Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
File:                     Szx5xlXI4rA6V-A78tED6BdUy-I.mft (raw, json)
Hash identifier:          xtbA2llRWnVKErlUHxBl14RmPkWHh7+/vUhZYdwyLlM=
Subject key identifier:   02:92:F0:F3:03:08:42:55:BB:B8:EC:ED:64:2D:7D:8D:3B:75:74:35
Authority key identifier: 4B:3C:79:C6:55:C8:E2:B0:3A:57:E0:3B:F2:D1:03:E8:17:54:CB:E2
Certificate issuer:       /CN=4b3c79c655c8e2b03a57e03bf2d103e81754cbe2
Certificate serial:       01A0EC2EB2D7D86DDA5C94AE50A0D522A8B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
Manifest number:          014F
Signing time:             Tue 29 Sep 2026 08:01:18 +0000
Manifest this update:     Tue 29 Sep 2026 08:01:18 +0000
Manifest next update:     Wed 30 Sep 2026 08:01:18 +0000
Files and hashes:         1: PI0F8x9CPayW399Vvg4Zxhy5Mzo.asa (hash: HDptImqZldK6ZOWVfpx8UrKAynGnTippOHJQCxKk/aY=)
                          2: Szx5xlXI4rA6V-A78tED6BdUy-I.crl (hash: 4FZLcl2QqbxGi597luxvMckC7DIXhChwSmu0mwCTQZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:2e:b2:d7:d8:6d:da:5c:94:ae:50:a0:d5:22:a8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b3c79c655c8e2b03a57e03bf2d103e81754cbe2
        Validity
            Not Before: Sep 29 08:01:18 2026 GMT
            Not After : Sep 30 08:01:18 2026 GMT
        Subject: CN=0292f0f303084255bbb8eced642d7d8d3b757435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:36:ca:65:d3:40:07:06:f3:9a:e0:2b:c9:3f:
                    e2:47:7d:84:47:25:d0:b6:39:79:1f:a0:17:ff:97:
                    9a:57:e7:1c:50:47:88:0b:e8:83:9c:fe:e4:bb:2a:
                    c8:93:00:79:d6:45:e4:63:5a:95:c4:83:e3:ed:ae:
                    1e:b9:6b:4d:c9:80:b6:39:81:01:7e:57:71:71:32:
                    60:a6:0b:64:4e:65:08:35:11:f7:f9:e1:fc:62:41:
                    64:dd:5c:e8:23:0e:00:2a:44:2f:ed:a4:1b:52:03:
                    9b:50:7e:7d:e1:40:22:aa:ea:31:a3:21:4c:bd:78:
                    19:20:f6:33:fa:f5:a9:76:39:44:e1:4d:2b:4f:09:
                    c5:7c:a3:1f:40:1c:aa:74:10:bb:9e:f5:9d:d6:95:
                    64:26:a9:9e:5b:98:0f:e2:42:4a:52:80:1f:77:b6:
                    71:3a:82:40:5d:aa:28:4e:00:ee:b0:3a:df:c8:71:
                    b6:b8:c9:08:85:e2:f0:bd:63:a5:0f:19:93:d4:d5:
                    58:1b:57:59:91:61:76:f2:4a:16:5f:fb:3a:e9:b2:
                    db:38:da:f8:e3:06:2c:44:b1:95:b9:64:a4:59:8a:
                    6a:b9:ad:89:a3:91:87:5f:22:f1:46:5f:83:d6:ff:
                    d8:05:81:8e:39:4a:e0:c7:4d:4b:f3:06:a6:57:77:
                    5e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:92:F0:F3:03:08:42:55:BB:B8:EC:ED:64:2D:7D:8D:3B:75:74:35
            X509v3 Authority Key Identifier:
                keyid:4B:3C:79:C6:55:C8:E2:B0:3A:57:E0:3B:F2:D1:03:E8:17:54:CB:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Szx5xlXI4rA6V-A78tED6BdUy-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/09634a-13b0-47d7-8ffe-3d4989f78ac7/1/Szx5xlXI4rA6V-A78tED6BdUy-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:01:bb:38:bc:76:1e:e0:84:75:a8:18:32:bc:43:4a:1a:0d:
         57:8f:6d:1f:3b:30:ef:ed:bc:fc:30:75:47:45:a2:4f:d2:ee:
         7c:7a:7e:56:a0:b5:c7:de:4b:9f:12:b8:3a:e1:97:97:77:3c:
         c2:46:35:bb:79:a3:12:1d:06:c9:de:8e:d1:d6:71:59:ea:8c:
         6f:ab:86:cd:7a:2b:41:51:b6:c2:b7:85:51:6e:ce:3a:c2:e1:
         85:fe:f9:64:26:40:f1:2a:5e:6c:ea:0e:79:47:3a:25:8e:e6:
         6f:2a:ab:7f:e1:d9:d1:97:97:8c:55:92:e8:d9:d1:d2:4f:a5:
         08:91:68:0f:7e:1c:01:45:7b:73:b1:46:ad:5e:47:d5:32:e8:
         53:4b:55:5e:ef:9d:6d:5a:f0:93:98:7b:4f:06:a4:c6:10:48:
         8d:53:fa:5c:72:e4:27:86:46:bd:b0:7f:32:cf:f8:ff:a3:4a:
         68:65:e3:57:96:b4:80:1f:04:ee:ea:20:a8:b0:9d:2f:35:5f:
         c8:5b:44:ed:73:46:40:5b:ad:99:6c:81:ef:03:eb:03:5f:25:
         63:e2:20:f7:6f:f2:31:01:de:90:7e:22:69:4c:20:1e:13:58:
         ba:de:4b:73:d5:ec:34:e1:a0:5a:ec:e6:d9:40:5a:5a:c4:dd:
         56:be:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:39:53 2026 by rpki-client