Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File:                     deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier:          1ce7597HefhXhgfOEZPx3GNQ5wvTUvsn/RNPp7SVejU=
Subject key identifier:   AC:50:29:CF:26:69:53:73:03:C9:19:67:AF:EA:5B:CA:6F:4B:BA:70
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer:       /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial:       01A0DC16FD5BB69D3F82991CD5EE860F9C77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number:          1A7D
Signing time:             Sat 26 Sep 2026 05:01:29 +0000
Manifest this update:     Sat 26 Sep 2026 05:01:29 +0000
Manifest next update:     Sun 27 Sep 2026 05:01:29 +0000
Files and hashes:         1: IKecYpJsyQoCMXhzFQm8qwezc6Q.roa (hash: AyBWoAIIW8QVXSZmJhv+7IehUMdxfXtLu4x8wnOD+Zo=)
                          2: Niz0xaF_UJO5sK6yvy3cMVF07nA.roa (hash: l65DOQXiJc/vw8R7nLx1kl+6tdgkTZuIaNzOHJm95Zo=)
                          3: WFTfI5tspGo4Ss0OCZAL-JGWw3k.roa (hash: ygHs+fWVxGVJnQRLr2/Xp2LQTIWtPolhwTvnQdcJhwg=)
                          4: Wrrx-J8255kGZZQo2Z_lshL_g94.roa (hash: RJwUNDcFiRkR23EOeiZYpldoRJTn3DHSqOqjyT0fbkQ=)
                          5: _RQQ5tVF2eFgG4W622rODRsfodw.roa (hash: tBfa8G6tBLKfwxInkvbCwg+hxTDjAv00awjpszqTn38=)
                          6: cKp2OZnMQ6gfuVdFBIpAAe-tLzE.roa (hash: mbO9zdERKtIWiDiD8x4e0EjpaANpcC71gfDZ39R7GH8=)
                          7: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: HMfIELSxjZpozDxusgobZWz5G/Se68UouWc7Z4L8A1c=)
                          8: p6DmQaVdSnpO0418vCwa-3h5IyU.roa (hash: oLcwvSqddOQ2Ul0V7nGknSGHPS/F0P9Nc73tzvsSSQ4=)
                          9: tzZM7nYn-Yv6VuwdydL4arg8J2c.roa (hash: k/xFXsG2Cc7BkpgSwakJflKtWLf9ZeYiel+DCWnqX60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:16:fd:5b:b6:9d:3f:82:99:1c:d5:ee:86:0f:9c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
        Validity
            Not Before: Sep 26 05:01:29 2026 GMT
            Not After : Sep 27 05:01:29 2026 GMT
        Subject: CN=ac5029cf2669537303c91967afea5bca6f4bba70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1a:15:b1:f2:52:bb:cb:e6:48:8a:f7:be:cb:
                    b7:42:5e:9d:e4:74:1c:c8:a9:c2:6f:4b:4e:b0:53:
                    68:30:b6:6a:f3:b0:c5:97:2b:43:a2:a1:76:1d:c6:
                    6c:48:a5:de:93:d2:e6:d8:f6:ef:78:1d:d7:65:1f:
                    23:6e:48:4c:d7:4d:56:35:be:e6:b7:fe:9a:4f:92:
                    78:8e:e3:0a:d7:b1:c9:8e:ea:d0:4f:b6:14:3f:36:
                    90:50:77:c7:4b:01:d2:15:42:2e:d2:a4:46:b8:3b:
                    f6:d1:6e:80:0e:a2:b9:14:cc:b3:80:9e:45:91:93:
                    ec:aa:cb:d0:88:de:d8:cc:24:43:71:bd:7f:98:4a:
                    55:de:a8:da:64:ea:92:2b:2d:85:08:e8:6e:02:33:
                    9c:c0:3b:21:bb:5e:5c:e3:be:a6:13:3a:46:fd:43:
                    b4:05:3e:60:27:89:2a:af:8e:29:c1:42:24:d0:ab:
                    50:55:b4:ce:f9:23:91:8e:ce:75:20:c4:b9:f6:84:
                    d4:83:ad:26:e4:26:d1:5c:40:a1:6e:a8:68:2b:73:
                    51:9b:f3:b2:8a:8d:f8:6b:51:f7:1f:8f:f3:34:ec:
                    a6:a6:bd:81:51:cd:7a:33:1d:48:45:12:f2:0c:f1:
                    51:43:4e:f0:e4:f0:5c:2b:a4:5d:a3:b4:ac:23:bd:
                    04:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:50:29:CF:26:69:53:73:03:C9:19:67:AF:EA:5B:CA:6F:4B:BA:70
            X509v3 Authority Key Identifier:
                keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:bd:f1:22:be:e8:74:d1:d9:85:b1:df:41:a5:50:96:89:29:
         69:d0:19:b4:b2:ea:53:de:60:db:59:f7:4a:8b:11:2d:e8:b5:
         7c:c6:65:f5:97:6b:af:af:16:dc:67:35:1e:8c:e9:4b:4c:01:
         88:ca:8f:44:bb:aa:c2:a3:31:72:7a:27:f2:43:33:7d:29:55:
         b0:51:0a:1c:5a:bc:e9:43:57:ac:24:2d:a1:5e:67:59:c3:b2:
         2c:25:2e:28:b2:84:f2:57:b7:cd:4b:5c:9c:75:48:67:45:ad:
         03:d5:1b:8f:3e:2a:3c:64:e7:5d:ea:0f:4b:73:8a:54:66:59:
         50:45:89:81:54:88:8b:bc:a9:11:9b:d7:8f:75:2e:0a:b1:0a:
         50:93:9a:0d:4a:8f:0f:2b:f2:24:ef:bf:9e:62:5d:6e:f3:01:
         97:07:b7:5f:e8:e5:d1:be:14:35:bc:d2:9b:0b:d0:54:37:03:
         7e:22:06:2d:c3:33:13:b8:af:96:d0:52:94:ae:51:24:f0:f1:
         84:17:e7:8d:eb:ba:70:5d:28:a7:80:a1:c1:36:96:ad:f1:66:
         63:c9:aa:ff:1b:c0:23:40:54:dd:f1:78:f3:1a:1e:f3:e5:58:
         50:79:60:d4:c4:7d:67:38:69:b7:47:45:8e:e8:e3:09:10:5c:
         ab:ff:45:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:47:00 2026 by rpki-client