Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
File:                     1-Pc8XA86EGqLp9_z41yBbRB43HE.mft (raw, json)
Hash identifier:          hmaFbsDEV9QZU2bJOTtNfbK7V9z9JJ/teDUWFRpwzPI=
Subject key identifier:   B0:7B:DE:E9:E7:44:0D:B7:AF:B5:F6:75:4E:52:9A:39:3C:CC:27:D6
Authority key identifier: F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71
Certificate issuer:       /CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
Certificate serial:       01A0C58E065A535D10C96BD5A3879F3788FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
Manifest number:          1A6E
Signing time:             Mon 21 Sep 2026 20:00:14 +0000
Manifest this update:     Mon 21 Sep 2026 20:00:14 +0000
Manifest next update:     Tue 22 Sep 2026 20:00:14 +0000
Files and hashes:         1: 1-Pc8XA86EGqLp9_z41yBbRB43HE.crl (hash: q1AQg1SvpqXTHo6MaVdZM4XRT5e7hKsXeXbeFMUiUOg=)
                          2: 37GSYGpAIN5FmTc65bBlmOruleU.roa (hash: JskQXpElXo63e0l7EMdmNpQ5SlR6rEV35BDXEtseiFQ=)
                          3: GEmrHZiocuP3uGGu2fdf9GiH_oI.roa (hash: bqGaJMwhtgjzoA4tEVMy3ciK+ou3gzZ+eYmOVgdgS0o=)
                          4: PPv13jMczQJ97qYM8qnYp5GY4eY.roa (hash: xrqvSTY5mlsKJbUsZ3kCmkscnCE0qbohIQer6JB0DNc=)
                          5: _RCr9LUebfRKK9_S9NEI7YdE54o.roa (hash: Ly2P339nCiky0TDj+07otBCcuYQ4rfNr5L4NI3DPlbY=)
                          6: lmotZZaP-oLJszIL5yzQv1G62qo.roa (hash: CVe5HA8XTkB4hUBikhtIn8qce4VsU+h5vTnqP0aGAi0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:8e:06:5a:53:5d:10:c9:6b:d5:a3:87:9f:37:88:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8f73c5c0f3a106a8ba7dff3e35c816d1078dc71
        Validity
            Not Before: Sep 21 20:00:14 2026 GMT
            Not After : Sep 22 20:00:14 2026 GMT
        Subject: CN=b07bdee9e7440db7afb5f6754e529a393ccc27d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:dd:73:b5:10:2f:d1:78:7f:9f:b2:6d:13:64:
                    0a:3c:5c:8c:2d:94:3d:fc:55:f4:4a:38:6c:e0:28:
                    47:36:a3:77:53:ba:89:81:30:ac:fc:c3:ea:49:51:
                    11:33:84:70:21:52:46:08:04:a6:2b:9e:be:02:2f:
                    36:e7:7b:79:46:0a:3c:5e:e6:9c:a5:cc:8f:fb:ff:
                    9a:25:1d:b1:80:aa:1f:d0:e9:ac:82:c5:a4:66:3a:
                    cb:84:f4:5c:eb:12:cb:ec:23:1c:85:90:06:6e:b6:
                    91:a9:95:dc:18:95:b4:b7:0b:cc:4e:c1:9e:db:6c:
                    dc:19:b2:d3:8c:55:ee:bd:78:a6:ee:90:80:54:5d:
                    76:73:bb:6d:2d:5e:e8:42:8b:c0:ae:f9:db:b5:df:
                    33:00:b4:47:74:6d:57:88:56:9a:b8:52:f5:66:f7:
                    fe:57:de:42:4c:f7:f2:c7:51:e0:7e:3a:08:7c:18:
                    9e:70:db:41:ac:a4:87:17:ed:47:bd:87:0d:96:02:
                    b1:b1:b2:40:36:67:10:32:94:48:e5:6a:9b:54:15:
                    f0:23:93:34:76:3c:c6:0d:e9:e9:77:fb:92:ed:51:
                    c9:09:be:41:74:80:a3:24:6d:01:2e:da:13:c6:5f:
                    76:e6:df:fa:46:f3:db:78:bf:40:74:7f:11:5f:0e:
                    0f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:7B:DE:E9:E7:44:0D:B7:AF:B5:F6:75:4E:52:9A:39:3C:CC:27:D6
            X509v3 Authority Key Identifier:
                keyid:F8:F7:3C:5C:0F:3A:10:6A:8B:A7:DF:F3:E3:5C:81:6D:10:78:DC:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Pc8XA86EGqLp9_z41yBbRB43HE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/03cce3-e620-4483-b08b-6d8fd330e9aa/1/1-Pc8XA86EGqLp9_z41yBbRB43HE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:4b:ef:f6:a4:21:71:f5:cb:e2:47:9d:43:c0:92:a0:b3:46:
         c8:e2:d5:7c:2a:e0:79:09:4b:1f:35:c9:ec:34:c7:b4:b3:64:
         8b:ec:dc:ab:df:12:d9:3a:1c:cf:03:07:68:ae:8f:9c:22:98:
         ed:d6:36:9c:c9:0a:4a:89:43:ae:fd:5f:17:81:f2:5e:65:cd:
         6f:b6:6d:32:d0:9a:75:a3:1b:47:39:9f:2c:21:f0:03:7c:ba:
         ea:a1:3f:f2:8e:56:2b:f2:90:5f:e5:e7:ec:22:36:09:20:c8:
         12:b4:74:bc:e8:74:8c:e2:02:db:86:a7:cb:94:32:8f:2f:c2:
         df:cc:38:91:d9:65:83:78:54:b1:2c:f2:4e:db:ba:c2:64:d5:
         5c:6a:d5:59:de:b5:33:e0:cc:e1:94:8e:93:38:7b:86:0b:f5:
         33:5e:73:7b:3a:a2:b4:a0:96:b2:1f:25:45:56:41:ad:e7:a4:
         dc:8b:96:28:6f:7e:7c:06:c2:b1:2c:c5:b5:e2:28:1a:ba:64:
         d1:ca:56:90:8f:ab:48:9d:f9:0b:7f:fa:99:40:fb:69:7d:b6:
         95:a5:a0:2f:ad:bb:a0:e3:3c:7a:7b:a6:c7:b4:64:cb:3a:2e:
         2b:62:8b:21:72:b5:71:e8:6a:40:e0:c0:e2:ff:db:b6:98:a4:
         1b:3e:1d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:37:37 2026 by rpki-client