Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
File:                     sUq6i2B0k5NHjoPDYObL110Vb4k.mft (raw, json)
Hash identifier:          vVwXkVY3rrkjakHhGe+qFKxMZhBe8FKU4tikxf8ou5o=
Subject key identifier:   EA:A7:1F:8D:A0:6F:73:7A:33:36:B6:BC:A3:38:EC:AA:CC:E8:EA:53
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Certificate issuer:       /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial:       01A0BDD53668D901F4ACCC4439353EA7EA68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
Manifest number:          1A7C
Signing time:             Sun 20 Sep 2026 08:01:01 +0000
Manifest this update:     Sun 20 Sep 2026 08:01:01 +0000
Manifest next update:     Mon 21 Sep 2026 08:01:01 +0000
Files and hashes:         1: BNGsIBv7sWp2fOKlpI8C175vLlQ.roa (hash: eyM+s9WcByg+YY0/4Dp4QwuY5QeC3jXo3DV9x7QTm5Y=)
                          2: GNnihfuu4jh_yXs-M1krTDUOrlA.roa (hash: 61Jv4z0csr2COmiMGYq3MLC3cHU14wWW5cLQiVVApec=)
                          3: kCsBaUzl0VJzCqTvefgRf9Ora-Y.roa (hash: xGacFlbxros0DtBMF2AYVgiGm+bKu4KlmyADoX0xnf0=)
                          4: nqWDXagxBzxrBVWBHaYrt9rKNS8.roa (hash: 7+e+M3EfBs7lbbCHfGGIHb2Ur/53QLZjVcPqXQmzk1Y=)
                          5: sUq6i2B0k5NHjoPDYObL110Vb4k.crl (hash: ZVLKGSwSym0LbfjskIufCO2P5v7ZpImEXdHX0eaT948=)
                          6: yVjyK7moU749yDHM4YFWLT8BzMY.roa (hash: Qxg8YMNwND54rMep/aY9L2yiJefuWsNWVLjOpvtLiUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:d5:36:68:d9:01:f4:ac:cc:44:39:35:3e:a7:ea:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
        Validity
            Not Before: Sep 20 08:01:01 2026 GMT
            Not After : Sep 21 08:01:01 2026 GMT
        Subject: CN=eaa71f8da06f737a3336b6bca338ecaacce8ea53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:86:32:ce:06:ce:57:53:60:c1:6b:a1:3d:f9:
                    51:3e:b2:c5:85:1b:74:53:5f:a1:91:52:97:f4:18:
                    e7:a4:0a:5e:db:b8:22:a2:7b:75:d0:6b:b6:92:fb:
                    cf:90:01:42:0d:8d:d3:27:9d:54:42:28:23:e8:e1:
                    9e:3a:8c:c7:5c:29:93:02:55:70:f1:0e:6a:a6:4f:
                    41:d1:fb:b3:8f:35:86:d0:4f:53:57:e0:bb:c7:59:
                    bb:38:d7:31:aa:14:dc:fc:59:03:8c:e7:cb:bb:cd:
                    19:7e:ce:f8:5c:5a:d1:dc:a3:52:e7:a2:a1:03:b7:
                    79:18:ce:39:de:aa:89:2f:81:88:a7:88:bd:e5:ce:
                    1d:53:1a:d7:d6:bb:5c:c8:c5:05:69:bd:9d:82:c0:
                    9d:a5:a6:a8:3f:c4:46:74:b8:23:6e:b9:f5:5c:0f:
                    56:5f:49:b7:14:6a:b7:65:1f:ba:ff:42:4d:a8:a3:
                    7c:d5:49:41:b5:1d:95:1c:7b:ee:4d:1d:c0:d7:04:
                    0a:1e:f7:28:b8:19:5f:e4:15:1b:98:51:b7:53:2d:
                    99:d8:cf:13:d3:95:99:68:0e:6b:96:46:6c:fc:90:
                    c3:c9:ab:ae:a5:64:15:ff:7b:3b:6a:1e:51:74:ce:
                    93:db:e1:16:ca:41:fc:a2:93:9b:6f:5e:3a:4e:ef:
                    00:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A7:1F:8D:A0:6F:73:7A:33:36:B6:BC:A3:38:EC:AA:CC:E8:EA:53
            X509v3 Authority Key Identifier:
                keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:21:b8:80:93:7d:c8:88:a8:0a:84:37:55:60:77:5c:3f:23:
         93:e3:d1:89:87:2c:0b:4a:3a:fd:95:75:f7:f1:8f:74:9a:ab:
         1e:95:73:dd:90:ef:86:6c:c5:f7:79:48:e8:ac:0c:c7:df:10:
         a9:21:47:af:ab:e6:f0:d3:7d:22:23:97:f6:21:62:dc:1f:d4:
         13:f4:02:06:a7:57:3b:a9:e4:df:51:4f:df:1a:74:f8:86:a3:
         7e:d0:16:8e:5c:5c:6a:64:32:5d:a4:8b:af:0f:e4:6e:40:23:
         04:7f:7c:b7:b7:38:09:db:fc:44:09:41:f1:b3:da:e4:c6:4a:
         4a:48:30:ba:2b:ea:ee:16:c3:8b:ae:d2:ad:e5:ee:3d:0c:ae:
         ab:82:c8:aa:ac:d4:0e:c1:ca:a0:cd:c8:8c:61:44:5f:3e:10:
         0a:71:4f:ca:99:2f:c8:26:13:d1:89:a0:09:81:07:94:ec:73:
         99:c1:b7:53:b6:64:30:73:7a:b8:74:72:b3:bb:2b:db:73:dd:
         35:a4:de:3f:e5:fc:06:4a:da:8f:04:27:3e:0c:24:a5:6f:16:
         25:7d:fb:27:cc:70:98:75:ca:c6:26:9e:9b:60:f3:ec:6d:56:
         c7:e3:f1:1c:50:d5:67:20:f2:fd:ea:b6:99:ad:87:83:a0:3c:
         a2:53:8c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:52:40 2026 by rpki-client