Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
File:                     MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft (raw, json)
Hash identifier:          5i5x2omkpTvFJhCAkUCrbbPR/+z6TvM5MsHUyh3si8k=
Subject key identifier:   36:22:2D:D4:94:ED:B6:36:94:44:EB:1E:C4:42:E6:37:31:2E:C1:1D
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Certificate issuer:       /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial:       01A0D4CB632080DEE87C813DF2814FA342E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
Manifest number:          1406
Signing time:             Thu 24 Sep 2026 19:01:33 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:33 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:33 +0000
Files and hashes:         1: AczQ5m07bagbCSpYHKyOOUGJiuU.roa (hash: ZZkvh7a+nFDXqMju+v84npxtkZQE+y45PmWF7YuV5vg=)
                          2: E50dRzelevPp0RPUUn-X1whUhzs.roa (hash: ESKLNPEXcUQlYreIgYSRyGc6RpOOENWjDiinLW02gqM=)
                          3: KnXc9wIdUwOgGPZNVY_TSbLRRoY.roa (hash: Ur+szLOeyaAy0p6WFfKNCA4+hET9D0q8Orh268HfdLU=)
                          4: MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl (hash: Un31xqi5QA+1XfsHELb4j4fMVsMD3qo65gu9rLiuvqQ=)
                          5: _YrGQaV-xv0pIG914t75tY-lgq4.roa (hash: mceOdmff8pDALeUaOfa99NehQO4QsbAd1TsnHGDmlpY=)
                          6: fyxsLRJZFn7CTFSJ2VnoPkiPR2s.roa (hash: 8HFUKsLTWzFpdFnaVvVRZkBC3eF7vcFOlN74+dbWE3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:63:20:80:de:e8:7c:81:3d:f2:81:4f:a3:42:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
        Validity
            Not Before: Sep 24 19:01:33 2026 GMT
            Not After : Sep 25 19:01:33 2026 GMT
        Subject: CN=36222dd494edb6369444eb1ec442e637312ec11d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:25:c4:0f:3c:12:bf:46:b2:31:0c:50:be:51:
                    2f:6f:6a:0a:dc:d4:90:2c:12:d9:11:a8:c9:d2:44:
                    da:60:32:a1:17:45:26:ee:6d:1d:61:2d:89:db:3e:
                    58:78:5c:6b:db:99:ee:a3:69:e3:cc:d1:cc:dc:c8:
                    b0:47:3a:d5:b5:e8:dc:31:21:c4:b1:b1:da:bf:61:
                    86:88:83:eb:43:ab:84:57:d4:bb:a5:9d:62:b0:3c:
                    98:d5:d9:0c:96:aa:f8:05:f6:a9:18:2e:23:ab:d7:
                    87:e1:11:21:62:d4:2f:8f:59:3f:a7:f6:38:39:e1:
                    a2:a2:7a:91:04:72:53:00:43:0a:94:4a:47:0b:77:
                    2f:7d:9a:2b:bd:32:d2:c6:81:8d:8f:27:57:64:34:
                    a2:3d:09:a2:6f:b0:57:74:bc:d0:49:05:f2:62:b3:
                    37:e5:34:01:61:ce:08:c5:ba:8e:01:bf:21:0d:8b:
                    a6:79:01:6e:14:ee:4b:c5:78:1f:73:a6:71:e2:a1:
                    f1:a7:7c:6b:3e:fa:76:61:46:6f:69:51:4d:84:1e:
                    b3:4d:15:98:72:0c:53:4d:04:67:6c:99:5d:ed:f3:
                    04:53:70:dd:e3:55:e0:a3:fd:63:31:dc:96:dc:bb:
                    a9:79:94:7f:28:26:8e:0c:77:6a:35:02:c0:3f:39:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:22:2D:D4:94:ED:B6:36:94:44:EB:1E:C4:42:E6:37:31:2E:C1:1D
            X509v3 Authority Key Identifier:
                keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:2a:56:53:82:6a:f1:e5:87:76:55:56:fc:95:52:e7:7d:cc:
         97:79:de:44:d1:0d:61:e7:be:4c:4f:74:4f:36:8f:da:53:c7:
         74:29:5e:b2:7b:ed:26:36:1a:6d:d9:54:7d:0b:22:51:c3:1c:
         91:d9:9b:dc:c5:91:24:fa:2f:ee:72:15:7e:e1:a2:d2:77:aa:
         c9:5f:e0:3c:b8:30:fd:04:df:67:98:e5:e8:d1:72:de:19:73:
         bd:9b:de:b1:92:be:36:6d:f7:47:c9:64:6e:41:65:58:ad:19:
         33:c0:c6:c3:94:85:6c:c7:2d:42:03:e5:c5:77:38:27:59:76:
         cf:5f:a9:8f:eb:b6:7b:8a:b8:60:f8:a3:11:6a:a9:2b:25:bd:
         86:c7:b2:39:6a:86:ed:ba:63:f8:80:66:a6:45:f7:c2:21:19:
         d2:77:2b:8b:16:ae:e6:e8:50:55:2a:78:be:91:db:a0:81:d9:
         8c:67:30:a7:af:49:e0:90:e4:4f:ef:4e:3b:b8:d7:72:34:95:
         69:7f:0c:92:3e:8f:fc:29:39:da:6d:7f:43:80:18:eb:ce:98:
         97:1d:5e:d3:03:eb:c9:b0:fe:b0:c2:b3:6a:71:b4:79:85:08:
         2f:50:c3:67:30:52:15:d9:b8:30:7d:6d:d1:bb:a0:54:31:f8:
         b6:c0:3e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:56:01 2026 by rpki-client