Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File:                     Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier:          bo35hXqL+zM41HHkqunU/9010PwlioWEtc4aDMH/BIs=
Subject key identifier:   D2:5A:97:11:7C:54:6B:20:DE:05:C7:D9:D6:D5:F9:EE:84:85:1E:0E
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer:       /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial:       01A0E1741B1617C7020C4BAD4CD0EF9BD454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number:          1A7E
Signing time:             Sun 27 Sep 2026 06:01:17 +0000
Manifest this update:     Sun 27 Sep 2026 06:01:17 +0000
Manifest next update:     Mon 28 Sep 2026 06:01:17 +0000
Files and hashes:         1: 8EQw8scn945EBI3nr8f8oaXNu5k.roa (hash: Pc5eAGErA0CLNaCRm8m5LzZW6f6RQyf0pkKeLb9c9vc=)
                          2: GkXYgdVFP2_HexVVs3gomnNY70U.roa (hash: Aaxv9YVnKsaCjNY2StCqQ1xmto/cCalggSwSd56aIwk=)
                          3: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: mKgTy6wLPGZxCtWJ89DGvSPn0YRhXxn2NPjgHZB5cMw=)
                          4: hcEiOVl0IV3IE4216hs1e5DZGR4.roa (hash: ZC5U5qcJYYjeF6N2SbLW1XrnWze6Jseft5QLvx76FJw=)
                          5: jVymcQq0h9Y68MDNVjUwnbOR388.roa (hash: MSWDR6kx5EFIH7f8Omshc4kgj1g3khlr4OFNZuTrRzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:74:1b:16:17:c7:02:0c:4b:ad:4c:d0:ef:9b:d4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
        Validity
            Not Before: Sep 27 06:01:17 2026 GMT
            Not After : Sep 28 06:01:17 2026 GMT
        Subject: CN=d25a97117c546b20de05c7d9d6d5f9ee84851e0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2b:83:43:6f:7c:1a:20:70:c3:0e:2e:7e:f8:
                    7c:1a:08:86:65:3b:a0:06:13:3e:4d:0a:ef:f0:3e:
                    f6:38:e0:50:7a:78:dc:33:49:b7:ba:a9:86:62:16:
                    b5:4b:f9:c0:aa:f7:2f:9c:94:93:14:ab:6c:2b:4d:
                    d3:6f:27:e0:85:b9:4d:05:d2:60:43:96:ff:e8:bc:
                    49:c1:7a:d7:85:68:32:c4:20:a0:88:6e:5f:37:f3:
                    3e:78:04:c9:d0:31:ed:c6:49:48:cb:74:b6:34:2a:
                    9f:4b:97:85:9d:73:d9:e0:2f:ea:dc:61:f0:ed:10:
                    af:33:a9:14:7d:f3:ed:92:1b:39:ee:8c:68:7e:96:
                    5f:bc:66:69:83:26:0a:f2:28:36:61:a1:9e:59:63:
                    38:1c:96:27:e5:68:ee:dc:53:fd:63:3c:1b:72:8d:
                    84:b1:d1:bd:4d:21:ee:35:3c:05:6b:fc:f6:ba:71:
                    b5:ac:e4:d2:9b:af:dd:2d:59:bc:c5:1a:45:53:a6:
                    19:bc:1b:37:37:5f:52:3c:bd:d3:26:60:0c:1b:38:
                    a6:f9:57:08:e6:73:af:04:eb:e7:6e:1c:48:49:20:
                    63:40:ec:40:1a:00:3b:e0:9b:25:7a:88:cf:76:14:
                    53:84:dd:a4:6c:b8:27:0e:99:69:97:b5:48:3a:1a:
                    bf:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:5A:97:11:7C:54:6B:20:DE:05:C7:D9:D6:D5:F9:EE:84:85:1E:0E
            X509v3 Authority Key Identifier:
                keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:8f:ca:1c:aa:ae:c5:7f:88:23:27:b4:0d:72:3d:bf:58:fe:
         19:64:f4:90:f3:97:a3:8d:b9:2d:dd:ff:96:2d:fa:91:13:82:
         09:c2:ff:af:45:7e:b3:b6:da:bd:ff:7e:b2:d2:5e:ff:65:0d:
         be:74:63:75:a8:b9:9e:f6:ea:74:e0:b2:96:4c:14:35:6e:99:
         05:8c:fe:32:50:ff:ff:4a:9d:35:a4:ab:03:9f:8e:a4:6d:9b:
         d6:94:bc:6b:c2:a3:08:9d:43:89:1d:04:be:e0:71:16:fc:e2:
         a5:35:07:da:69:b9:42:a2:83:b4:01:4b:83:70:bb:9d:b2:b2:
         d0:43:00:a3:c0:9b:03:39:cf:c5:56:59:5b:cb:b7:02:44:bc:
         41:86:0b:60:02:17:cc:ef:7b:56:4d:f5:68:2e:f5:04:67:e8:
         1c:f6:40:15:ba:33:24:94:8a:92:08:d0:fd:02:72:61:94:b7:
         9e:5b:51:bf:17:4e:19:2d:83:26:59:8a:bf:71:61:0f:25:36:
         72:ab:80:ef:eb:14:ca:04:f8:fb:1e:cf:96:58:e9:a0:a7:fa:
         66:d9:28:f2:cc:3d:e6:2a:b6:61:04:d3:ab:5b:c3:c4:2b:23:
         7d:4c:d9:3c:60:6e:1b:ce:0f:f3:6e:14:de:8e:e9:58:8d:b0:
         93:a6:72:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:27:30 2026 by rpki-client