Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
File:                     sRI3DKJgErTR0BVM73IwvYmluV0.mft (raw, json)
Hash identifier:          8dAkQJ4NS9tM2E3ONBIhR+oCzIfidJKgfm5XSu2PjkA=
Subject key identifier:   79:72:78:7F:43:FE:1A:DF:13:B7:0F:1E:64:14:1E:0F:89:99:47:56
Authority key identifier: B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D
Certificate issuer:       /CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
Certificate serial:       01A0DF17D9822C8FC7CCDDBE5B08A070DCC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
Manifest number:          0231
Signing time:             Sat 26 Sep 2026 19:01:17 +0000
Manifest this update:     Sat 26 Sep 2026 19:01:17 +0000
Manifest next update:     Sun 27 Sep 2026 19:01:17 +0000
Files and hashes:         1: JQHbkZiCoz_ArYL3K_jRaitcYso.roa (hash: LSS9szWjmAex/d/OuZRvWyhXy/Z+aR2BRiVKGpC62GY=)
                          2: sRI3DKJgErTR0BVM73IwvYmluV0.crl (hash: 3MAiD5UFHKMD3w9BKgaXDfnHtYQ7lqeU0ys1tzzCdC4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:17:d9:82:2c:8f:c7:cc:dd:be:5b:08:a0:70:dc:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b112370ca26012b4d1d0154cef7230bd89a5b95d
        Validity
            Not Before: Sep 26 19:01:17 2026 GMT
            Not After : Sep 27 19:01:17 2026 GMT
        Subject: CN=7972787f43fe1adf13b70f1e64141e0f89994756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:47:7f:56:23:28:36:9e:a2:22:f9:be:67:f3:
                    91:1e:3f:9a:87:52:fa:26:6c:0b:05:b2:99:49:c8:
                    7c:00:e4:ba:8b:21:00:a0:48:f8:56:a9:56:c7:d8:
                    ab:e2:55:ee:37:33:e0:bf:11:13:17:af:51:22:fa:
                    52:7d:f4:47:62:82:9f:28:1f:48:96:94:89:53:77:
                    bf:20:c1:49:af:9c:a5:6f:6e:38:66:6e:b9:e2:76:
                    7b:cf:66:b7:d8:27:02:e0:3c:80:74:a9:08:88:bc:
                    33:66:db:f3:2f:d3:c1:29:1c:e1:2e:41:81:81:b9:
                    57:7a:8a:d8:7a:de:5f:40:ac:37:69:46:54:13:41:
                    c9:8e:05:dd:ee:c4:43:63:2c:4e:b4:f3:56:87:31:
                    4e:ac:2a:55:01:57:a2:80:18:af:23:a7:89:68:46:
                    bc:5f:ce:f5:1a:d3:ca:bf:bd:cd:fd:4e:2d:d3:4f:
                    2c:45:26:c2:03:1f:98:8c:98:07:fc:17:0d:1f:65:
                    ee:eb:06:02:b2:40:2c:1b:d2:cb:73:81:ab:73:f6:
                    df:71:a8:c7:f9:de:3e:63:f4:ac:e6:ff:7c:0b:ef:
                    32:b5:17:6f:5a:81:27:9e:96:6c:df:3e:50:bb:93:
                    a3:f2:bc:6b:95:ad:84:ba:6a:ec:55:6c:d2:7b:6b:
                    0c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:72:78:7F:43:FE:1A:DF:13:B7:0F:1E:64:14:1E:0F:89:99:47:56
            X509v3 Authority Key Identifier:
                keyid:B1:12:37:0C:A2:60:12:B4:D1:D0:15:4C:EF:72:30:BD:89:A5:B9:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRI3DKJgErTR0BVM73IwvYmluV0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/027208-40dc-412a-b64c-38bf1e942a64/1/sRI3DKJgErTR0BVM73IwvYmluV0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:44:7f:6f:5e:f4:a3:c3:78:cd:0f:42:08:0a:42:00:70:98:
         9e:e5:68:6f:cf:99:07:69:6a:1c:4d:95:92:10:f5:64:32:82:
         89:55:46:ca:20:10:f8:a6:76:95:90:c3:10:21:5e:44:41:eb:
         2f:1c:10:17:92:c6:f5:b7:98:b9:6e:9f:a5:dc:f4:0e:d1:ea:
         0c:88:9e:41:2f:eb:12:cf:74:e4:bf:dd:ff:e9:54:5b:25:b4:
         08:fe:66:15:d3:1b:fb:d6:c7:06:0c:4a:ac:79:71:0a:ab:ec:
         5f:c7:6a:6b:5c:c3:d0:ee:3e:9f:ca:65:c3:a0:89:ba:11:ec:
         0e:fc:d2:b6:6e:08:0b:81:6b:fb:71:8c:c6:9e:0c:5f:d1:4b:
         3e:52:25:01:cc:a7:c1:c0:9d:fa:47:fe:b1:6a:bb:44:97:e9:
         a0:e2:21:2f:4d:6e:65:48:21:27:0a:9a:cf:d2:d6:8d:70:27:
         7d:fc:b3:3f:ce:a1:66:19:16:2c:15:49:c9:9a:9d:9a:36:bf:
         8b:f6:69:28:31:8a:df:be:64:7c:a1:41:7d:70:4e:47:4c:dd:
         ac:37:2d:80:ea:ec:dd:03:dd:db:4d:f8:fb:e9:99:c5:17:b3:
         cf:e1:d3:c6:48:49:ef:09:6f:0d:85:5a:32:c8:f0:19:07:69:
         a1:fd:6a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:56:27 2026 by rpki-client