Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
File:                     cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json)
Hash identifier:          e6cuK3G4U2AOutR1b0xc+06Rz8NyME4iOzB8swa6L2A=
Subject key identifier:   89:D0:67:37:9B:90:A8:7D:6F:A3:E7:14:52:33:72:8A:21:51:4F:75
Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
Certificate issuer:       /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Certificate serial:       01A0E09843D783ADE4EAE23DAE12F8A61CF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
Manifest number:          0C9B
Signing time:             Sun 27 Sep 2026 02:01:10 +0000
Manifest this update:     Sun 27 Sep 2026 02:01:10 +0000
Manifest next update:     Mon 28 Sep 2026 02:01:10 +0000
Files and hashes:         1: RIVpRVcoTiPM597Ay6ktG1nRpoI.roa (hash: 8WsKosIyT+/va+/3Ff2UyTN4wl8h0E62UrDqXKvX/7s=)
                          2: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: Q7tfL+L1KnV2rToQexsUsny4tO2QxvBrL/7CEvGsjao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:98:43:d7:83:ad:e4:ea:e2:3d:ae:12:f8:a6:1c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
        Validity
            Not Before: Sep 27 02:01:10 2026 GMT
            Not After : Sep 28 02:01:10 2026 GMT
        Subject: CN=89d067379b90a87d6fa3e7145233728a21514f75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:cf:0a:70:c5:ab:40:8e:41:7b:9c:7b:c2:cd:
                    fe:af:d5:62:1e:ac:b6:1b:3f:47:de:a3:e1:32:01:
                    1a:dd:f6:ee:5b:54:a3:fc:ba:24:41:b1:01:eb:9f:
                    93:e3:15:71:d9:3e:f2:e6:0f:55:3a:1d:14:b1:1c:
                    c9:90:7c:59:ca:9a:b3:25:5b:d8:9a:7e:30:4a:02:
                    f0:ef:21:60:44:09:44:68:cf:9c:a1:04:4a:19:2d:
                    1b:5a:0c:85:e9:ae:03:38:39:7a:77:b5:aa:f3:c8:
                    01:d5:20:d7:74:95:01:87:59:35:6f:e3:9f:ae:f4:
                    9a:94:c3:4a:b5:78:53:5b:f2:5f:03:72:53:43:9d:
                    30:0d:98:bb:d1:40:f2:95:ab:7e:4b:af:83:64:19:
                    f3:ee:d9:18:72:dc:25:63:59:7b:4b:5b:16:69:37:
                    b3:a3:ba:cb:d3:65:af:ad:08:08:74:15:3a:c5:4b:
                    d9:e4:ce:ea:57:8d:e3:04:b2:74:ca:57:0f:c9:ae:
                    d2:ec:f7:0c:48:93:2b:cf:1a:38:de:7c:03:d4:76:
                    5c:a2:f7:90:2a:24:09:0c:d7:12:1c:b7:fc:49:a5:
                    8b:37:b6:75:c2:1e:23:9c:8c:b2:77:15:c9:8d:37:
                    6c:26:03:e2:a5:27:3b:aa:42:d6:7c:4e:68:41:37:
                    45:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D0:67:37:9B:90:A8:7D:6F:A3:E7:14:52:33:72:8A:21:51:4F:75
            X509v3 Authority Key Identifier:
                keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b1:a2:5c:1e:d9:c2:bc:44:1d:7c:94:ea:0b:1e:aa:e4:39:
         41:64:4e:da:a2:5d:97:a3:a5:d7:b1:9c:6d:ce:9f:1a:cc:a5:
         9e:83:6d:a5:06:df:48:de:1e:89:d7:9d:c6:96:fd:96:e3:55:
         4b:dc:8e:e2:1a:0a:e1:28:bd:07:2a:39:1b:35:7d:55:6b:6a:
         5a:8c:6b:ff:64:29:be:59:aa:8c:f4:80:38:ec:c5:28:ea:da:
         58:0e:3f:b9:0b:2a:3a:65:80:99:f5:c2:74:d7:eb:53:3b:f6:
         11:55:c4:e8:05:58:de:11:a9:de:43:f1:92:12:5b:be:5d:e5:
         9d:f1:3e:c0:70:a0:4b:a1:c3:68:8d:8a:65:69:74:55:8a:3c:
         89:3a:b0:38:3b:f7:c0:50:63:cb:17:98:92:e0:93:de:8e:18:
         72:9e:60:c1:bf:66:42:ff:e3:ff:f3:b9:d6:42:92:71:90:07:
         71:92:e5:0f:12:60:13:e6:ac:78:6a:d4:22:c5:cd:03:b8:a7:
         74:66:bd:b4:05:1c:1c:78:81:f0:e9:8d:b5:17:48:1b:51:bc:
         1e:f8:78:f4:81:6d:9a:ad:8f:b4:45:0f:a7:98:60:af:29:7c:
         3e:fc:42:b9:90:f9:85:af:32:45:50:ce:fd:24:26:30:4c:79:
         9b:f8:c0:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgmEPXg63k6uI9rhL4phz3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTViNTdiYjM5OGQ1ZTE4MzlhM2ZlNDI1NGRmNzBkNzEy
Y2UxNGEwHhcNMjYwOTI3MDIwMTEwWhcNMjYwOTI4MDIwMTEwWjAzMTEwLwYDVQQD
Eyg4OWQwNjczNzliOTBhODdkNmZhM2U3MTQ1MjMzNzI4YTIxNTE0Zjc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2s8KcMWrQI5Be5x7ws3+r9ViHqy2
Gz9H3qPhMgEa3fbuW1Sj/LokQbEB65+T4xVx2T7y5g9VOh0UsRzJkHxZypqzJVvY
mn4wSgLw7yFgRAlEaM+coQRKGS0bWgyF6a4DODl6d7Wq88gB1SDXdJUBh1k1b+Of
rvSalMNKtXhTW/JfA3JTQ50wDZi70UDylat+S6+DZBnz7tkYctwlY1l7S1sWaTez
o7rL02WvrQgIdBU6xUvZ5M7qV43jBLJ0ylcPya7S7PcMSJMrzxo43nwD1HZcoveQ
KiQJDNcSHLf8SaWLN7Z1wh4jnIyydxXJjTdsJgPipSc7qkLWfE5oQTdFXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFInQZzebkKh9b6PnFFIzcoohUU91MB8GA1UdIwQY
MBaAFHLltXuzmNXhg5o/5CVN9w1xLOFKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDct
OTY4ZDBjN2YyMmJiLzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDctOTY4ZDBjN2YyMmJi
LzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE7GiXB7Z
wrxEHXyU6gsequQ5QWRO2qJdl6Ol17Gcbc6fGsylnoNtpQbfSN4eidedxpb9luNV
S9yO4hoK4Si9Byo5GzV9VWtqWoxr/2QpvlmqjPSAOOzFKOraWA4/uQsqOmWAmfXC
dNfrUzv2EVXE6AVY3hGp3kPxkhJbvl3lnfE+wHCgS6HDaI2KZWl0VYo8iTqwODv3
wFBjyxeYkuCT3o4Ycp5gwb9mQv/j//O51kKScZAHcZLlDxJgE+aseGrUIsXNA7in
dGa9tAUcHHiB8OmNtRdIG1G8Hvh49IFtmq2PtEUPp5hgryl8PvxCuZD5ha8yRVDO
/SQmMEx5m/jArQ==
-----END CERTIFICATE-----
Generated at Sun Sep 27 10:45:51 2026 by rpki-client