Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
File:                     cGdFrZI1PaioDLLg0inWjC71PbI.mft (raw, json)
Hash identifier:          iloXvi0QXc4fywV8s9oWMsrJHlgaORmclqF40rjMYgk=
Subject key identifier:   30:62:E8:A8:42:06:72:64:29:AF:60:93:68:86:66:44:BD:7E:28:B9
Authority key identifier: 70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2
Certificate issuer:       /CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
Certificate serial:       01A0CDEC602E094E08FD2A8AB4D6F48FAEA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
Manifest number:          04C0
Signing time:             Wed 23 Sep 2026 11:00:15 +0000
Manifest this update:     Wed 23 Sep 2026 11:00:15 +0000
Manifest next update:     Thu 24 Sep 2026 11:00:15 +0000
Files and hashes:         1: DAwWe5rLh-aQBzylMgXPEafT094.roa (hash: ddaH0Ll0Vx1InrKWW5z1h6HGqMMp7orTZW95H1Bjof4=)
                          2: DtrKUjuwAR9N9lv5bAs2nJDm_vk.roa (hash: IKTadbiUFg9tzOWRHQMu+tnQ83zzuuvO8UT29QQwFPo=)
                          3: FaeUz3uKy-mLZtaPCWtQSmRkAfs.roa (hash: GGkJmAABe4TcLrNWBtfMtwloTnLFtsdf5JSihhg5Xfs=)
                          4: cGdFrZI1PaioDLLg0inWjC71PbI.crl (hash: 4gpRnSu74Krs0moa/HN3uyZPDtSt4ja7yB5q3jjNlGg=)
                          5: wjzuvsYsPDDKpMgBwHTQ9poihCY.roa (hash: l4MikOI2hGh4JANCfkUoAdXltlywTvqDvN7gXfHekr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:ec:60:2e:09:4e:08:fd:2a:8a:b4:d6:f4:8f:ae:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=706745ad92353da8a80cb2e0d229d68c2ef53db2
        Validity
            Not Before: Sep 23 11:00:15 2026 GMT
            Not After : Sep 24 11:00:15 2026 GMT
        Subject: CN=3062e8a84206726429af609368866644bd7e28b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ba:a4:bc:59:aa:3f:96:57:5f:43:cb:3f:6a:
                    1e:d6:38:38:5f:30:4a:8b:4b:6b:d3:fa:4a:b8:b5:
                    5f:de:66:80:a0:e2:f0:d0:7b:41:e7:14:37:dd:fb:
                    bb:aa:c9:0c:6b:93:5b:80:78:c6:db:2e:74:d0:3c:
                    37:1a:2a:ac:5a:94:97:33:cd:e0:cb:8e:2d:10:c6:
                    46:84:6c:fb:b4:ff:39:79:73:e8:41:6e:23:ea:4d:
                    34:89:5d:e3:03:e2:f0:75:3a:a8:f8:2a:67:26:aa:
                    65:04:6b:f8:94:ac:d1:a5:f0:b1:28:e1:73:f2:7e:
                    98:27:ab:2f:5d:4a:51:0a:f9:a8:3b:1e:18:66:03:
                    48:e8:58:98:48:6f:35:ac:56:45:04:28:54:10:c5:
                    b1:f0:9e:c4:56:df:32:da:48:4c:7d:17:41:46:23:
                    94:32:dd:ae:a3:50:e9:d6:a0:e9:08:62:0a:98:e9:
                    72:ef:46:69:0d:f5:65:63:60:a3:c6:4e:84:63:55:
                    77:07:e9:8c:9b:d6:ae:99:5b:62:2d:61:72:0b:34:
                    3d:15:39:22:d3:19:a4:84:1a:2c:79:d3:06:ea:0b:
                    43:96:a3:97:0d:7e:94:3f:d9:71:84:41:29:4c:6e:
                    b1:c0:4f:e6:c4:00:bb:13:5a:f3:fd:da:18:0f:92:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:62:E8:A8:42:06:72:64:29:AF:60:93:68:86:66:44:BD:7E:28:B9
            X509v3 Authority Key Identifier:
                keyid:70:67:45:AD:92:35:3D:A8:A8:0C:B2:E0:D2:29:D6:8C:2E:F5:3D:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cGdFrZI1PaioDLLg0inWjC71PbI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d0abd0-b114-4e3a-ae59-e21763c672fa/1/cGdFrZI1PaioDLLg0inWjC71PbI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:25:94:52:06:15:73:ce:9d:c4:75:b7:4e:43:02:7c:52:d9:
         ee:54:04:f9:82:65:b4:95:c8:fd:2f:91:d4:b0:bd:d7:16:cd:
         ab:3d:8f:e3:5c:1e:f3:56:3f:af:95:17:16:8d:a0:69:a8:21:
         7d:6b:03:de:4d:36:69:04:3e:64:00:ed:94:9c:10:a3:14:cc:
         93:cb:31:ec:5a:7a:b0:71:a3:61:53:da:fa:f2:42:18:83:5d:
         ca:3d:2e:21:21:a4:05:66:7f:d8:bc:30:fc:d8:e0:9c:b0:2d:
         0f:62:0b:1f:46:44:8a:39:66:c4:7b:7f:6c:92:81:c9:d2:4c:
         70:a0:fb:30:5e:7f:8f:e7:31:1e:98:db:2a:36:ea:d0:ee:b0:
         c0:24:ba:2c:a1:02:c9:38:e0:7e:e2:63:be:b7:58:b6:ec:3d:
         2f:c8:a6:99:95:0e:84:38:fd:61:0a:31:3f:2c:02:3a:56:3c:
         e2:ed:7d:ec:d5:cf:b6:b6:2f:d9:14:1e:af:5f:92:b8:20:6a:
         cb:15:5f:f2:4c:9e:10:a8:43:12:98:c8:6f:d3:2e:40:2c:f4:
         f6:37:4e:38:78:18:f9:e3:0b:b0:cb:fa:cc:fb:4e:11:71:e7:
         74:c2:88:ab:ff:a8:bf:3a:f8:2c:67:08:a2:d6:d3:6d:bc:a2:
         e0:8c:f1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:16:34 2026 by rpki-client