Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
File:                     sDwwLC9SJ349CraEL2iqX40Nd4c.mft (raw, json)
Hash identifier:          wu72rJkxtteP6lmeEEtSGiL9yuDQ9Y2Fb2QvcvkP5Rg=
Subject key identifier:   F6:3E:07:53:07:05:0D:5F:21:34:01:E1:D8:41:BD:39:33:DB:D7:EB
Authority key identifier: B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87
Certificate issuer:       /CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
Certificate serial:       01A0C44501B2B4E24D67DC11A6609E88FE2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
Manifest number:          10F1
Signing time:             Mon 21 Sep 2026 14:00:51 +0000
Manifest this update:     Mon 21 Sep 2026 14:00:51 +0000
Manifest next update:     Tue 22 Sep 2026 14:00:51 +0000
Files and hashes:         1: HQPoNNDYmQ0PTAgVt-7nCNhXdnE.roa (hash: kCFdS1fFwuAmUzm+bB/T+yIon9lUTHPLoW+ISrnBNVU=)
                          2: YQDkcvZP0TolQ9Rb2J9bf8U7wD8.roa (hash: bLjbl+wMhiL7sRh09UL9i2a7It+tGXyibFC5+VSFo1A=)
                          3: hbF5ZzHsgcMp5iCgolJMPYy0iCk.roa (hash: 7SFeRpPNNir0THQNHogkPoRqinwuTC1jSrURc0Ccc1k=)
                          4: sDwwLC9SJ349CraEL2iqX40Nd4c.crl (hash: WurFyi4BMkZIs7/m0LYn7DmSY1PLhUxNxAJDe+Lr4sc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:45:01:b2:b4:e2:4d:67:dc:11:a6:60:9e:88:fe:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b03c302c2f52277e3d0ab6842f68aa5f8d0d7787
        Validity
            Not Before: Sep 21 14:00:51 2026 GMT
            Not After : Sep 22 14:00:51 2026 GMT
        Subject: CN=f63e075307050d5f213401e1d841bd3933dbd7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9d:2f:34:40:46:27:4c:94:33:11:16:f8:2f:
                    2c:90:69:e9:45:80:1c:cd:a4:bf:39:95:27:a1:2c:
                    88:a7:a5:c9:6a:84:4e:48:a0:56:22:dc:f1:b9:62:
                    0a:d1:c3:8e:e2:02:2c:0f:07:c0:77:c1:70:3c:f8:
                    33:fe:4f:91:6d:fd:96:7b:db:13:df:29:b7:fa:35:
                    97:2d:09:3a:eb:bd:31:76:95:a1:8a:ef:36:9e:97:
                    85:d1:47:30:4a:85:5e:76:5f:09:3d:19:09:1e:6b:
                    45:24:85:b3:19:95:16:81:5b:37:d0:a7:34:61:d2:
                    0f:a7:e0:79:4f:b9:53:c7:9b:a7:b1:9a:a1:6e:75:
                    8e:06:e1:9d:14:71:7e:82:5a:7f:af:06:86:8d:5a:
                    cb:ac:cc:85:87:3a:2b:19:bb:f7:7a:90:af:ce:c7:
                    75:4b:d1:2e:a5:63:52:dd:0a:b4:0a:19:fc:f8:a7:
                    c4:6d:3f:8d:8d:1e:3c:33:1d:73:6e:4c:fb:37:90:
                    87:0b:e5:52:d9:0f:eb:b3:f3:8d:64:ca:98:a4:48:
                    fe:6f:46:7b:bb:e5:03:d9:5e:56:6c:0d:5b:0e:bb:
                    66:7d:fd:73:67:1b:f5:e8:cb:11:a1:e1:e8:89:a9:
                    9d:37:f9:ac:ad:80:48:5b:0b:da:ff:58:60:de:62:
                    2f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:3E:07:53:07:05:0D:5F:21:34:01:E1:D8:41:BD:39:33:DB:D7:EB
            X509v3 Authority Key Identifier:
                keyid:B0:3C:30:2C:2F:52:27:7E:3D:0A:B6:84:2F:68:AA:5F:8D:0D:77:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sDwwLC9SJ349CraEL2iqX40Nd4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a2ec9c-9d76-4e94-9e3a-6f7024c3aad7/1/sDwwLC9SJ349CraEL2iqX40Nd4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:7c:54:da:68:b2:55:a2:76:63:a0:76:58:6f:03:94:2b:b5:
         f9:eb:70:73:8f:e1:0d:c8:ad:62:87:28:60:c3:a6:e8:97:cb:
         6c:e6:1b:0f:f0:d2:d3:0b:4a:1a:46:a0:2d:df:8a:a2:0e:5b:
         6d:30:2c:6f:91:f1:a1:20:ea:e3:ce:8a:a6:0a:49:7e:5f:42:
         db:39:61:98:7c:bb:c6:9b:15:42:96:b0:58:f2:1d:94:cd:84:
         50:b2:c3:40:8f:11:bf:85:ff:ac:4c:a3:0f:85:3a:67:1f:59:
         fd:4c:ca:f7:6b:02:d4:d3:a1:5b:0f:f1:f7:7d:40:79:50:81:
         83:05:2d:1a:54:61:e7:47:bb:24:38:a8:9b:2a:7a:d5:67:57:
         0f:57:e7:2d:9b:ee:7a:18:07:11:98:da:42:89:04:95:2b:89:
         9a:6f:14:01:e7:0e:6a:cb:27:be:b0:cc:64:1b:6d:eb:de:e6:
         97:b1:7a:9e:87:05:c8:cd:70:e2:67:b5:d6:ca:b9:ac:77:0d:
         b7:56:4c:d5:91:85:f0:a2:e9:52:7f:3c:ef:12:38:2c:0b:ba:
         b9:06:13:0c:45:61:29:99:c0:37:7b:b7:eb:be:1d:da:be:bb:
         ab:86:57:24:f8:aa:1c:59:a5:19:aa:de:aa:10:97:4e:fe:11:
         84:d4:65:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:43:45 2026 by rpki-client