Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
File:                     dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json)
Hash identifier:          sl4go4/+Qv0n7/m8Tl+HRXU2gxvOKiOlTp+xRxD1Ksk=
Subject key identifier:   89:18:16:16:E1:86:5A:C4:98:12:9A:FA:A6:8A:17:94:83:7F:FF:39
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Certificate issuer:       /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial:       01A0BFF9C2795861B6D218DF18877CF3D5EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
Manifest number:          145C
Signing time:             Sun 20 Sep 2026 18:00:11 +0000
Manifest this update:     Sun 20 Sep 2026 18:00:11 +0000
Manifest next update:     Mon 21 Sep 2026 18:00:11 +0000
Files and hashes:         1: 1GxQmUTb97UmZv7pfW11O7jdoKQ.roa (hash: FmC4+AN9e0K9c8X4YT0jW6rSPs+y4UOdKxP9qZCnFuc=)
                          2: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=)
                          3: BxKZgBdEOXm741z70o-b-8aaZ1U.roa (hash: 9rDM/H8P5h5tG13SRwkUwohyZWN/9GQOe+B0Xl1+fUU=)
                          4: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=)
                          5: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=)
                          6: ZpqqEj-OtTqHMeec7OuBtT0rl_E.roa (hash: 4anR5lz+iPBfqZgtXZg/nhMp2EG3l7fsaSGpS3G04V8=)
                          7: aMzR14uquK9xRLMlgVieiQnpsL8.roa (hash: LnMZCy9Vc3AkrK23NCsUcwd16nNnZncQK2bQfZFfX7Y=)
                          8: dYbDdMuBsyQvL7kdUhtnVt9Qq4Q.roa (hash: Uc1pM7+13084KA3rRz3NbQmC1rtfcHSF9LSKdQS99oU=)
                          9: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: bcYuBH1qoCmDoSeCIfOuKwrWGw8roqrKQihhqDBMcG8=)
                          10: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=)
                          11: gbf_kkJkJHVfWvhpOZp44zXkSi4.roa (hash: L7TAKQTj5DgzgInyo2Z2o+5W5kIP6WxJWd/ULoNrui4=)
                          12: izn0gTPOQgQruf6Plz077lbyDvQ.roa (hash: SL5lQV0cHnhG5e9HsORKQLS+k85jrcJmLKm8DFk0UWk=)
                          13: ltuqnV7zy2DnQsucRbj8arC5CQM.roa (hash: LNO3fd1HW9TV8pQ7/uQgUjVDHYwtyIfoP4cwyPVsgsw=)
                          14: mBXHe8xwrq_f8wh9M3ZXaWdq8f8.roa (hash: dI8S3nju8gYg5btIsxEkeYY9kQycBzwf9pyizszOFek=)
                          15: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=)
                          16: q--OuP_rfB_qdy_7f_RIgPMsU7I.roa (hash: J5d2AOEi0HNsiyJ+nB39gHaVUpXKMLDnfhR+GSmUgHE=)
                          17: r2wp15RalYZ-BpL4xsNnngK0594.roa (hash: NNjjTsbzbTB3BJf0ScAIqlbHnQQtN/B+x9X2kssrtLQ=)
                          18: tiWoclLyoubi_eH2eBTEmg_nRPQ.roa (hash: v7vNaiqbe+aP8/SaLVbx8mliFyA9s414yzNmBa2a+SI=)
                          19: uuy6ECeKU5zPxhagn8FIr283yKQ.roa (hash: OOKXwwUyMmEuY99QE9mTnSKY0ij2Tkkt4XqvRj4K6hc=)
                          20: vLafL0GwWDvLzC-WXo-ujU2mMjU.roa (hash: WZJnUmwzRASxvhXsgI51USxfQop8j6bDAzzdqadBvsM=)
