Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File:                     S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier:          3oBmMq9x+8wKOfUoawQ5PTuMj1aWXds3GPEspMcf1DY=
Subject key identifier:   32:F8:D3:E4:5B:5F:BD:87:7B:BA:1D:5C:C3:CF:54:57:F5:3E:FF:76
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer:       /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial:       01A0DB7249879316DAF2ECB6AB6D5A8ECF75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number:          1AA0
Signing time:             Sat 26 Sep 2026 02:01:35 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:35 +0000
Manifest next update:     Sun 27 Sep 2026 02:01:35 +0000
Files and hashes:         1: KWcbx273ZHAayKfn1OKexVZlWvQ.roa (hash: PaeeJ1l/Ji5ydWz0jBTUhtGKXbVfabdrj21ewU0oRmo=)
                          2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: UZEGZjJvizwQFYaDqL3acY0XyGVK12Me4bM/aLMpfY8=)
                          3: cN9-QkcDeRmmddqpx80fjE4LD7s.roa (hash: O0DZXiBII2s8che4/ZMrj0hj9juscGV08AllWCCgxdM=)
                          4: p8O4ZN9Xeldr_QvYtZL9RkkK6rk.roa (hash: KcqVP0b3/1a1YhXbBJeqeSikqnykQvFC4LFHO5+2KLo=)
                          5: yCZntdcD-FiyyzALoPRod_Tynro.roa (hash: A7enThxiUzB12fnWIKjiXX2k7pCD4DTrx01Es4L2jQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:72:49:87:93:16:da:f2:ec:b6:ab:6d:5a:8e:cf:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
        Validity
            Not Before: Sep 26 02:01:35 2026 GMT
            Not After : Sep 27 02:01:35 2026 GMT
        Subject: CN=32f8d3e45b5fbd877bba1d5cc3cf5457f53eff76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:87:ed:d2:1f:55:35:f4:fd:00:56:57:66:bf:
                    9e:65:d9:93:9d:df:77:55:bf:57:2d:70:d8:1c:d4:
                    d6:20:85:27:f8:d4:c2:a6:85:77:ed:16:bc:25:ea:
                    4c:58:a5:73:e1:33:30:44:6e:6d:90:ca:3e:6b:9d:
                    05:c5:48:2b:8e:a9:97:da:30:e5:37:0e:a2:a8:57:
                    0a:45:99:aa:d8:11:97:36:44:3b:21:77:8f:de:52:
                    50:cb:00:fe:6a:83:c0:51:3d:ef:62:d7:82:d7:60:
                    eb:46:7b:e0:f4:84:de:21:12:bf:83:b2:1d:c0:28:
                    f4:89:b9:37:29:32:ac:cc:b9:06:10:16:02:59:c1:
                    73:37:8d:ab:f9:5f:c7:5e:87:5b:c0:44:b7:e2:3c:
                    80:62:8c:36:2d:df:95:8b:c7:f3:9d:06:42:6f:6a:
                    76:4f:1c:60:02:a5:fa:59:95:a0:5b:6f:01:b6:36:
                    2e:38:9c:12:6a:3c:c0:9c:0d:04:f2:fa:8f:27:cd:
                    43:df:fb:e3:9c:c2:7e:66:e5:30:1e:5d:08:1f:64:
                    35:c7:aa:81:81:f6:74:45:35:76:f4:4d:ec:ae:4e:
                    2a:b7:6e:6f:33:30:09:b1:55:69:e0:0e:1e:32:5c:
                    49:dc:8b:23:b8:b1:0b:b7:63:c0:3a:43:f6:e1:7f:
                    fc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F8:D3:E4:5B:5F:BD:87:7B:BA:1D:5C:C3:CF:54:57:F5:3E:FF:76
            X509v3 Authority Key Identifier:
                keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:e1:d5:42:38:32:c3:94:a8:91:a1:3e:15:05:a4:7c:38:e5:
         cb:5a:b9:a0:3d:02:42:b4:05:57:a2:34:ae:f3:fc:72:cf:f9:
         fa:97:10:a5:88:82:ae:2d:b5:d5:51:44:3c:c8:6b:17:a9:e7:
         83:44:c5:97:8d:ed:97:52:08:3b:3b:1d:91:26:f2:b6:79:06:
         46:c9:c1:58:46:02:76:3b:03:7c:34:8c:9b:aa:99:5f:07:bb:
         af:72:cc:95:9f:9e:8f:cb:95:95:df:e4:e6:05:65:f9:31:8b:
         8d:2e:23:00:9a:92:01:2f:00:60:8c:2e:bb:bc:4d:e5:99:46:
         e0:b5:fe:e2:03:73:cc:e7:5f:1b:23:fa:76:da:a2:ec:e6:e3:
         e4:95:54:ab:4a:45:7a:5d:f4:74:a8:1b:47:a0:50:26:23:64:
         25:6b:23:90:9a:c0:4a:37:35:19:9a:b7:31:ff:5d:2e:8b:75:
         ba:f0:34:ef:67:5e:59:79:0a:bf:cc:fd:6a:4a:20:8b:db:f2:
         d5:52:08:f2:5f:21:57:a0:a8:5e:2c:98:c1:c5:cb:51:ec:7d:
         1d:83:6a:df:6c:a4:0b:d1:f6:3f:38:00:9a:cc:9f:39:b6:8e:
         24:69:9e:b6:0f:37:c9:f0:8b:9d:4b:eb:52:1c:51:5b:f2:08:
         10:53:40:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:05:54 2026 by rpki-client