Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
File:                     IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft (raw, json)
Hash identifier:          6NvPb9rLUreEddZoQ4LlFdSSi9ltwSK3Jy0lk875tFI=
Subject key identifier:   8C:52:56:E2:66:E9:3E:86:DC:A6:9B:0F:5A:81:97:76:11:37:E1:06
Authority key identifier: 20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24
Certificate issuer:       /CN=20820f796481ac0e9637c962414597b1fe227c24
Certificate serial:       01A0D1921D792FB2A669AD461AC5B74CB904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
Manifest number:          0582
Signing time:             Thu 24 Sep 2026 04:00:08 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:08 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:08 +0000
Files and hashes:         1: IAWiQMEI7lBYE-yiLrq0N4vd600.roa (hash: 7MWeCmwerIQVPacLYiQfFeLxjpHdbEK+iRaLdCOlJtE=)
                          2: IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl (hash: VbFd9GJHph8ovf5rX3Yy23qIbovl6mdrkcGuTXNxUx4=)
                          3: NHFVYka2133iQXjNTWLuhJeJRYs.roa (hash: r4c2sIYwncDluECLH+MlpQyTtLc+nzIN7UPvDkikTYQ=)
                          4: gvthCNIXZpaMb2ZutbDvX6DCkBk.roa (hash: tPtLLMo+LPUP4l2VgdhxLWlnMKhOqjN726EsOHNpydc=)
                          5: yd9EH4-PNfXaKnFsgpj-E0I-Hpo.roa (hash: 8g1lQ5gsbw6TqXkgRbd0BplxOk5M2zN7QFi/L4xQDp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:1d:79:2f:b2:a6:69:ad:46:1a:c5:b7:4c:b9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20820f796481ac0e9637c962414597b1fe227c24
        Validity
            Not Before: Sep 24 04:00:08 2026 GMT
            Not After : Sep 25 04:00:08 2026 GMT
        Subject: CN=8c5256e266e93e86dca69b0f5a8197761137e106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c8:2c:eb:4b:d3:09:cc:38:2f:96:b5:08:18:
                    02:38:51:da:0f:a5:8b:90:3b:56:15:1b:33:a8:1b:
                    05:43:2b:ab:a1:5b:74:9c:77:43:28:c8:ec:53:88:
                    91:4b:cd:2c:f4:3a:a7:65:24:6c:c3:d8:0a:d4:17:
                    8c:71:da:f5:e7:e9:b6:c2:ea:e0:e5:1f:c1:00:5b:
                    3f:0d:a0:c9:41:85:31:c4:2e:5c:89:31:03:ed:22:
                    77:92:43:92:ab:ad:a3:59:00:cf:89:e7:53:df:ee:
                    9b:98:71:7a:4a:78:63:58:56:bc:d3:9f:be:c2:36:
                    89:75:bc:52:d2:38:27:73:c3:97:22:e5:65:b3:8b:
                    e6:17:d8:0d:d9:47:0e:98:73:70:0b:e7:ea:53:21:
                    45:49:a5:d9:a2:31:2a:05:37:aa:05:f1:ce:57:25:
                    3c:60:2f:42:b1:68:ea:fe:ae:0f:fd:f1:29:fd:9c:
                    03:e3:4f:15:11:7e:1d:20:d4:99:94:7c:ab:48:51:
                    44:e8:2a:fa:ca:49:03:18:cd:32:7a:51:8b:de:6f:
                    de:18:2d:1a:e0:f9:a7:91:3b:e7:0f:43:65:42:50:
                    f6:11:c1:3b:ef:a8:0c:46:eb:66:1f:ee:7f:50:87:
                    28:ff:8a:b3:78:38:26:a2:50:93:be:5e:ca:a0:5d:
                    d3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:52:56:E2:66:E9:3E:86:DC:A6:9B:0F:5A:81:97:76:11:37:E1:06
            X509v3 Authority Key Identifier:
                keyid:20:82:0F:79:64:81:AC:0E:96:37:C9:62:41:45:97:B1:FE:22:7C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIIPeWSBrA6WN8liQUWXsf4ifCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b98b9f-b581-4e3e-ae8a-987d869566f6/1/IIIPeWSBrA6WN8liQUWXsf4ifCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f6:ed:ca:a5:f1:f0:33:08:16:66:e3:f2:e4:ef:02:95:8e:
         d2:b3:7d:d6:4a:a2:47:7b:46:75:c2:b4:cb:75:10:1a:b6:92:
         af:87:66:ea:b6:92:72:b5:d7:da:91:25:62:0b:8b:49:91:53:
         2b:1a:de:d6:26:87:08:ce:75:73:da:7e:74:bf:94:3a:3d:cc:
         ca:46:90:e6:cb:ef:a9:51:bd:16:b7:03:99:eb:88:18:37:95:
         66:0f:dd:29:e2:61:fc:5e:03:22:12:a9:75:21:6b:69:b9:ec:
         33:95:2f:4b:e5:68:09:c0:e6:2f:3d:09:a3:77:c1:19:94:aa:
         fe:35:eb:20:78:ac:c1:66:a3:65:cb:1d:d8:c1:13:95:3e:90:
         63:60:52:cd:e3:53:d3:c9:3a:6d:63:97:6f:1f:d7:f1:48:d6:
         06:86:b9:82:2d:09:e8:22:66:f7:de:03:2c:ed:3a:c6:83:b9:
         33:af:63:80:76:ee:91:e9:7f:47:17:c6:37:d0:51:70:c1:bc:
         8c:dc:f5:89:92:39:b7:66:79:41:0c:44:7c:0b:c1:21:a0:a6:
         ee:a7:ba:93:04:3e:de:23:39:c7:bc:cb:21:d4:66:86:16:2e:
         d2:36:91:e2:f9:14:8b:48:b2:d2:6f:10:d6:c0:10:39:14:8d:
         75:05:16:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:57:04 2026 by rpki-client