Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
File:                     m1M3vRp8XunFenOwozxhIZzSqcs.mft (raw, json)
Hash identifier:          tT+Px6jk8xt9JjEIrLVGjXC+MBCb7+xj6Ea/NfmgX9Q=
Subject key identifier:   81:F3:79:AF:EF:41:B0:73:72:78:1E:C8:7D:53:8C:74:25:CB:58:43
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Certificate issuer:       /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial:       01A0C746A575296280A2737C207F7676C49B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
Manifest number:          19FB
Signing time:             Tue 22 Sep 2026 04:01:30 +0000
Manifest this update:     Tue 22 Sep 2026 04:01:30 +0000
Manifest next update:     Wed 23 Sep 2026 04:01:30 +0000
Files and hashes:         1: cjkYRf3Yh9WpwKdD5YYzfaFNvWw.roa (hash: 3gq9vL58U08Go4S/2DXWUX5EoB3kYBslnaNgZp37wkE=)
                          2: m1M3vRp8XunFenOwozxhIZzSqcs.crl (hash: TBVUzokbAO9f4QQ2qFijLaLvOTjCtIg13gHu2Ev3DtY=)
                          3: msBIl7hzmZuQkbrJ6sui74p1Pgg.roa (hash: 1/8Tc8pewIiwrYAG9YY8GUqoXDl/4u6a8D5S98uRMyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 04:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:46:a5:75:29:62:80:a2:73:7c:20:7f:76:76:c4:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
        Validity
            Not Before: Sep 22 04:01:30 2026 GMT
            Not After : Sep 23 04:01:30 2026 GMT
        Subject: CN=81f379afef41b07372781ec87d538c7425cb5843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8c:bc:e8:5b:c8:55:20:8f:bc:23:fc:dc:1b:
                    6a:fe:0b:7c:a3:38:04:da:c1:6e:2c:9c:ec:ae:e6:
                    1c:ab:ce:aa:05:8d:e7:54:5f:d3:63:d6:77:03:bf:
                    08:b6:e0:f9:aa:6f:02:b5:13:a4:98:0d:90:bc:9a:
                    a8:83:b2:b2:3d:d8:37:e6:f2:8f:65:58:dc:d7:5a:
                    6b:4a:39:9b:76:db:92:22:82:1f:63:0a:18:0a:6b:
                    6a:3d:8a:13:84:bd:e9:f5:5a:78:3e:61:a9:5c:e4:
                    c0:51:2a:83:49:a8:36:df:71:cd:d6:e0:34:b2:16:
                    a1:d1:47:06:5a:c1:59:41:13:9e:de:ae:d2:87:e0:
                    ee:47:c8:81:99:83:a3:db:4b:49:bc:2c:f2:84:a2:
                    b1:70:c8:33:74:f3:5a:c4:95:53:95:34:70:59:6d:
                    28:a8:9a:64:99:f7:d1:60:b9:82:76:49:3d:95:ff:
                    7e:32:94:05:ca:fb:a0:c2:d4:ad:b2:7a:1d:90:39:
                    ac:fe:87:74:3a:b8:ff:18:fb:63:c1:02:12:2a:06:
                    4a:5a:6e:07:6c:5f:77:b0:35:02:fd:20:d3:25:7d:
                    bd:94:a0:89:8a:51:6a:4c:8b:5a:d7:ef:44:24:2e:
                    f4:39:ee:45:70:17:d9:57:88:a4:ba:0a:89:8b:76:
                    7f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:F3:79:AF:EF:41:B0:73:72:78:1E:C8:7D:53:8C:74:25:CB:58:43
            X509v3 Authority Key Identifier:
                keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:b6:43:5b:fe:cc:40:a4:f7:b3:9b:96:c2:5c:1b:f0:e0:b4:
         59:94:9c:b1:d8:dd:ec:11:24:39:ae:5a:87:99:cb:48:e6:4b:
         c8:41:72:c7:05:b3:f4:6b:50:1a:d0:c8:63:ed:c2:76:37:f7:
         35:b1:7a:10:c8:3e:7a:0a:1d:82:d0:20:30:16:18:20:98:8a:
         d5:cb:94:32:4f:c9:80:37:09:3b:1c:87:be:8a:d4:98:cd:dd:
         4f:35:88:59:68:0a:0b:e9:26:18:4c:1d:18:75:bf:ed:26:cc:
         ca:df:f5:9b:8c:65:6c:6a:e1:1a:f4:0c:94:ec:7f:93:da:4f:
         13:1a:0c:4c:da:5e:c4:9c:bc:73:af:54:f1:91:e1:07:97:67:
         f7:30:cf:29:3b:58:29:e2:c5:b7:8a:3e:55:13:8e:65:f1:29:
         dd:e7:38:aa:b2:43:ff:78:80:00:25:99:77:9f:f8:d6:38:3a:
         7b:d3:3c:fb:91:23:e4:8e:a1:79:b5:b0:47:fc:c5:21:ce:ab:
         6f:5f:c0:f7:1d:f4:4b:88:97:19:19:d4:39:20:28:4e:de:95:
         8f:69:0e:e4:9e:d4:b9:44:62:48:43:92:28:1c:8a:9f:e3:79:
         c7:9d:0f:ab:43:d5:06:19:ab:2f:e3:3c:ba:87:57:a3:12:b4:
         f4:d0:33:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:14:49 2026 by rpki-client