Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.mft
File:                     1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.mft (raw, json)
Hash identifier:          f2p7S5BeXI2uRccuc3dvrDFZxeIuGWWCO7ZTbHanea4=
Subject key identifier:   77:68:4E:47:4F:D9:4F:FF:14:90:72:CF:86:D6:96:17:28:7E:A9:68
Authority key identifier: F9:8E:9F:76:CE:93:6F:E1:97:5F:35:42:63:B4:56:3C:AD:1C:41:4A
Certificate issuer:       /CN=f98e9f76ce936fe1975f354263b4563cad1c414a
Certificate serial:       01A0D0120547D3654378440C9A537D840979
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.mft
Manifest number:          E5
Signing time:             Wed 23 Sep 2026 21:00:36 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:36 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:36 +0000
Files and hashes:         1: 1-4qDeSxKiudA3BEYHfwIENpu-FQ.roa (hash: MiUA8mMOBjGU1Knl32o+l6lwZVzhLxPAp+E5RuW9W90=)
                          2: 1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.crl (hash: FdGI6KIUMxeQxQ2Qafy2P0uPdSMaOk+T1aiKebpirCA=)
                          3: 1T-ceJjNkjIp-JzXf9B_UjQfr-Y.roa (hash: DwJMamMahTf9klv4UWUPQLpymIfAcqahU8vNJ7u5S4k=)
                          4: 82wAbhd74c0z6ICEOBs-0Y_oQfY.roa (hash: kBFT5s4QmJIedyfi/sxxBI04254S641NgjUTrd53nw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:05:47:d3:65:43:78:44:0c:9a:53:7d:84:09:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f98e9f76ce936fe1975f354263b4563cad1c414a
        Validity
            Not Before: Sep 23 21:00:36 2026 GMT
            Not After : Sep 24 21:00:36 2026 GMT
        Subject: CN=77684e474fd94fff149072cf86d69617287ea968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c9:a9:a8:6f:ca:ab:d4:4f:86:ce:7f:b7:d9:
                    3c:2a:c2:29:1f:2e:65:bb:70:38:82:9c:30:00:6d:
                    1a:e0:d9:38:d5:98:3e:a9:79:a0:d2:47:33:1f:9c:
                    f9:85:c2:d9:99:b9:50:40:fe:5b:71:95:05:f7:8e:
                    73:a1:e1:e5:d8:65:b4:7a:4c:f3:1c:87:6a:14:63:
                    55:8e:c3:f2:20:74:99:5d:6b:e2:d8:27:33:1e:7d:
                    8e:af:c1:a5:6a:bb:ec:eb:0e:4c:4e:1d:34:fd:00:
                    ac:0b:71:5f:2e:a4:16:5a:8d:50:7b:76:2e:b8:13:
                    72:fe:ca:5e:55:10:21:2a:03:4f:3e:9f:b2:33:db:
                    96:4d:a2:61:71:fa:f1:8e:d8:6f:dc:7b:94:f1:85:
                    30:8c:80:2a:13:6a:cf:bb:99:5c:9b:c5:fa:1d:b0:
                    9a:2b:21:34:c0:fb:59:d9:c0:af:47:1c:b1:32:11:
                    1e:b8:7b:99:8e:78:de:b9:82:da:29:8e:74:a5:d2:
                    a0:77:b3:46:2c:2c:4b:f3:b8:e4:98:aa:64:54:e0:
                    a2:df:c8:e3:b5:7c:f0:1c:30:80:92:6b:db:ef:c3:
                    06:db:55:2f:53:1e:2e:c3:0c:fd:8c:94:cc:e1:a8:
                    71:6f:c2:6f:01:2d:75:61:14:15:3c:e4:fd:d7:da:
                    e6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:68:4E:47:4F:D9:4F:FF:14:90:72:CF:86:D6:96:17:28:7E:A9:68
