Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.mft
File:                     rT1hG6nwjFW6jaIUHkOpDHfbzQI.mft (raw, json)
Hash identifier:          hI0r/wFLxfKxX2XE5oYEDSLCfTcMBAc5OqABvCUYhxY=
Subject key identifier:   04:70:10:40:1C:B1:35:21:A3:D0:0D:C3:04:54:CA:A7:F4:E2:C8:4B
Authority key identifier: AD:3D:61:1B:A9:F0:8C:55:BA:8D:A2:14:1E:43:A9:0C:77:DB:CD:02
Certificate issuer:       /CN=ad3d611ba9f08c55ba8da2141e43a90c77dbcd02
Certificate serial:       01A0C28DCC4B5C24C41C0E3E249AF1D22C2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rT1hG6nwjFW6jaIUHkOpDHfbzQI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.mft
Manifest number:          92
Signing time:             Mon 21 Sep 2026 06:01:07 +0000
Manifest this update:     Mon 21 Sep 2026 06:01:07 +0000
Manifest next update:     Tue 22 Sep 2026 06:01:07 +0000
Files and hashes:         1: SB2xvXRDMAoIRLkXvyzjh8_ptCY.asa (hash: 557bSQyAJGxqIDus0t3bgSF8MnIEflLqvfCF/h7s8Ns=)
                          2: rT1hG6nwjFW6jaIUHkOpDHfbzQI.crl (hash: ag+KZ78A19cr6dq+0USsGLKnCfUZsyvEJdGGnECpP5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rT1hG6nwjFW6jaIUHkOpDHfbzQI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8d:cc:4b:5c:24:c4:1c:0e:3e:24:9a:f1:d2:2c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad3d611ba9f08c55ba8da2141e43a90c77dbcd02
        Validity
            Not Before: Sep 21 06:01:07 2026 GMT
            Not After : Sep 22 06:01:07 2026 GMT
        Subject: CN=047010401cb13521a3d00dc30454caa7f4e2c84b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dd:28:34:2d:2b:0b:c6:d6:ca:a8:f4:06:44:
                    cb:88:39:9b:03:b4:b5:c6:14:7b:e6:7b:ba:6b:9c:
                    f2:08:52:6a:4e:bb:a3:63:a6:ba:a7:78:78:15:6a:
                    5b:1d:33:87:d6:cb:d4:94:d1:42:49:8c:8b:72:30:
                    ca:9d:b0:c3:27:26:2b:1e:03:0c:00:88:17:3f:99:
                    03:af:7c:df:b2:12:df:39:3d:a1:28:d9:f4:6b:79:
                    40:34:37:08:e9:75:bf:91:62:d0:79:60:37:17:1b:
                    c1:67:83:15:2e:c5:63:8a:c7:5b:5b:32:53:4a:da:
                    49:ce:8d:ed:e4:d5:a9:da:73:06:71:f4:47:00:bf:
                    e6:90:a5:97:17:f0:a1:19:60:20:be:16:2e:b5:e6:
                    6d:f6:55:d6:58:fb:15:e8:16:30:e1:dc:36:38:ff:
                    cb:03:dc:fd:ca:cd:78:ee:cf:a5:de:4b:8d:f7:6f:
                    b1:71:f8:10:fd:2f:b1:3e:ff:31:00:3c:4d:06:60:
                    51:c5:d0:25:61:33:85:be:ac:9d:a3:b0:86:6b:4d:
                    aa:0a:52:4c:6f:2f:50:af:e8:cb:2d:b9:f4:c1:99:
                    fc:04:32:82:81:20:8c:af:9e:bd:4c:0f:d7:03:84:
                    9b:d8:87:8e:31:70:2e:09:0b:07:d6:67:7b:d4:ff:
                    52:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:70:10:40:1C:B1:35:21:A3:D0:0D:C3:04:54:CA:A7:F4:E2:C8:4B
            X509v3 Authority Key Identifier:
                keyid:AD:3D:61:1B:A9:F0:8C:55:BA:8D:A2:14:1E:43:A9:0C:77:DB:CD:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rT1hG6nwjFW6jaIUHkOpDHfbzQI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e0bfe7-70db-4fcb-abad-e6a32d13c014/1/rT1hG6nwjFW6jaIUHkOpDHfbzQI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:0d:13:60:d8:dc:e5:64:ae:51:73:ff:43:0f:10:25:64:09:
         95:51:b9:b7:81:78:c6:54:a6:c0:5b:81:5d:f5:4a:e3:02:7f:
         93:a5:50:24:c3:35:f9:93:bb:79:c4:e0:77:58:f5:b1:54:aa:
         d6:b9:9a:a2:cf:b0:f7:84:fa:78:43:f1:f0:e2:26:d0:f6:5f:
         6a:ef:01:f2:0d:9e:9c:16:d5:39:80:22:58:ff:6c:fb:c2:5c:
         b6:35:d7:f4:83:a5:37:94:e7:b4:97:04:0e:9b:35:b9:09:18:
         5b:10:1f:23:75:61:8f:78:9f:cc:86:a8:77:e7:82:4c:fe:76:
         2a:a9:8b:2b:b0:6e:ef:00:0f:75:bf:59:0c:17:8a:bf:ff:15:
         32:43:1b:b9:dc:fb:33:06:52:1c:e4:79:aa:9d:64:f6:cf:0f:
         dc:44:31:b3:6c:fd:0f:67:60:b9:dc:4a:2e:8b:8a:89:41:00:
         58:f8:25:68:98:31:02:ea:99:27:e0:b6:bb:f4:7c:bb:74:40:
         cf:e4:35:16:7c:28:6a:e3:c2:73:4f:33:80:e9:d9:03:71:27:
         c1:06:2b:31:6e:84:29:7d:61:38:5e:16:e7:95:fb:58:1f:c9:
         ed:fd:34:69:f6:7e:11:e9:73:3f:69:b5:e1:87:86:b9:84:6b:
         b0:21:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:57:55 2026 by rpki-client