8:87:a5:be:01:e0:77:7f:be:84:d4:fe:d5:78:8f:
                    c7:60:e9:7d:34:25:39:6f:da:a4:39:f8:52:4a:12:
                    d7:3e:99:d3:63:be:a7:fb:8e:c6:ec:1d:2a:8d:19:
                    d0:be:2b:62:0e:08:3e:d8:5d:c8:a2:3d:a9:3c:de:
                    32:63:26:d3:7f:a8:ea:41:19:17:69:f8:91:9d:f8:
                    f2:19:56:c2:64:d9:b2:b6:fe:75:9f:6c:80:3a:ec:
                    76:ab:33:f7:6b:22:d1:3d:6e:9b:ab:fc:54:72:83:
                    47:2b:01:1e:10:69:f0:ff:10:90:e5:cc:fc:f1:cf:
                    f9:e9:e9:a5:7f:d8:43:93:93:70:4c:21:f4:6e:52:
                    65:a0:39:71:79:3c:47:75:e0:7d:65:69:01:99:ad:
                    44:0e:80:fa:b6:6b:f0:6f:42:40:bf:47:b7:6b:64:
                    c5:bc:42:13:20:a2:d3:b4:2e:c7:0e:26:5a:76:f9:
                    1a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B4:42:1E:88:0F:AD:20:17:26:A1:67:F6:08:B4:F5:C2:69:EC:16
            X509v3 Authority Key Identifier:
                keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0c:d1:b6:9f:84:45:64:5e:c3:89:d5:25:95:f6:f2:e4:be:
         0a:a6:3d:b0:aa:59:ca:47:69:3e:9d:a6:53:aa:bf:08:c1:92:
         7f:20:78:40:f3:b2:10:a1:71:16:b5:0f:70:3b:5e:3e:0a:9f:
         55:7b:cc:78:39:24:ed:48:17:b3:21:40:87:32:bb:34:38:c7:
         ef:78:21:08:1d:39:bd:66:b0:63:5c:bc:6f:39:93:9f:70:3d:
         7e:43:6d:d7:b6:76:36:ce:8a:b8:c0:ff:29:53:fa:46:bb:8c:
         57:f4:7b:89:b5:63:bc:e0:fd:17:12:a8:b1:74:6a:29:ac:8c:
         1a:02:52:be:99:26:46:f2:43:2e:b5:40:08:b9:91:38:af:54:
         ff:02:c3:ca:eb:e2:32:7e:7d:d4:9e:68:3e:0e:67:43:f9:21:
         ca:a7:b0:5e:11:bb:97:40:eb:17:00:33:3a:7b:a6:56:10:c4:
         b2:f7:cb:37:a9:0b:99:02:da:63:5b:21:6f:7c:15:49:19:06:
         e0:7a:70:90:bf:3f:ed:77:99:f1:91:73:07:82:5d:a5:0b:e0:
         44:fe:ef:77:46:e0:c2:98:7d:3f:c0:0d:b9:8d:b2:74:72:50:
         c3:3f:e3:75:9f:2a:2c:15:aa:7c:ea:2a:13:bc:fd:49:28:c4:
         ae:9f:bb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:55:37 2026 by rpki-client