            X509v3 Authority Key Identifier:
                keyid:F9:8E:9F:76:CE:93:6F:E1:97:5F:35:42:63:B4:56:3C:AD:1C:41:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/1-Y6fds6Tb-GXXzVCY7RWPK0cQUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f5:e0:8a:8b:57:de:bc:19:2a:01:fa:38:da:4b:bc:59:93:
         16:af:61:fc:bb:ad:b5:fb:64:2b:11:f3:fb:7d:06:ad:9c:e2:
         1e:20:6e:6a:54:da:6f:e1:c4:6e:4d:ee:05:b6:2b:7c:75:45:
         2a:52:ae:39:2b:b9:39:91:ae:00:3a:f1:fb:ed:a4:78:88:f6:
         7c:b5:03:07:41:82:5b:2a:39:4a:d0:33:9c:1e:45:ce:d1:1d:
         1d:04:01:1b:bf:4f:e2:05:a9:16:ac:f0:13:a4:30:a8:bb:a5:
         b1:39:98:3e:4e:a8:ee:03:9a:00:d6:16:88:c9:c4:cf:89:ac:
         2c:59:c7:fd:10:99:27:d6:61:9b:18:b7:5e:e4:1c:c7:3b:d5:
         cd:67:68:0d:54:77:dd:62:e5:44:e7:32:7f:49:3a:93:98:9e:
         60:ae:94:c9:7f:ff:69:3e:f1:ff:e0:c4:a9:81:96:1d:95:8d:
         ae:39:fe:96:2d:de:b7:80:c1:82:8e:90:03:ef:0d:43:ac:ce:
         28:3e:cd:81:a1:4e:38:c7:b8:a3:f0:14:15:2d:02:6c:0d:ea:
         f7:44:da:1e:59:c9:06:07:6f:9a:de:b3:b2:29:19:c4:e8:8f:
         55:d2:cb:23:07:45:81:d1:eb:3f:74:51:c6:4a:f0:ba:f5:98:
         88:ec:79:f3
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDQEgVH02VDeEQMmlN9hAl5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5OGU5Zjc2Y2U5MzZmZTE5NzVmMzU0MjYzYjQ1NjNjYWQx
YzQxNGEwHhcNMjYwOTIzMjEwMDM2WhcNMjYwOTI0MjEwMDM2WjAzMTEwLwYDVQQD
Eyg3NzY4NGU0NzRmZDk0ZmZmMTQ5MDcyY2Y4NmQ2OTYxNzI4N2VhOTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMmpqG/Kq9RPhs5/t9k8KsIpHy5l
u3A4gpwwAG0a4Nk41Zg+qXmg0kczH5z5hcLZmblQQP5bcZUF945zoeHl2GW0ekzz
HIdqFGNVjsPyIHSZXWvi2CczHn2Or8Glarvs6w5MTh00/QCsC3FfLqQWWo1Qe3Yu
uBNy/speVRAhKgNPPp+yM9uWTaJhcfrxjthv3HuU8YUwjIAqE2rPu5lcm8X6HbCa
KyE0wPtZ2cCvRxyxMhEeuHuZjnjeuYLaKY50pdKgd7NGLCxL87jkmKpkVOCi38jj
tXzwHDCAkmvb78MG21UvUx4uwwz9jJTM4ahxb8JvAS11YRQVPOT919rm4QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHdoTkdP2U//FJByz4bWlhcofqloMB8GA1UdIwQY
MBaAFPmOn3bOk2/hl181QmO0VjytHEFKMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1ZNmZkczZUYi1HWFh6VkNZN1JXUEswY1FVby5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmIvMDhiOWM0LTBhZmQtNDg3Ni05ZWY3
LTJlODRiOGQxOGU0ZS8xLzEtWTZmZHM2VGItR1hYelZDWTdSV1BLMGNRVW8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2ZiLzA4YjljNC0wYWZkLTQ4NzYtOWVmNy0yZTg0YjhkMThl
NGUvMS8xLVk2ZmRzNlRiLUdYWHpWQ1k3UldQSzBjUVVvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvXg
iotX3rwZKgH6ONpLvFmTFq9h/LuttftkKxHz+30GrZziHiBualTab+HEbk3uBbYr
fHVFKlKuOSu5OZGuADrx++2keIj2fLUDB0GCWyo5StAznB5FztEdHQQBG79P4gWp
FqzwE6QwqLulsTmYPk6o7gOaANYWiMnEz4msLFnH/RCZJ9Zhmxi3XuQcxzvVzWdo
DVR33WLlROcyf0k6k5ieYK6UyX//aT7x/+DEqYGWHZWNrjn+li3et4DBgo6QA+8N
Q6zOKD7NgaFOOMe4o/AUFS0CbA3q90TaHlnJBgdvmt6zsikZxOiPVdLLIwdFgdHr
P3RRxkrwuvWYiOx58w==
-----END CERTIFICATE-----
Generated at Thu Sep 24 01:59:04 2026 by rpki-client