Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
File:                     TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft (raw, json)
Hash identifier:          lnBKNEXb4EleaeXiCUdUbQFFIgMlQdX0mIKhfaHSC8o=
Subject key identifier:   A6:24:F1:B1:C2:3C:21:D5:CC:CF:E7:4C:C6:9E:1A:55:A3:7B:11:6D
Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
Certificate issuer:       /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Certificate serial:       01A0C39FC152079A6C97C3A92BBEC157BBDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
Manifest number:          1A67
Signing time:             Mon 21 Sep 2026 11:00:21 +0000
Manifest this update:     Mon 21 Sep 2026 11:00:21 +0000
Manifest next update:     Tue 22 Sep 2026 11:00:21 +0000
Files and hashes:         1: 665tLmaCcMewxouqGyV9AcCyzHQ.roa (hash: q0YXAbJvDBEEtJJ3Km15Pnm2Ou6SZOvu9jgXiMCzq2o=)
                          2: C7Heg8nbJh5gPNx3smEmsF9i1rg.roa (hash: tvX4saAC2lDOGizl6LS7T8WHcp1UVuikBaA2xfEmzko=)
                          3: HvD-KyEebZg0h4HW06zJm6RwnGU.roa (hash: VtrmuoyXYF78h8UEa9MliL+Xy0F2Gl7FRj7/hpHAjYA=)
                          4: TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl (hash: puH6xRhfTcTmoVcZk3tsj1BXypukPm0/r7R4JcBGLpU=)
                          5: Vka3aB9XlaAZaXatPcABq9MMMZ8.asa (hash: 2gWes96a72UxE1XgEF2/Y4kVdM/LCqKAtV5HrBf3vqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:9f:c1:52:07:9a:6c:97:c3:a9:2b:be:c1:57:bb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
        Validity
            Not Before: Sep 21 11:00:21 2026 GMT
            Not After : Sep 22 11:00:21 2026 GMT
        Subject: CN=a624f1b1c23c21d5cccfe74cc69e1a55a37b116d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:2f:8e:f5:25:72:57:92:ea:23:fd:be:e3:bb:
                    92:b4:04:f7:22:50:19:f1:00:01:de:d9:d3:a0:73:
                    63:81:52:d9:90:e9:7a:43:81:af:7a:81:4f:3a:96:
                    88:41:56:18:68:2d:2c:85:e6:d4:ab:90:e1:91:be:
                    ec:3a:2e:e4:f9:c5:d5:88:ed:6c:3a:bc:a7:85:1f:
                    1b:7a:c6:be:28:66:96:4f:ad:cd:29:58:d4:89:1a:
                    8a:36:34:51:1b:3f:2f:a7:32:57:00:f9:68:a8:d3:
                    ca:1e:b9:62:92:b9:59:f8:51:59:ca:d4:c7:9f:dd:
                    78:3b:bf:d3:2d:1e:87:17:7e:db:6e:3a:97:68:c4:
                    68:37:fd:3d:eb:0b:f1:c9:a0:6f:e9:5c:f1:89:67:
                    c9:41:4a:0a:cb:8f:33:1f:bc:6b:09:b8:a8:cb:09:
                    75:4b:3f:c8:02:7b:62:06:bf:eb:3f:a2:dd:22:b4:
                    95:4c:04:8c:9b:d9:60:6b:a9:a1:e8:13:d5:5b:86:
                    5b:28:fb:57:83:d2:05:ed:fe:e8:9a:f8:e7:2c:28:
                    21:36:d2:e3:a9:f3:36:47:3b:34:ea:c1:3c:9b:0e:
                    98:53:f2:3b:51:a5:50:a5:7b:3e:84:13:8b:e2:62:
                    56:c6:d9:ab:d5:5f:09:79:eb:cb:5e:bc:5d:44:b9:
                    08:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:24:F1:B1:C2:3C:21:D5:CC:CF:E7:4C:C6:9E:1A:55:A3:7B:11:6D
            X509v3 Authority Key Identifier:
                keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:9c:97:4c:e4:5c:44:07:01:c6:59:15:d2:d6:41:e3:eb:54:
         fa:c5:e3:2b:ae:8d:e6:8c:aa:c0:19:78:02:14:81:82:2a:15:
         63:b9:53:34:ff:31:ad:e0:f5:08:04:43:a4:5f:13:3d:33:3e:
         14:51:0b:03:05:56:95:84:d8:ef:8d:32:14:fd:7b:e2:2c:ef:
         b4:73:14:ed:fb:75:65:3a:ed:9b:14:b9:fc:31:a0:5a:8a:49:
         5f:3a:38:f9:59:26:f7:84:2b:4f:f5:4f:ee:82:87:f4:55:8b:
         72:91:73:ed:68:4b:be:8f:ab:de:3a:d3:64:42:b6:ee:59:9b:
         47:9a:fb:32:66:2b:96:56:38:f1:b4:af:d1:f4:13:82:57:f2:
         d1:48:46:44:50:69:03:05:c7:0f:a5:7a:c8:6b:9c:d3:7c:28:
         8c:5c:30:80:ea:60:1c:0e:d5:f8:99:ff:74:7f:6f:5d:bc:6c:
         a3:2e:09:60:cf:4c:1e:86:83:51:b0:51:54:cd:c7:f5:02:82:
         28:92:46:aa:39:a1:67:3b:73:a3:6a:ed:e2:e2:ac:76:63:65:
         be:a1:e0:b6:11:a6:82:4e:e7:58:bd:2b:08:a5:63:f9:bb:28:
         1f:6e:71:99:8e:92:8f:56:36:91:96:e1:b1:5b:a2:f5:c2:cf:
         7b:b7:0c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:48:47 2026 by rpki-client