Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
File:                     t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft (raw, json)
Hash identifier:          UFuC7O6cgm4qu63dkeqMFZpESXCS+DM7OhQJez96q1o=
Subject key identifier:   31:1F:D8:90:A8:8B:35:88:C6:95:D7:03:AE:F5:19:30:31:A6:FE:3B
Authority key identifier: B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
Certificate issuer:       /CN=b795aaf033004c92d7a26c236c14d32552d78d94
Certificate serial:       01A0DCF26D2B642079E5615E9D1C7F3239E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
Manifest number:          143E
Signing time:             Sat 26 Sep 2026 09:01:10 +0000
Manifest this update:     Sat 26 Sep 2026 09:01:10 +0000
Manifest next update:     Sun 27 Sep 2026 09:01:10 +0000
Files and hashes:         1: NSKhyUya1x-PyKiiTfwVVTZVm6A.roa (hash: wduaY6yIGEaa6Q7/D9YyI5iy8gfW5slOIEt9QDoD1eQ=)
                          2: t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl (hash: m2ZFH9TH7SU+I8k1qf1PWN3wJlp6ex1XBj7y+qXEScg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:f2:6d:2b:64:20:79:e5:61:5e:9d:1c:7f:32:39:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b795aaf033004c92d7a26c236c14d32552d78d94
        Validity
            Not Before: Sep 26 09:01:10 2026 GMT
            Not After : Sep 27 09:01:10 2026 GMT
        Subject: CN=311fd890a88b3588c695d703aef5193031a6fe3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:85:d8:16:5c:6e:bf:d6:7e:cb:c0:28:97:9b:
                    a1:98:1a:4c:11:48:7a:a9:b0:49:a7:3f:ab:fb:88:
                    d8:c7:fb:9e:c7:a7:75:b3:99:91:01:f8:00:14:5f:
                    05:62:94:2c:ca:c3:ec:a2:de:81:0a:9b:ec:32:ec:
                    4f:47:9e:3f:22:b6:cf:71:0d:0d:a1:92:2d:d7:d7:
                    b6:9b:a2:21:bf:14:50:a1:d8:71:86:13:b3:af:63:
                    d3:e7:dd:62:34:7d:af:a7:9e:bc:37:67:cd:f1:54:
                    30:72:aa:c5:5b:bc:f1:87:82:38:e5:81:6f:77:18:
                    66:a6:11:04:38:53:c4:44:82:46:cc:91:fe:59:db:
                    6d:89:02:aa:5d:98:e6:0d:f0:2b:16:f9:fd:84:2b:
                    a9:b4:1d:32:f3:81:ae:a4:aa:ca:3c:26:25:20:9b:
                    66:03:85:b7:e7:06:5c:17:10:22:8d:f3:fb:78:34:
                    5d:df:29:58:a0:a2:bd:14:80:22:47:54:be:68:f1:
                    6f:c7:f0:df:16:8d:3b:40:b5:e5:04:78:b5:c8:45:
                    c8:05:79:02:19:59:87:52:bc:75:30:6b:60:6a:68:
                    e4:af:9e:ae:46:44:25:c6:0e:01:36:3f:2b:3a:e0:
                    b7:1e:c5:ab:d9:89:f8:e4:70:31:00:c4:7d:59:b7:
                    e1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:1F:D8:90:A8:8B:35:88:C6:95:D7:03:AE:F5:19:30:31:A6:FE:3B
            X509v3 Authority Key Identifier:
                keyid:B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:21:58:e0:c8:7a:09:6b:c9:d7:6a:af:8b:36:cf:89:5f:43:
         ac:a9:09:b1:5b:b3:31:bc:91:71:3c:65:b2:87:32:7f:39:19:
         81:0d:57:d4:d2:ea:08:33:66:47:af:41:8e:e8:98:e0:ab:e1:
         3a:11:09:99:d6:d8:23:d5:56:b1:e9:35:34:0a:29:66:98:1c:
         dc:cb:c8:cd:f5:0e:7b:3d:5e:58:9a:df:b6:94:10:b3:2e:6d:
         79:7e:28:09:37:af:a1:08:b8:2d:7e:60:bb:55:b3:02:02:26:
         44:41:48:50:ba:5a:f6:8a:3d:2b:ea:50:b0:f0:2b:54:f4:0c:
         a3:de:76:00:bb:7a:d3:bc:d7:49:7f:43:04:3e:fc:46:bd:94:
         d8:f5:c0:f2:2c:f5:05:a5:51:04:84:3a:03:f0:6d:c1:66:05:
         61:49:c6:b4:a2:4e:28:ca:19:27:40:7e:6b:21:45:56:36:8d:
         5b:f2:30:26:ca:02:1d:8a:2a:7e:43:1b:e6:a7:01:a4:e8:56:
         53:8c:75:2d:68:3b:1b:42:cf:54:9f:09:e4:34:45:45:22:67:
         64:a7:14:98:19:eb:f4:b7:17:89:97:b4:68:f1:40:30:76:87:
         47:2a:42:00:68:77:88:44:4a:07:ce:36:47:77:83:1f:20:cf:
         3d:1b:c7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:20:19 2026 by rpki-client