Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File:                     deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier:          nGy6rt4eGoqk3ouBCNBSdhkxaR54NBlmL06wuz+PAeM=
Subject key identifier:   F1:E6:17:46:C7:BC:C5:70:F0:67:E0:FD:6D:F2:BF:52:F6:EE:90:C5
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer:       /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial:       01A0DA284DC8D805EC881F35E9E391A8E246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number:          1A7C
Signing time:             Fri 25 Sep 2026 20:01:09 +0000
Manifest this update:     Fri 25 Sep 2026 20:01:09 +0000
Manifest next update:     Sat 26 Sep 2026 20:01:09 +0000
Files and hashes:         1: IKecYpJsyQoCMXhzFQm8qwezc6Q.roa (hash: AyBWoAIIW8QVXSZmJhv+7IehUMdxfXtLu4x8wnOD+Zo=)
                          2: Niz0xaF_UJO5sK6yvy3cMVF07nA.roa (hash: l65DOQXiJc/vw8R7nLx1kl+6tdgkTZuIaNzOHJm95Zo=)
                          3: WFTfI5tspGo4Ss0OCZAL-JGWw3k.roa (hash: ygHs+fWVxGVJnQRLr2/Xp2LQTIWtPolhwTvnQdcJhwg=)
                          4: Wrrx-J8255kGZZQo2Z_lshL_g94.roa (hash: RJwUNDcFiRkR23EOeiZYpldoRJTn3DHSqOqjyT0fbkQ=)
                          5: _RQQ5tVF2eFgG4W622rODRsfodw.roa (hash: tBfa8G6tBLKfwxInkvbCwg+hxTDjAv00awjpszqTn38=)
                          6: cKp2OZnMQ6gfuVdFBIpAAe-tLzE.roa (hash: mbO9zdERKtIWiDiD8x4e0EjpaANpcC71gfDZ39R7GH8=)
                          7: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: tPLkssn1epufyXHm/37vEBMD/CJB3ryVbUzlNEmsIn4=)
                          8: p6DmQaVdSnpO0418vCwa-3h5IyU.roa (hash: oLcwvSqddOQ2Ul0V7nGknSGHPS/F0P9Nc73tzvsSSQ4=)
                          9: tzZM7nYn-Yv6VuwdydL4arg8J2c.roa (hash: k/xFXsG2Cc7BkpgSwakJflKtWLf9ZeYiel+DCWnqX60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:28:4d:c8:d8:05:ec:88:1f:35:e9:e3:91:a8:e2:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
        Validity
            Not Before: Sep 25 20:01:09 2026 GMT
            Not After : Sep 26 20:01:09 2026 GMT
        Subject: CN=f1e61746c7bcc570f067e0fd6df2bf52f6ee90c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:ca:8f:10:8a:68:dc:06:99:a4:75:a9:84:
                    78:2f:36:61:90:97:f3:c7:7e:65:b0:d9:ab:6d:42:
                    ad:74:96:01:37:c7:f0:f3:83:04:8c:65:7a:a8:52:
                    27:2f:94:f9:40:a4:ee:5e:b6:8b:8a:5c:43:dd:1e:
                    62:35:44:22:83:ab:f6:85:32:14:a7:26:b2:7d:e8:
                    7f:52:b9:5b:b6:0a:22:f1:29:be:b5:ed:2f:36:0f:
                    3a:1d:7f:a1:3b:98:fe:c1:56:a7:ca:44:30:9c:9d:
                    ca:82:ae:22:cc:53:84:7b:84:4e:0c:88:3d:96:99:
                    52:1e:c4:41:7e:a1:47:8d:50:04:31:89:2e:6d:f4:
                    da:db:9e:4a:93:4f:fc:f4:cd:04:a4:34:75:d8:1a:
                    37:71:1f:5e:9b:94:47:03:d8:2a:af:5a:c7:7b:7b:
                    93:f8:41:1f:2a:e9:24:65:dd:22:cd:dc:23:7c:b9:
                    d3:4c:d3:b7:c4:54:ef:ae:7f:15:04:4a:0e:6b:da:
                    25:1a:44:45:e4:00:69:6e:98:b2:ca:1d:80:f0:79:
                    88:25:c5:ef:34:e1:6a:6c:29:9f:3d:e6:f6:74:d4:
                    53:b5:b0:73:2e:6e:e3:e8:f0:28:0c:37:ee:09:b7:
                    d0:75:20:7d:2e:12:b2:d2:13:3c:42:6b:5a:81:d0:
                    ff:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:E6:17:46:C7:BC:C5:70:F0:67:E0:FD:6D:F2:BF:52:F6:EE:90:C5
            X509v3 Authority Key Identifier:
                keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:69:09:60:ac:da:97:32:15:d6:c0:f2:97:c0:6a:ca:f2:39:
         65:97:31:51:7e:70:fc:42:54:8d:cd:fe:46:f4:42:75:8c:6e:
         08:f5:4a:6f:81:8a:a3:9e:83:e9:43:d4:50:ab:15:c2:75:98:
         15:ff:3f:b0:cb:1a:02:cf:96:cb:1d:32:04:7c:c2:61:dd:26:
         e2:c7:47:79:63:5f:1e:38:e3:ce:8a:85:13:20:bf:16:2c:8a:
         b4:9f:50:cf:a9:48:d5:d0:57:4e:98:40:4f:dd:ba:c5:8a:6b:
         c4:7c:14:bc:0f:69:d6:1f:f0:cf:d1:f6:b3:ef:12:1a:b5:12:
         0a:fb:e0:58:84:55:55:4f:e5:99:65:b4:49:22:cc:7f:5f:06:
         d5:e7:64:1c:ba:36:b9:13:13:50:06:d7:5a:d7:c3:77:eb:3c:
         31:2c:0a:b2:2d:f7:88:d9:d7:00:c5:60:19:2a:bc:0f:3e:bf:
         5f:59:34:56:9e:ab:41:cd:6a:2c:ff:91:26:db:84:78:bb:53:
         ef:6e:2b:5e:21:61:f3:f3:49:0e:f6:29:75:3f:a5:72:d1:1e:
         de:af:35:7e:5f:94:00:cf:ac:03:1e:b5:40:0f:de:54:c6:d0:
         92:31:22:46:42:64:74:f4:4a:69:93:73:c1:95:21:fc:f4:2c:
         83:7a:92:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:16:06 2026 by rpki-client