Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File:                     D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier:          49JjWDNOnWxBCl2hZT5pflVeBahYLOYpXdLeP6/KOds=
Subject key identifier:   2B:61:36:A9:97:89:C8:F0:24:55:77:15:FF:BF:D0:9E:B2:C3:CC:AB
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer:       /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial:       01A0E362E7B4672009F172AAE0E2C5B4E31F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number:          1975
Signing time:             Sun 27 Sep 2026 15:01:44 +0000
Manifest this update:     Sun 27 Sep 2026 15:01:44 +0000
Manifest next update:     Mon 28 Sep 2026 15:01:44 +0000
Files and hashes:         1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: dmHVFPTLBnh0oX56Uj8l7x4bcbSwU+Bxa25LUhL1m3g=)
                          2: Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa (hash: 8IHzguHfDhF9TOnq36/iF4YhTgkRtVGmhvaPUXHm58k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:62:e7:b4:67:20:09:f1:72:aa:e0:e2:c5:b4:e3:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
        Validity
            Not Before: Sep 27 15:01:44 2026 GMT
            Not After : Sep 28 15:01:44 2026 GMT
        Subject: CN=2b6136a99789c8f024557715ffbfd09eb2c3ccab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4b:69:4c:ae:a2:28:8b:e2:ad:b8:0f:f7:b3:
                    ec:6d:48:41:06:1a:5b:cc:d3:bd:af:c6:11:f2:4e:
                    65:17:4a:35:ee:45:f1:72:7c:5f:4c:30:d2:4d:65:
                    dc:c9:b0:11:2a:11:2e:e4:8d:74:86:ab:7d:32:b0:
                    e4:40:5d:89:07:11:25:b4:c0:91:63:03:e2:8c:a2:
                    9d:68:5c:5e:20:9e:cc:d9:77:54:22:70:5a:ad:df:
                    71:4b:94:ad:72:14:57:71:bb:72:67:cf:90:12:d7:
                    b4:ae:ae:ef:b9:4f:06:ec:c7:f8:c0:47:a5:e1:ce:
                    d2:a2:da:39:b0:e3:6b:08:20:10:10:51:ed:b2:de:
                    42:e7:4c:20:93:be:7b:c1:37:b1:7b:46:91:2a:b3:
                    99:93:0b:69:e1:6c:c7:6d:1b:2f:68:2e:ce:e4:11:
                    ce:a4:b2:c9:2c:aa:f5:bf:9f:3b:06:ca:fa:99:07:
                    99:dc:63:a5:01:18:eb:dc:f4:fb:6f:28:e7:82:1d:
                    4c:03:b3:88:ed:85:f2:3c:75:ae:4a:ab:5d:f6:c6:
                    c5:9b:a3:45:2f:5c:bd:ce:5f:d7:0c:b6:25:c9:6f:
                    53:40:d0:dc:c5:8b:d4:50:91:c5:ac:0b:44:60:77:
                    81:34:34:8c:7f:a2:a6:46:bf:8a:7a:16:41:2b:20:
                    ea:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:61:36:A9:97:89:C8:F0:24:55:77:15:FF:BF:D0:9E:B2:C3:CC:AB
            X509v3 Authority Key Identifier:
                keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:83:41:b8:f7:52:c9:d4:da:f2:b3:5b:41:c0:4a:55:d2:4c:
         9e:e5:47:c5:35:68:2b:b3:f3:b7:7a:dc:cb:7c:4e:85:f4:85:
         7b:8b:77:23:17:7c:04:4b:74:21:c4:a2:04:37:be:c1:2a:c2:
         66:c3:6a:e3:33:51:ae:4e:4f:d3:44:1e:4e:d0:1f:85:72:e7:
         78:a1:e9:b2:f2:e5:f3:2c:e9:fd:aa:fa:95:fc:2a:2d:67:bd:
         02:f6:fa:fd:be:b2:fa:7c:e3:0b:fc:ed:74:02:fa:80:07:bb:
         52:38:18:75:09:4f:51:f0:8d:49:12:49:ef:7c:f4:4c:34:2a:
         94:d6:93:c7:53:ea:e8:b3:48:35:dd:18:40:9d:18:03:67:b7:
         c9:e2:e1:89:42:c5:76:14:37:7b:13:35:44:8b:ee:0a:e8:b9:
         14:5d:77:b0:fb:34:d1:88:ac:86:ee:29:df:79:7d:a9:b0:f1:
         74:17:16:e6:ce:0c:c2:e1:30:5f:16:e2:5d:60:f1:7a:65:cf:
         c2:7f:dc:5b:a4:5c:c2:4d:1b:83:6a:fc:ee:d9:97:02:88:f2:
         00:38:a2:45:22:3c:7f:0b:de:62:be:03:f5:57:66:18:6f:b1:
         c2:50:56:5e:4c:98:fc:24:93:a8:68:76:5f:2b:4f:47:e7:c3:
         01:03:8f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:36:29 2026 by rpki-client