Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
File:                     pPhDYAPTdgICa2VTF1XKj80xvtI.mft (raw, json)
Hash identifier:          18b+fSbq8jIKxDc5Vw9OxrabelyL5wkruM4uRxdktNg=
Subject key identifier:   7A:FA:E9:DE:0B:3A:DB:E6:8C:6A:8C:40:C7:1D:47:3A:71:17:F4:DD
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Certificate issuer:       /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial:       01A0D2374D4DA433F284B027ABA0C23B2DD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
Manifest number:          1A8D
Signing time:             Thu 24 Sep 2026 07:00:34 +0000
Manifest this update:     Thu 24 Sep 2026 07:00:34 +0000
Manifest next update:     Fri 25 Sep 2026 07:00:34 +0000
Files and hashes:         1: At7sxT6mL4XEiXdrKAbf-oB5YCc.roa (hash: d4FJAcpEe0iO1bxqcw6QAHvtcjgma3GLYgzaB3duGh0=)
                          2: MH0ePkGiqUNJj92Th9uz7ESBLuY.roa (hash: zEMC++4x++17MQ2QaYX26EoR6rGR9XCEMskuWanLEDo=)
                          3: TL6-YQoL6bM9YzZkFooupL9SKZc.roa (hash: fDKbKxnCCglM7bDeEH0JDX6y2HKlL0aR2oegXj3HyjY=)
                          4: ZSy9I3udyb1w0usAvKavWUhYUuM.roa (hash: NjrlIizcsmC5vnXJgYJk87Yv2k+U89uwtXh718Ex2Oo=)
                          5: lilRXnQbhAs_T-urB33KZ2t0KZQ.roa (hash: U6hwfDfpC6+pNA9h6WSEbMtCWXO/blanxBm4f8SHiVE=)
                          6: pPhDYAPTdgICa2VTF1XKj80xvtI.crl (hash: 69z8mjAsyNQBD2FZDe+KvjRFCE8NQ/ukaSxzO7khE48=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 07:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:37:4d:4d:a4:33:f2:84:b0:27:ab:a0:c2:3b:2d:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
        Validity
            Not Before: Sep 24 07:00:34 2026 GMT
            Not After : Sep 25 07:00:34 2026 GMT
        Subject: CN=7afae9de0b3adbe68c6a8c40c71d473a7117f4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:9a:e0:46:38:a1:4c:15:df:f0:2a:d4:a1:a3:
                    b6:be:73:b4:49:8f:28:dc:3f:b4:1f:62:2c:93:f6:
                    9f:cf:a5:ce:98:5a:cb:b6:ef:ff:d4:52:d2:ff:7a:
                    be:d6:aa:c2:02:a9:e0:a7:99:6f:85:63:df:d6:4d:
                    14:5f:bc:03:70:ca:5b:5c:b4:57:ae:d4:b3:9c:be:
                    aa:39:80:07:f5:44:2c:a5:d9:53:aa:dd:99:f6:0d:
                    ba:3b:77:98:d8:fe:10:40:6c:12:36:03:44:8f:a1:
                    bb:a0:48:2a:7a:3a:10:be:84:18:d5:10:5a:63:1d:
                    f6:e7:32:1a:17:74:41:8a:2b:c8:ad:ff:52:e5:74:
                    10:37:19:6b:74:80:1b:e5:d4:d7:f8:e7:d2:3d:9c:
                    ad:1a:f5:a0:07:e9:10:c5:af:92:b5:b3:a5:b6:65:
                    b7:7a:0a:d2:26:26:42:04:a4:b3:fb:7e:47:1f:d6:
                    5e:97:4d:6c:82:07:f7:27:e2:ad:f2:aa:cb:1d:a0:
                    8d:fb:db:cc:08:32:4d:79:2c:1c:a1:fa:84:c8:cd:
                    55:b0:01:03:10:ad:5c:57:60:a1:2d:6e:73:64:e6:
                    e4:03:cd:7e:d0:62:7b:10:42:6c:30:b2:f8:de:82:
                    e8:ea:a7:54:eb:79:b4:ec:e7:e7:c3:1d:1d:32:85:
                    12:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:FA:E9:DE:0B:3A:DB:E6:8C:6A:8C:40:C7:1D:47:3A:71:17:F4:DD
            X509v3 Authority Key Identifier:
                keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:1d:cc:b3:8a:3f:c5:01:59:c6:3a:d3:b0:49:57:fb:88:4d:
         1a:06:bb:50:e5:5f:ef:bc:22:5c:73:8c:ce:f7:2d:fb:e0:ce:
         37:77:62:e6:6c:15:5e:b7:38:d3:f6:19:89:fc:72:ab:fc:b3:
         60:07:b1:a7:03:35:c2:0c:4d:0f:67:0a:79:9e:af:c7:5c:68:
         70:17:bf:55:6f:75:55:ad:79:dd:eb:c5:3d:da:a2:de:d7:fc:
         ea:bb:b4:63:d8:b2:e4:26:fb:52:b5:f0:b3:40:bf:16:14:ff:
         7d:f8:25:70:08:fa:49:cc:4e:e9:3a:8e:f1:a4:95:04:d3:fb:
         15:bd:09:f7:90:99:6a:80:fb:35:20:c6:2a:db:0e:8d:1b:82:
         4a:1d:d2:65:ae:0f:bb:60:02:c4:d2:e8:93:79:51:21:a2:56:
         e9:ee:98:72:ba:2c:31:80:a5:4b:86:ab:34:2d:9c:bd:6b:48:
         58:e7:ed:60:ee:ab:4b:4a:a2:0b:ff:6a:1b:28:6d:60:18:8b:
         ef:25:aa:69:84:29:d7:23:b9:f8:60:76:d7:b8:de:cf:7b:fb:
         bf:5a:49:48:89:ee:2b:f3:03:31:3d:54:9a:67:40:21:b1:3f:
         e7:e9:e5:03:5e:48:ab:db:df:42:75:e8:fb:24:6b:14:5a:b1:
         01:61:71:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:04:16 2026 by rpki-client