Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
File:                     CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json)
Hash identifier:          7N1vlWX2nIT0Ap7C9eXCH9DZvQ9azkmlmrJgaZif8Jw=
Subject key identifier:   36:3C:56:71:1B:3E:BC:F6:A8:3D:DA:61:40:1B:6D:FA:DE:C6:F0:39
Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19
Certificate issuer:       /CN=0a35575b9947ace25ce87774c82775f18977fd19
Certificate serial:       01A0C5C4E4157BDA075067F197A487D0F7FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
Manifest number:          17F3
Signing time:             Mon 21 Sep 2026 21:00:09 +0000
Manifest this update:     Mon 21 Sep 2026 21:00:09 +0000
Manifest next update:     Tue 22 Sep 2026 21:00:09 +0000
Files and hashes:         1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: nIan6YY/xeJP8WMUMJq/OT30yrOuJ5tjxsdbWnukQNQ=)
                          2: Fr5UXfjdMrhEHYQ6Xdia0OdmNWk.roa (hash: 30Ofi4XCsm5vnfPYfxuSwPdN95VWJBJfoWiBcDk1LZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:c4:e4:15:7b:da:07:50:67:f1:97:a4:87:d0:f7:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19
        Validity
            Not Before: Sep 21 21:00:09 2026 GMT
            Not After : Sep 22 21:00:09 2026 GMT
        Subject: CN=363c56711b3ebcf6a83dda61401b6dfadec6f039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:5e:f5:28:3d:ef:43:84:37:d9:a4:62:da:
                    c2:35:bb:92:19:57:03:e1:d0:5b:dd:e8:23:8e:0f:
                    65:29:ae:ed:4f:b7:9f:03:c8:1b:7a:ff:34:e5:f1:
                    5c:f9:1c:79:09:03:4a:3d:4f:5d:bb:d2:10:ef:af:
                    5d:4f:67:79:27:c9:3d:80:a8:3b:dd:18:e9:8f:9f:
                    9b:74:a1:c7:bc:72:ec:0f:95:34:61:84:b3:a6:1d:
                    a6:df:d6:46:a9:0c:71:a2:67:c6:fb:71:8b:b5:ec:
                    ea:73:21:4f:b2:90:e1:98:80:88:17:fe:45:7d:b5:
                    67:f8:01:63:f7:12:1a:1c:1d:96:22:46:b4:f5:20:
                    14:97:80:d3:93:54:6d:ac:24:fa:79:5f:fe:c6:86:
                    0f:ad:cb:1d:f1:7e:ea:8e:8d:ce:61:44:23:8f:e4:
                    91:1f:d3:a2:1a:f5:c3:2d:cd:55:b1:ea:1c:d8:a7:
                    7b:78:bd:17:cb:93:94:52:85:4e:e4:23:55:4d:48:
                    fe:c8:49:81:c8:d1:fa:99:e9:ac:b2:d4:79:86:28:
                    34:5d:6d:a4:05:d1:6d:b9:87:ee:6d:e5:86:03:f2:
                    59:e5:24:6a:9f:f6:1d:79:a9:11:a7:ac:6e:39:ae:
                    bf:cf:22:5d:1b:b9:38:03:54:f3:f5:5a:de:de:63:
                    54:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3C:56:71:1B:3E:BC:F6:A8:3D:DA:61:40:1B:6D:FA:DE:C6:F0:39
            X509v3 Authority Key Identifier:
                keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:a2:0d:16:c5:f5:4d:1d:77:21:70:93:d1:a0:01:16:66:46:
         de:39:ff:4e:de:e3:f9:9f:d3:78:ad:b9:39:22:93:e8:1c:24:
         a1:7c:e9:6a:03:e5:dc:76:52:fd:81:06:18:ac:7a:13:91:0d:
         c3:0b:9f:2f:61:d5:d3:5a:00:05:d9:4f:e3:80:83:89:1a:ab:
         c8:90:c8:48:36:69:d2:1c:e4:ef:80:4f:d9:ce:2a:e4:1f:b1:
         7c:e9:38:17:82:62:88:38:0f:1f:b0:85:af:24:1d:ab:cb:b9:
         34:61:ca:b2:91:50:17:90:4f:1d:c4:af:b1:4e:6f:10:48:fb:
         2a:5f:5e:d1:34:87:76:1f:dc:c5:15:86:df:47:81:45:a3:4f:
         e7:a8:fc:15:66:27:0b:5d:69:22:b0:f2:d8:d1:d2:fe:96:92:
         2f:c9:91:57:0c:82:27:3b:b8:5d:02:1b:7a:af:86:a9:36:0c:
         12:fd:d7:74:35:2b:9a:da:a0:61:44:ee:2a:1d:0e:d9:32:1c:
         e1:79:bd:76:79:ff:39:92:e6:96:19:6a:a4:a4:14:56:42:31:
         52:0c:ed:f0:48:14:ee:09:01:f9:85:12:62:d0:e1:b7:3c:13:
         a6:b6:83:10:14:08:34:38:d7:59:b8:20:77:f6:3f:8b:68:9d:
         8d:bc:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:05:30 2026 by rpki-client