Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
File:                     Rych442ItIUuLgmCd6L7IKsMgbM.mft (raw, json)
Hash identifier:          +g0itXfVyZC0ZOrp/FOZS7/KP+2F5AgaqXTJDbr4Ngs=
Subject key identifier:   B6:52:9A:5D:D8:3A:3B:83:AD:CB:CF:5A:B1:24:09:9E:43:37:AC:B5
Authority key identifier: 47:27:21:E3:8D:88:B4:85:2E:2E:09:82:77:A2:FB:20:AB:0C:81:B3
Certificate issuer:       /CN=472721e38d88b4852e2e098277a2fb20ab0c81b3
Certificate serial:       01A0DD9798A1670211B0F36CE7A25170E3B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
Manifest number:          EC
Signing time:             Sat 26 Sep 2026 12:01:34 +0000
Manifest this update:     Sat 26 Sep 2026 12:01:34 +0000
Manifest next update:     Sun 27 Sep 2026 12:01:34 +0000
Files and hashes:         1: Rych442ItIUuLgmCd6L7IKsMgbM.crl (hash: UBmT0EoMq73EfJQPcakPM/UHq9zL+x/QleYFAKQSeEs=)
                          2: Sh6wUutUQFoAhZbyc9mJ5TkoVys.roa (hash: jlA4qWWIetKLdd6pQUmLfLeRwFINjNkS5gKXoUmiZho=)
                          3: ZsYV7B7rXiV9Sd4d1WORwRKLc0M.roa (hash: ZZC9xuQEACqHh/6sNaCAxnay+gwuPiQeRofUXPKfCak=)
                          4: ndXtEXhaQsCV3FdMrXZs6wJq0fw.roa (hash: AhakacNqL0L3QNvTgK4DkPjXfP1L2yY1VMxHtjyhGWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:97:98:a1:67:02:11:b0:f3:6c:e7:a2:51:70:e3:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472721e38d88b4852e2e098277a2fb20ab0c81b3
        Validity
            Not Before: Sep 26 12:01:34 2026 GMT
            Not After : Sep 27 12:01:34 2026 GMT
        Subject: CN=b6529a5dd83a3b83adcbcf5ab124099e4337acb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:12:07:3b:e9:4a:1f:4a:ab:62:c0:3b:d0:37:
                    35:4f:0d:bf:de:02:da:4c:da:d8:93:d4:bf:4d:71:
                    42:1a:14:aa:03:23:a9:fa:e9:6f:06:a6:24:f5:78:
                    c2:94:28:5d:73:53:9d:d2:8e:4d:79:9e:83:af:5f:
                    08:1b:ba:e7:03:dc:3d:b7:4e:a7:b0:21:5e:9e:cb:
                    94:f8:fd:ac:78:34:2b:e3:19:0b:74:a4:50:a5:14:
                    ca:ae:ba:91:e3:79:aa:b4:79:24:31:ad:00:1b:3b:
                    f8:27:e4:7d:bf:14:b9:dc:94:fa:f1:a6:36:1f:2b:
                    63:27:80:5c:55:1e:71:b8:66:cf:73:70:ad:24:82:
                    19:23:1f:48:d1:3c:46:37:c8:8f:75:81:cc:f8:23:
                    98:7b:3e:d0:23:32:96:79:34:3a:38:31:5a:98:f5:
                    b3:1f:92:0b:8d:48:c9:01:be:d5:9d:eb:53:f7:57:
                    e5:18:dc:34:a9:fd:3c:5f:7d:8e:f9:89:d8:10:4c:
                    79:68:06:3c:b4:78:1d:6c:0d:78:a6:c2:4a:01:30:
                    d8:e5:f2:89:76:b2:38:03:11:bd:87:37:d1:a0:a0:
                    3b:64:03:5a:f4:14:be:8e:c5:05:9a:74:e7:9a:a5:
                    0e:a0:9b:6a:e7:88:ee:d5:65:70:bf:df:47:99:54:
                    b8:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:52:9A:5D:D8:3A:3B:83:AD:CB:CF:5A:B1:24:09:9E:43:37:AC:B5
            X509v3 Authority Key Identifier:
                keyid:47:27:21:E3:8D:88:B4:85:2E:2E:09:82:77:A2:FB:20:AB:0C:81:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:d4:f6:24:5c:9e:0d:95:7f:9d:a1:b5:5b:6e:93:e2:79:7a:
         e4:68:c4:40:1e:4e:91:ca:91:44:8e:1a:98:33:76:5b:1c:23:
         e0:0b:02:53:54:40:2b:30:45:83:2d:7e:bc:4c:7b:c3:94:8a:
         e2:2b:47:74:7f:fb:23:11:13:88:ac:a2:f2:a4:f5:0f:e1:09:
         b3:5b:7a:cc:78:58:1f:a1:ac:08:c0:70:32:43:13:34:be:98:
         9c:87:8d:45:12:26:96:a5:bc:3e:6f:19:04:7f:ad:1b:49:2d:
         92:e7:6d:f6:1a:49:d8:d4:36:c1:95:20:7c:4a:96:91:e5:a0:
         c5:44:06:fe:be:7a:2d:67:40:ae:34:8e:1c:06:ae:2f:6d:e2:
         85:96:1c:a9:d2:dd:f2:8e:fc:86:d3:ab:b1:6f:c0:87:0b:eb:
         12:57:05:b3:3b:db:02:81:17:dc:f9:58:b5:8e:1f:7b:17:c3:
         f6:b2:11:51:39:f0:9c:4a:30:bf:38:48:89:07:de:72:b4:89:
         da:73:c1:a0:85:f5:74:38:f9:6d:22:30:0e:6d:c7:69:da:95:
         07:96:3e:26:35:5d:f4:77:19:3c:16:97:60:51:f8:ca:db:da:
         64:a7:ad:40:53:f1:b3:b8:81:6f:66:76:3b:eb:30:71:cf:f3:
         0e:de:23:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:41:48 2026 by rpki-client