Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
File:                     eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json)
Hash identifier:          8sRIoAMMqhe6rrS0DFL2mU79PYRWt+91CXluC3GfXe0=
Subject key identifier:   81:8E:02:9D:E6:87:D5:D0:E0:18:0C:D5:13:D4:39:D3:0A:BD:CA:6D
Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61
Certificate issuer:       /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
Certificate serial:       01A0E175021631386C2834B4BC2502F75C32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
Manifest number:          1A9A
Signing time:             Sun 27 Sep 2026 06:02:16 +0000
Manifest this update:     Sun 27 Sep 2026 06:02:16 +0000
Manifest next update:     Mon 28 Sep 2026 06:02:16 +0000
Files and hashes:         1: 3Uhad0KFSfjXI_TbydoftNMdE3g.roa (hash: j9tyqYt4el5e/EHBRQPaMKBm+kYVSqQDGKdC5+GV1fw=)
                          2: EEBu5rQ8hO5xN_RHJx_hFoO3qS0.roa (hash: BrnZ+O7PpPP2CgQz6l0MWy62IQSvfZEBI+G8ayJnLRE=)
                          3: GCKLMhjEZ4tgpahsAAW0b7v-pbY.roa (hash: vfauSOW8KSxhKm84diH34kDOUYgfp1RoadLmCV5cdWc=)
                          4: W0j6YSMe1GX3A4tZiQV8vzc_kpw.roa (hash: fb2PFmFnYQYmWpVf2HANiiXyOyVRMMcnLRhOHSluDkI=)
                          5: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: ocbsf5QpbYpREf1Jw+SLUqHL0BBduxlH6dqzaX+LZbo=)
                          6: fuQjo-R8V7RgupEifO88mUFsfq4.roa (hash: XgKKf+T/JHflu47fZ8lbK7Ea+coPaRrFsg001BzHny4=)
                          7: m7kIh8Z3m5sUP7M-wKSvhAuoCII.roa (hash: RVNHVX31tSGpQABOxa6EqSIdwiAZEEfgy9G0c8Rv6CQ=)
                          8: njVUBNP2pawlmJYfjO-aqV7rHxg.roa (hash: KsrtTqSnlW3K+gpEPkMgT8sO+EsW0Fbd90twROTiMXk=)
                          9: qSxlathEcN6ZfWcqIYKI4rq_zNk.roa (hash: LYI2xAakIbFGxMC1GmxnDwbT1/w57IsHNS5Uguz6j68=)
                          10: tA_6j6gquShwOWQHuXqZmv-DGJ8.roa (hash: MBd1V9peNX1ONVT7gAUeTBj/y3gvMH+RO35qWdORDv4=)
                          11: xrlQxD2aCilEx5MBkW5ICdMkjmI.roa (hash: XyJhHEW8YK45zRLRx/h09ilca39SOfBBhQAfbZq7s3E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:75:02:16:31:38:6c:28:34:b4:bc:25:02:f7:5c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61
        Validity
            Not Before: Sep 27 06:02:16 2026 GMT
            Not After : Sep 28 06:02:16 2026 GMT
        Subject: CN=818e029de687d5d0e0180cd513d439d30abdca6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ef:45:79:88:94:5a:06:0a:41:ab:92:fc:b7:
                    9f:0a:05:b7:12:41:80:6c:19:0c:e6:35:26:c3:b3:
                    9f:33:1d:b2:c3:aa:c6:f8:72:87:2c:d3:8b:b4:55:
                    b9:80:bf:81:f5:b5:e8:5e:06:df:9c:e9:56:bf:45:
                    49:47:a8:95:97:a6:e3:bd:e5:50:e6:d4:a9:80:29:
                    3e:6b:2f:47:3c:06:64:b7:dc:28:13:eb:7e:88:80:
                    84:1c:29:3b:3f:06:31:d2:92:46:ac:e9:fb:f4:b9:
                    bd:c2:38:78:b1:5b:28:d1:5a:0f:03:56:95:49:fa:
                    14:16:79:4f:c8:9f:72:15:d2:51:09:1a:28:72:ae:
                    97:10:94:da:1d:61:79:88:e6:c8:a8:6a:90:3e:b7:
                    72:84:b1:74:bf:c7:42:6e:ba:34:72:84:44:29:ff:
                    df:3c:32:0b:ec:03:59:d6:a0:66:c6:15:11:09:37:
                    cb:21:cf:b4:f9:63:a0:a3:85:05:5c:71:c4:22:e9:
                    29:14:9f:c8:de:d4:d1:a4:bc:ee:33:3d:c9:e6:ec:
                    b3:a2:75:ad:61:2f:79:97:b2:c5:19:41:ac:fa:4e:
                    36:3e:e4:e9:a5:88:ac:18:55:d2:08:a1:87:32:de:
                    08:b8:eb:9d:ef:f8:26:87:b9:69:86:33:bd:22:73:
                    c9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:8E:02:9D:E6:87:D5:D0:E0:18:0C:D5:13:D4:39:D3:0A:BD:CA:6D
            X509v3 Authority Key Identifier:
                keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:06:5e:56:6b:04:02:90:0d:37:f8:40:14:28:f8:b1:68:08:
         40:ac:06:80:a8:fb:49:ef:dc:25:dd:a6:11:fd:82:95:16:54:
         3a:b9:ca:f2:95:63:81:f0:ec:d8:87:e3:7f:b3:2a:5e:fc:2d:
         aa:1a:e8:34:99:43:d7:09:c8:8f:28:ec:68:7c:60:d0:82:9e:
         e7:79:d2:a4:13:32:77:d0:09:b5:46:7d:cb:17:e6:66:b6:17:
         b7:76:70:c9:dc:64:79:53:f8:20:37:57:17:4b:f0:0b:c4:2c:
         b3:1d:6d:7f:e8:15:f2:56:f2:a4:2e:01:b2:69:ac:bd:82:a5:
         e2:64:a4:30:ac:8f:47:6e:ed:92:ed:3a:df:b8:e7:73:7b:77:
         8a:9a:e5:5c:87:1b:8a:53:07:44:91:43:9a:ad:ee:ba:84:52:
         28:61:1d:a5:f5:cc:99:0b:d5:c7:e8:c8:ae:42:ff:e4:3d:cb:
         a3:f2:16:19:90:42:4c:9a:0b:a4:c1:34:66:b7:5a:65:9d:74:
         c0:12:12:f7:a7:e6:13:78:75:07:3e:1a:00:d7:05:8d:33:a2:
         0b:4f:01:6e:21:ad:73:7a:89:2d:86:eb:1d:e6:79:d9:5e:bc:
         27:0c:c2:40:f1:4e:4c:d9:12:e5:e1:1c:d7:52:d3:65:99:e3:
         5a:b4:39:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:10:46 2026 by rpki-client