Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
File:                     D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft (raw, json)
Hash identifier:          IBfva2IeWuIUyqi4m/aFTcfBt37WDnXn06fprLQNJVE=
Subject key identifier:   AB:03:41:EC:CD:C6:A4:87:12:8C:BB:CC:40:29:71:BE:56:F8:61:CA
Authority key identifier: 0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B
Certificate issuer:       /CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
Certificate serial:       01A0C28CEB506AC805C296DADBEE1ADA0A0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
Manifest number:          0CBA
Signing time:             Mon 21 Sep 2026 06:00:10 +0000
Manifest this update:     Mon 21 Sep 2026 06:00:10 +0000
Manifest next update:     Tue 22 Sep 2026 06:00:10 +0000
Files and hashes:         1: D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl (hash: l/qXfULo1Xpha4jGY3don2k9dIBb6V7eeOz2ZfEy4rY=)
                          2: RZQiwmw-LTuvBT8bKGu9sePwQKA.roa (hash: 30MASV+eS5v/knDU6PvbB3wtKl60C43+n0OVN/QWwQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8c:eb:50:6a:c8:05:c2:96:da:db:ee:1a:da:0a:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f827a5a24e771cc14fa69bb74b3e760167b026b
        Validity
            Not Before: Sep 21 06:00:10 2026 GMT
            Not After : Sep 22 06:00:10 2026 GMT
        Subject: CN=ab0341eccdc6a487128cbbcc402971be56f861ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ec:a2:02:d0:bf:2e:5b:49:69:63:ec:b0:01:
                    91:c5:48:4e:75:f7:c9:6f:d7:3c:d8:f6:f8:d7:91:
                    d2:cf:b0:21:b8:85:88:e7:ed:a2:aa:6b:c3:00:6b:
                    fb:1f:e3:97:0a:32:64:01:f3:c6:d4:a1:b9:d0:7a:
                    10:47:46:0c:6b:a8:bc:57:78:05:70:0a:08:c2:e9:
                    7c:d4:d8:ef:49:82:e4:23:da:c5:f5:52:5f:ed:91:
                    31:33:05:e4:0f:d3:18:a4:3b:dc:22:e6:ba:7b:10:
                    f8:68:02:35:c7:66:f2:1a:84:65:3e:f0:2f:55:22:
                    85:54:ae:0d:5c:41:4f:69:ed:df:36:af:98:1a:f4:
                    9f:9a:70:2b:2b:4e:79:ab:4f:3a:2b:d7:73:66:11:
                    3e:cf:92:91:f9:b1:15:ac:57:0d:01:1e:07:f4:13:
                    d6:8d:8d:99:9e:72:76:5c:c3:3e:da:8d:bb:0f:47:
                    1d:65:88:1f:35:52:5c:8c:59:1c:05:78:6b:6d:43:
                    08:e0:99:af:6d:fb:cf:54:ac:ee:4d:7f:0d:68:f7:
                    66:f8:f7:90:86:87:af:2c:87:5d:83:a6:f6:7f:10:
                    de:df:4b:39:57:01:33:9c:6a:af:a2:84:84:1f:05:
                    ae:11:52:13:4b:13:49:37:5d:d7:ee:c8:62:6a:19:
                    eb:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:03:41:EC:CD:C6:A4:87:12:8C:BB:CC:40:29:71:BE:56:F8:61:CA
            X509v3 Authority Key Identifier:
                keyid:0F:82:7A:5A:24:E7:71:CC:14:FA:69:BB:74:B3:E7:60:16:7B:02:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4J6WiTnccwU-mm7dLPnYBZ7Ams.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/24a6b3-2e60-4463-920b-cbdaed0d00ad/1/D4J6WiTnccwU-mm7dLPnYBZ7Ams.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:53:97:3e:0f:0a:2d:00:ca:ed:2a:20:98:d8:9b:57:91:a2:
         cc:81:94:b3:ee:b6:df:8e:49:5a:2e:d1:fb:d4:f9:aa:ce:f9:
         0f:e7:e7:a5:ba:c7:29:59:58:c9:15:c7:a4:92:0d:7e:1f:1c:
         0a:70:9b:33:8c:b0:ef:99:6d:3e:a7:4d:7f:50:0a:69:eb:6e:
         61:46:7b:89:b1:b9:34:4e:d5:30:a7:25:f6:5a:19:c0:34:f2:
         1a:a3:86:67:7b:bf:dd:b2:e9:1a:85:de:48:53:1c:c7:a2:39:
         d4:6e:da:d2:4a:ed:76:ba:89:22:9f:7f:68:2a:75:bd:d8:b9:
         f8:c9:05:de:13:2d:76:ff:58:37:cb:3e:18:3c:2b:c6:26:ab:
         94:f7:e3:c8:00:ba:49:b0:9b:ad:0c:d5:1e:33:83:4a:37:0e:
         59:f3:f1:b8:f9:12:ae:69:4f:23:e8:a7:8d:28:07:37:44:1a:
         da:b8:9c:70:01:18:19:01:9d:b3:5e:01:a9:5f:04:76:ec:e9:
         62:5f:eb:24:38:67:dd:d5:91:c7:d4:d3:35:d1:1b:ea:d2:7c:
         fe:2c:b3:9d:f6:d1:02:82:f1:4a:82:68:8b:cf:47:7a:18:04:
         10:f0:7b:33:e9:1b:cb:2b:3f:8e:1b:f4:02:89:a1:fc:f6:69:
         c6:04:be:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:37:24 2026 by rpki-client