Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
File:                     tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft (raw, json)
Hash identifier:          Cg0RJWaCnBUBYQKkczcuGP9RDPa3Z0ctA3A2JmPlfXs=
Subject key identifier:   92:F7:F1:7A:84:E3:2D:C4:87:EF:0F:3D:94:17:D7:BD:DF:4A:62:24
Authority key identifier: B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6
Certificate issuer:       /CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
Certificate serial:       01A0D872C4C8DE218E5D1D8C793698EEA978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
Manifest number:          028E
Signing time:             Fri 25 Sep 2026 12:03:15 +0000
Manifest this update:     Fri 25 Sep 2026 12:03:15 +0000
Manifest next update:     Sat 26 Sep 2026 12:03:15 +0000
Files and hashes:         1: 8Z3GQLTW25Ahk8qoPLHpuPsepi0.asa (hash: 9xiyrM4xe6lYaYOQla5bHnzLJ8utsr6+3Nxll/2cul8=)
                          2: tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl (hash: PJEMCJViE45MB1XIByQXd377zHLMT6dj3syvZmRCqG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:c4:c8:de:21:8e:5d:1d:8c:79:36:98:ee:a9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4fc47c3ab70f315b664611ff598e4c0ed1b1ba6
        Validity
            Not Before: Sep 25 12:03:15 2026 GMT
            Not After : Sep 26 12:03:15 2026 GMT
        Subject: CN=92f7f17a84e32dc487ef0f3d9417d7bddf4a6224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a0:e7:68:8f:2b:e7:8b:73:76:38:3c:a7:4a:
                    3e:b6:e3:cf:1f:b6:05:b3:7c:1d:1a:53:12:3a:44:
                    8b:bb:af:56:7e:67:74:89:5a:d1:b8:56:29:3b:ab:
                    99:50:26:95:a8:5e:ce:ad:54:4a:31:4c:8c:35:ff:
                    7c:af:87:90:98:1e:c1:99:20:70:6c:9d:20:13:71:
                    68:5f:e8:a7:dd:4a:3f:6c:f5:6b:5b:28:de:ec:5d:
                    e4:5c:60:99:47:21:01:c0:30:1e:4d:42:dd:a4:9c:
                    a7:b4:be:e7:b7:fc:f6:98:42:35:2b:35:f0:b0:78:
                    be:18:15:f0:ab:d7:27:5b:0d:d6:90:41:7c:98:65:
                    68:1a:91:c1:0f:8e:db:07:16:e5:42:07:0a:e5:2a:
                    69:f7:c1:a0:08:de:df:d7:28:ad:33:d8:99:27:b1:
                    2b:70:05:e6:d0:5b:e5:eb:eb:2e:df:15:cd:7f:ca:
                    a9:e4:a4:00:85:ce:81:73:32:cc:e4:c9:ad:89:3b:
                    e5:99:0d:6d:6c:e4:37:8d:d8:c0:43:50:c1:58:9f:
                    54:db:31:7b:61:52:44:1b:d8:36:e9:e0:85:7e:ef:
                    6d:e5:60:31:b0:4d:ee:fe:54:46:23:87:02:00:9e:
                    8d:1e:29:6d:77:3f:3d:7a:af:0b:54:8b:9c:fc:7e:
                    09:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F7:F1:7A:84:E3:2D:C4:87:EF:0F:3D:94:17:D7:BD:DF:4A:62:24
            X509v3 Authority Key Identifier:
                keyid:B4:FC:47:C3:AB:70:F3:15:B6:64:61:1F:F5:98:E4:C0:ED:1B:1B:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/8ea0e2-81b8-442d-84f2-c2a10009b496/1/tPxHw6tw8xW2ZGEf9ZjkwO0bG6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:fd:9d:34:e5:c8:13:61:67:ef:f8:78:0c:bf:19:90:28:4e:
         e8:b6:38:d4:68:b3:33:f2:94:b4:f3:2a:3d:54:13:61:56:81:
         86:68:af:18:07:40:fc:d2:06:5c:47:83:7f:09:a1:e7:82:0f:
         aa:43:f9:75:7c:51:bc:0b:7f:d7:4d:38:ca:a8:23:29:85:88:
         c9:b5:4b:f7:cd:fd:e9:be:57:3a:63:9f:68:4e:6a:7b:2e:8e:
         20:a1:af:06:ab:7d:d2:6e:7e:4e:73:c5:aa:31:3e:1e:f5:8d:
         7e:26:2d:8a:19:55:58:f2:5c:cf:56:fb:26:4d:02:e9:75:98:
         c6:13:c4:79:b3:93:06:31:71:0d:ef:34:84:e2:e7:c8:7d:a7:
         41:ac:20:6a:b2:7c:76:29:4f:8e:c7:86:24:f1:41:e6:b6:aa:
         2b:03:92:9f:71:15:4e:dc:a1:a1:05:22:40:aa:d6:c0:93:90:
         c3:ae:6a:70:c9:eb:eb:50:0b:10:6b:68:3b:ad:23:d3:46:2d:
         5e:49:e1:a9:db:6d:81:2b:5d:29:b0:e3:e5:18:05:b3:07:c8:
         fe:32:f9:c7:68:80:38:64:93:6b:ab:c4:d6:5c:4a:66:20:3a:
         2a:1e:e7:7f:9f:90:79:74:38:09:a0:8b:ed:d5:f6:11:24:bd:
         33:1c:8a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:48:29 2026 by rpki-client