Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
File:                     pX1M_mD4owpND_lLlOut_IjJrBE.mft (raw, json)
Hash identifier:          yOStVzLWrk9qbsUx6MIkOMVTTCOf9Ve/MASTVL0S5lE=
Subject key identifier:   56:B6:BD:AB:C9:C9:60:60:3B:05:C2:24:D0:0F:C6:D9:77:A2:10:BB
Authority key identifier: A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11
Certificate issuer:       /CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
Certificate serial:       01A0CB59F7714B9B701BA9DAB19E03ECF1A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
Manifest number:          113A
Signing time:             Tue 22 Sep 2026 23:01:05 +0000
Manifest this update:     Tue 22 Sep 2026 23:01:05 +0000
Manifest next update:     Wed 23 Sep 2026 23:01:05 +0000
Files and hashes:         1: 1y-vwZVrMYSQ5PEHPoi2QvehQzI.roa (hash: cYggAnbxJcT3dfayKBFM1pT3DCCSeOQKuJH//n4lQos=)
                          2: pX1M_mD4owpND_lLlOut_IjJrBE.crl (hash: CzsffYtvnhVzpJt/9N5MNFyK3H25493+Tjdb+05QzIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:f7:71:4b:9b:70:1b:a9:da:b1:9e:03:ec:f1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a57d4cfe60f8a30a4d0ff94b94ebadfc88c9ac11
        Validity
            Not Before: Sep 22 23:01:05 2026 GMT
            Not After : Sep 23 23:01:05 2026 GMT
        Subject: CN=56b6bdabc9c960603b05c224d00fc6d977a210bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ad:fb:62:57:a0:60:76:aa:3c:c2:dc:9c:94:
                    b5:f1:c0:37:61:36:c6:35:0b:c9:c4:db:5d:eb:40:
                    ea:35:2d:65:ff:89:a1:85:bc:7c:00:64:f1:34:60:
                    38:5f:fa:4a:66:e6:db:14:b7:4e:df:c0:e7:8c:dc:
                    28:56:42:9f:91:59:64:94:26:13:d7:c0:dd:9c:03:
                    16:29:a1:9d:90:98:fd:1f:00:40:19:69:d6:21:6b:
                    ae:b4:c2:1b:a3:60:45:42:11:e1:17:3e:9a:62:6a:
                    da:01:f1:cf:4a:ea:c8:df:4f:b7:cc:df:6d:b7:d9:
                    4a:df:f4:ef:ce:15:12:ea:d8:85:4c:f5:a9:3a:18:
                    c8:9e:35:66:a7:71:80:69:dc:96:e5:3a:81:4c:17:
                    a7:bd:83:33:6d:ed:9a:35:e3:86:17:ef:7e:35:cf:
                    d3:30:79:30:73:bc:ad:17:49:52:d2:43:00:eb:f4:
                    ac:b0:b5:d8:ca:8e:50:6e:73:5d:71:3a:22:30:2b:
                    d6:25:1f:4d:a2:63:78:d5:3e:e6:ef:31:06:1d:7c:
                    f9:83:3d:d1:79:1c:63:5a:c2:12:94:a5:63:ee:bd:
                    82:10:48:a5:e1:d2:55:65:09:6b:45:dd:72:e1:80:
                    d8:70:99:f9:b7:00:97:fb:1f:ee:5d:58:ff:39:a0:
                    cd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B6:BD:AB:C9:C9:60:60:3B:05:C2:24:D0:0F:C6:D9:77:A2:10:BB
            X509v3 Authority Key Identifier:
                keyid:A5:7D:4C:FE:60:F8:A3:0A:4D:0F:F9:4B:94:EB:AD:FC:88:C9:AC:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX1M_mD4owpND_lLlOut_IjJrBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/48c072-22de-44d7-bed8-e80f32073f3d/1/pX1M_mD4owpND_lLlOut_IjJrBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:46:60:14:99:61:f1:65:2c:ca:9d:c1:f8:9e:8b:47:88:de:
         d5:7d:f5:96:57:54:7b:a2:7f:f4:44:cd:41:cb:2c:dd:19:9a:
         06:7f:42:ab:09:a3:37:68:9a:24:35:67:54:1d:8b:9e:e4:73:
         f8:62:22:e8:5f:97:2a:2d:e1:00:d2:32:1d:20:fc:1a:5b:99:
         0f:eb:57:3a:17:c1:08:e0:c4:e3:e9:a7:13:ea:de:c1:a5:9f:
         07:86:26:df:4e:30:8e:3b:f8:65:05:4e:c3:88:20:fd:20:ed:
         50:13:01:81:63:a3:c6:b9:9a:90:e4:e4:9d:6d:68:74:69:de:
         17:93:1a:03:7e:fa:44:86:c8:98:ae:6b:96:d3:1a:f6:73:20:
         a2:4d:b5:00:34:d4:52:fd:1d:58:c0:d7:86:1b:6c:fb:30:b6:
         59:4a:3f:d2:92:4e:5e:48:f1:50:6f:91:7d:cf:bc:81:49:63:
         2d:c7:55:ee:4f:a9:16:e7:c8:56:e7:d4:5c:ff:d3:c2:c0:0c:
         65:14:7f:53:8a:da:d1:25:06:8b:4f:14:9c:96:b9:6d:d2:d9:
         86:f1:7e:06:04:6f:7c:4b:2c:8c:22:30:04:42:3c:c3:8d:b9:
         c8:c6:a8:8e:a2:d9:d0:69:35:f3:1d:f6:17:fb:c1:a5:68:6a:
         e8:f2:a4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:32:21 2026 by rpki-client