Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
File:                     17tVI2VJnAeu00tohPWy6TgOvuE.mft (raw, json)
Hash identifier:          Q+rCG+Oljto2vc/EwJcr27xuTi5q2KBYtN05UCw903M=
Subject key identifier:   70:FB:29:87:41:6D:61:97:4B:28:93:AA:66:5F:31:C0:35:04:2B:0D
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Certificate issuer:       /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial:       01A0BE42854317DBF0CCF5832FFD5897BCEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
Manifest number:          114C
Signing time:             Sun 20 Sep 2026 10:00:25 +0000
Manifest this update:     Sun 20 Sep 2026 10:00:25 +0000
Manifest next update:     Mon 21 Sep 2026 10:00:25 +0000
Files and hashes:         1: 17tVI2VJnAeu00tohPWy6TgOvuE.crl (hash: BEWWsG6kV4FW9KyQMam+ZMNddQB3rxgTkVJ2TpHqT5k=)
                          2: 7G0NCEWyAUUTld6dbhxspAdwKu8.roa (hash: x0W+qVErOolxMsYnIkgUBz4sjWMNnyVZEzok5cCvMGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:42:85:43:17:db:f0:cc:f5:83:2f:fd:58:97:bc:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
        Validity
            Not Before: Sep 20 10:00:25 2026 GMT
            Not After : Sep 21 10:00:25 2026 GMT
        Subject: CN=70fb2987416d61974b2893aa665f31c035042b0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d7:31:c5:d8:00:b4:ae:3b:2e:e6:6d:af:c9:
                    29:32:21:79:42:54:e9:a9:44:cd:20:9d:59:d7:c1:
                    25:5f:06:23:7a:87:d3:a3:d7:95:59:8f:b4:4d:2b:
                    52:95:9b:7e:07:a5:0f:69:55:a1:b8:6e:4a:15:13:
                    8f:db:55:af:2f:b7:b4:07:99:3e:8f:26:11:c8:3a:
                    65:d2:61:27:09:8f:28:7a:e2:56:99:b3:d9:22:90:
                    9b:0a:be:30:83:d7:67:71:9a:40:b7:ae:ed:b9:e9:
                    b8:a3:b4:59:1d:13:2b:37:ce:50:ee:76:c0:34:dd:
                    2b:f0:f6:1c:b1:4c:89:df:da:f3:cf:ed:e4:60:98:
                    67:50:9b:b3:20:15:3d:cf:3d:ee:f0:3f:9c:13:6b:
                    85:c1:a1:3c:0b:75:4e:b1:24:8b:d8:05:41:98:ce:
                    49:aa:c3:3b:ef:a9:81:50:fe:97:a7:da:86:55:95:
                    f8:ec:e5:a8:bc:39:2d:65:84:bf:9d:ea:05:ac:f4:
                    13:54:2d:eb:d5:a8:f7:08:0f:1a:bd:7d:3b:90:dc:
                    9a:0f:75:05:fe:2d:d0:0a:42:97:05:53:16:38:25:
                    6c:ca:ec:63:c2:0e:ed:b8:2b:66:12:b2:80:64:4d:
                    60:e0:76:28:76:1e:5c:22:70:07:37:79:fa:ef:a2:
                    c4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FB:29:87:41:6D:61:97:4B:28:93:AA:66:5F:31:C0:35:04:2B:0D
            X509v3 Authority Key Identifier:
                keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:77:26:fa:4d:f2:89:af:e1:0a:85:bb:e2:36:0b:27:1a:8f:
         ad:b0:b3:3f:45:42:7e:4d:eb:d2:b4:d2:cd:35:5b:c3:3d:fb:
         6e:53:67:08:5f:59:1c:8e:dd:5a:e9:8f:cf:1a:f1:66:f6:d2:
         6c:f8:36:3f:ea:cc:c7:98:53:4f:83:ba:c2:56:60:d1:1e:88:
         9a:d7:3c:07:20:dc:cd:c7:8a:88:84:51:99:38:4f:15:4a:31:
         2e:fc:b8:83:61:b4:bd:8a:f4:93:ed:99:89:6a:9a:73:39:da:
         0c:ac:d0:d3:8c:d3:49:e9:d5:48:cc:aa:f6:ab:e5:90:70:12:
         5b:93:04:90:71:64:81:22:4d:9a:f6:86:c8:20:df:ea:14:87:
         4a:8a:b3:ea:4a:a7:b6:43:fb:42:e9:75:c6:7b:7f:10:4c:6a:
         78:12:49:fc:b5:7f:67:79:58:c3:86:3f:22:ea:0f:b4:ef:48:
         c4:75:e8:2a:11:05:04:66:a7:05:03:a1:54:d5:47:1e:e5:94:
         33:64:90:57:7d:84:08:78:e8:69:83:c1:64:81:54:0e:6b:cb:
         61:e1:b9:98:84:6e:3b:1e:d5:2d:e5:bc:d3:c7:f1:d0:10:58:
         90:d2:41:3c:b7:fc:a6:e2:a5:e2:ce:95:ba:b8:e4:39:cb:19:
         df:34:8c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:31:02 2026 by rpki-client