                          21: xfzSJZkuJaEFMZbSPNrdm-vtVgk.roa (hash: 03aH6k3XO2w/avcqYf5rOTHSew6NN0Bs9faZ8hBNn0U=)
                          22: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 18:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:f9:c2:79:58:61:b6:d2:18:df:18:87:7c:f3:d5:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
        Validity
            Not Before: Sep 20 18:00:11 2026 GMT
            Not After : Sep 21 18:00:11 2026 GMT
        Subject: CN=89181616e1865ac498129afaa68a1794837fff39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:fb:ea:ba:d5:09:6a:82:87:1b:a3:4a:c8:21:
                    2c:3c:95:e2:66:7c:e6:b0:17:9a:d5:06:01:79:85:
                    e1:ae:5e:2d:17:50:d6:b2:17:55:09:eb:e5:47:92:
                    01:c4:6c:9a:41:2b:d0:35:aa:8e:a0:e8:ad:20:3f:
                    61:bc:b2:a1:ac:55:c9:ad:90:1a:f0:d8:d3:71:34:
                    b8:e2:24:7f:62:8e:33:8c:1b:f8:23:6e:69:bd:cf:
                    ef:44:df:37:3b:97:0c:4c:7a:b7:07:dc:e4:ca:51:
                    60:1e:9d:d8:4e:97:06:65:65:11:db:e4:cb:d2:0f:
                    05:cc:59:f0:5a:5c:99:44:91:15:58:bf:54:25:a8:
                    0e:ec:6e:80:18:1b:0e:ef:b9:8e:5c:0b:54:99:a3:
                    ff:15:08:98:46:54:1c:ec:70:30:f7:f1:8e:f8:57:
                    63:10:cc:66:94:91:b4:b5:a7:f4:d7:10:e0:6e:eb:
                    28:83:8f:6e:62:49:c5:88:29:e6:40:38:a6:33:21:
                    2c:e5:fa:e1:89:b7:2c:29:bd:5c:a1:9d:73:24:0e:
                    16:e6:93:0c:3a:fa:60:2a:44:6b:ff:36:1a:95:20:
                    e4:8f:01:e6:ab:14:bf:e1:e1:07:c9:78:91:98:b6:
                    c5:74:de:2c:c2:5d:0b:50:f0:c4:58:43:80:d5:0f:
                    b0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:18:16:16:E1:86:5A:C4:98:12:9A:FA:A6:8A:17:94:83:7F:FF:39
            X509v3 Authority Key Identifier:
                keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:1a:42:6b:66:00:26:10:56:6d:bb:73:a8:3b:d5:58:72:63:
         2f:e2:3d:1a:bd:77:13:70:a5:fc:e6:b0:bb:cc:cc:85:c5:e1:
         5d:3c:4f:21:fe:b2:18:3c:fd:78:b8:3a:9f:e8:05:69:64:14:
         e4:eb:d3:7f:ed:82:44:80:7f:c8:79:bb:ee:78:3d:4a:ba:9e:
         48:74:5c:c0:70:ca:81:b3:21:54:97:be:46:08:37:9c:95:25:
         9f:19:b9:32:71:cb:c5:b5:5d:48:c9:00:71:4c:b4:e3:eb:4f:
         fa:27:5a:0c:6c:70:f3:73:f3:66:93:ad:46:bf:39:5b:9b:ec:
         d6:d0:31:ce:f1:19:32:16:2d:b3:97:9e:63:dd:1e:06:9c:9b:
         41:d2:62:d7:ca:a3:63:e5:ae:8a:98:45:04:33:e5:6a:92:6b:
         e3:a1:39:87:e8:25:0b:0b:5b:0f:e1:1c:14:61:48:e3:e8:b0:
         8b:07:0b:78:de:45:f2:09:8d:8b:94:2c:ad:1f:b9:04:dc:b3:
         4e:42:f0:0f:75:59:11:a9:ef:78:88:51:26:96:2b:80:40:2f:
         4a:0a:47:73:fc:53:a4:44:25:7b:d3:1b:15:5a:54:82:dc:20:
         88:92:a9:e8:3e:d3:6d:e2:c3:38:1e:26:b1:b4:40:75:a4:69:
         c8:14:6f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:03:14 2026 by rpki-client