Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
File:                     ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json)
Hash identifier:          muIdb/smPnTFavb5swn7YJ3z5Ny2dzItP4N2tEDp10A=
Subject key identifier:   07:71:6C:3B:EE:28:B5:1F:7A:E8:BF:DE:D4:F0:70:41:E3:A9:99:E3
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       01A0DC85720447A041A71B5A017E1C583441
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
Manifest number:          1AB0
Signing time:             Sat 26 Sep 2026 07:02:08 +0000
Manifest this update:     Sat 26 Sep 2026 07:02:08 +0000
Manifest next update:     Sun 27 Sep 2026 07:02:08 +0000
Files and hashes:         1: 5dAVtaJIi1EXqqYU5USv7fZXPs4.roa (hash: F+ZaLmkSoDDXKvEZfC55Pqn2Kegitmab6UvzlFAoMLA=)
                          2: EYW0DPWxBVq8OkJlufsQTH29-zg.roa (hash: LYmKFSnt04HxJKJsThK8gfh7k7FUGUtbXQNPAEzqIUM=)
                          3: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: 8qmU0BVX4lm1WFW3ndMFacEjNHgmRChDI/OnyWM4Ub0=)
                          4: WyfVVVbupjvPxLzRmrpKaA7AkYw.roa (hash: 02QZajpOlAkNu8PwY46zt4fm5XsA4QV5bfhzU3rgZmo=)
                          5: Y_29QVsVJvHnxddFaQdcq2kyCOc.roa (hash: ycsC5DW4Lfa6OQ8J1BIx0zDPciZcjwI4JTfmbrMI8V0=)
                          6: _MW7W40W598GgASR5Eoa_4tP1ko.roa (hash: aru9WUwoYSO6XyN5TKKL7ZyhgIa+93XhWqRZBdE8/Ss=)
                          7: kyJQs5we30dtkYez5Z5lc7nb1uk.roa (hash: QYkWAPu1QeZJ7qVGGJyIAFdYbqAhnaEmDRslgqPIGEg=)
                          8: vkSBou13YVLJcpm4RzlvkM2VmEA.roa (hash: Yt5SBPreKEhsGRzUNTyivVfBSSg7gYCaurShg3S49zg=)
                          9: w66ZldWus98F7FLtFE_HfwzAVOw.roa (hash: dMhZ2iCHZg0KsJ/1R4eui0OO1+pgGYsJE5mhqZ9ftyc=)
                          10: yGko-YtBNaNvOP4tDs7GDUXg2eA.roa (hash: wSaHrBildo4ZcOo9cc+dzQPk/7VlKqTO3FnCX6x1CG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:85:72:04:47:a0:41:a7:1b:5a:01:7e:1c:58:34:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Sep 26 07:02:08 2026 GMT
            Not After : Sep 27 07:02:08 2026 GMT
        Subject: CN=07716c3bee28b51f7ae8bfded4f07041e3a999e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ed:75:56:c2:7a:3e:5e:52:d8:0d:39:f4:2f:
                    b0:6c:e6:09:78:94:6a:b3:e1:ed:02:cb:0c:c2:fb:
                    1f:a9:b3:38:e7:c2:d2:3d:23:dc:ac:af:4d:48:1e:
                    3d:60:76:e7:91:e3:6a:7c:b5:f4:15:05:7c:73:ef:
                    9d:95:1d:db:02:a7:db:0c:d4:ca:48:5b:7c:8a:ef:
                    ad:26:0a:38:5d:0c:82:92:a9:5b:a1:f7:46:cf:13:
                    fc:f3:f2:d5:6e:cb:6e:aa:df:1f:38:e8:8b:44:1d:
                    05:09:b2:e1:ed:3c:c4:f1:40:a1:ea:fe:f3:77:01:
                    ff:62:e5:47:3d:8a:b9:ce:86:a1:4b:0e:07:ef:08:
                    18:0a:04:6a:fc:02:66:72:73:22:35:30:7a:53:7e:
                    95:2b:40:29:82:09:cf:78:e4:d1:fc:7f:7c:48:37:
                    bb:a6:4c:db:6d:d3:ed:d5:bf:6f:32:71:88:bb:27:
                    ab:f4:49:60:6b:a0:42:47:c1:9a:f1:a7:e9:b5:b5:
                    1d:7e:83:32:31:9d:5a:a5:c3:99:04:42:f1:75:6d:
                    7c:46:c0:b3:b7:0b:23:81:32:f5:b3:07:f2:fd:a1:
                    11:97:7c:b4:9a:af:ec:87:ae:73:01:a9:ae:97:77:
                    0b:53:a7:b9:e8:8e:67:49:b7:e0:45:d6:21:e3:eb:
                    03:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:71:6C:3B:EE:28:B5:1F:7A:E8:BF:DE:D4:F0:70:41:E3:A9:99:E3
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:52:62:b7:57:04:d0:92:37:27:50:dc:51:a8:fb:b6:f8:ed:
         3a:4b:92:2a:e6:76:c5:4d:e3:17:87:60:d3:d5:8b:eb:da:22:
         01:60:59:b8:ca:19:e7:3e:de:3b:00:c9:02:98:a0:2d:26:ed:
         51:56:9c:f9:45:61:35:4b:76:f6:3f:bf:22:96:91:14:95:2f:
         d7:95:db:65:20:7d:20:e6:17:6c:7e:1e:75:39:8f:c9:30:f2:
         99:6a:60:77:62:2a:8f:ea:66:34:60:22:98:5e:2f:6f:68:85:
         58:f2:3e:81:2d:c5:fb:bd:a6:d4:6a:e3:2a:b6:f6:92:0f:f0:
         e4:92:79:18:1b:a3:12:6e:4b:8c:0f:e8:05:a7:44:16:71:28:
         a3:21:1a:f1:5e:e7:9f:c7:57:62:6e:8f:57:a0:86:53:e9:87:
         13:dd:c5:30:37:1b:ef:4b:34:e0:87:bd:37:02:6d:1c:0a:6b:
         59:5d:c9:33:16:4c:dd:8a:31:e2:ae:41:66:74:9c:2d:65:cc:
         30:63:14:1f:2b:65:4f:18:71:73:03:59:b8:f1:ef:a9:ed:69:
         f3:25:fe:87:1d:1d:59:dd:b5:f5:81:44:bc:6e:67:29:3d:1f:
         f3:b1:4d:76:fe:db:d9:ba:8c:e4:fa:78:47:f3:89:0f:17:07:
         ea:04:84:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDchXIER6BBpxtaAX4cWDRBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMTlmMDUyYmM5ZTcyODQ4ODgwNzQzOTBjOWQwYmMxMjc2
MDY2OTIwHhcNMjYwOTI2MDcwMjA4WhcNMjYwOTI3MDcwMjA4WjAzMTEwLwYDVQQD
EygwNzcxNmMzYmVlMjhiNTFmN2FlOGJmZGVkNGYwNzA0MWUzYTk5OWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u11VsJ6Pl5S2A059C+wbOYJeJRq
s+HtAssMwvsfqbM458LSPSPcrK9NSB49YHbnkeNqfLX0FQV8c++dlR3bAqfbDNTK
SFt8iu+tJgo4XQyCkqlbofdGzxP88/LVbstuqt8fOOiLRB0FCbLh7TzE8UCh6v7z
dwH/YuVHPYq5zoahSw4H7wgYCgRq/AJmcnMiNTB6U36VK0ApggnPeOTR/H98SDe7
pkzbbdPt1b9vMnGIuyer9Elga6BCR8Ga8afptbUdfoMyMZ1apcOZBELxdW18RsCz
twsjgTL1swfy/aERl3y0mq/sh65zAamul3cLU6e56I5nSbfgRdYh4+sD2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAdxbDvuKLUfeui/3tTwcEHjqZnjMB8GA1UdIwQY
MBaAFBMZ8FK8nnKEiIB0OQydC8EnYGaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUt
MmMxYTc3MzBiZDI1LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kNWJiY2UtNDIyMC00ZWM0LThhZjUtMmMxYTc3MzBiZDI1
LzEvRXhud1VyeWVjb1NJZ0hRNURKMEx3U2RnWnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglJit1cE
0JI3J1DcUaj7tvjtOkuSKuZ2xU3jF4dg09WL69oiAWBZuMoZ5z7eOwDJApigLSbt
UVac+UVhNUt29j+/IpaRFJUv15XbZSB9IOYXbH4edTmPyTDymWpgd2Iqj+pmNGAi
mF4vb2iFWPI+gS3F+72m1GrjKrb2kg/w5JJ5GBujEm5LjA/oBadEFnEooyEa8V7n
n8dXYm6PV6CGU+mHE93FMDcb70s04Ie9NwJtHAprWV3JMxZM3Yox4q5BZnScLWXM
MGMUHytlTxhxcwNZuPHvqe1p8yX+hx0dWd219YFEvG5nKT0f87FNdv7b2bqM5Pp4
R/OJDxcH6gSEJg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:08:29 2026 by rpki-client