Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/mCePGZeGM16GRotLmPygOmayft4.mft
File:                     mCePGZeGM16GRotLmPygOmayft4.mft (raw, json)
Hash identifier:          U17XDx+loTr02KZhjw4yLnEQcp5DG3C+OqETB/NxERs=
Subject key identifier:   A6:CB:55:52:2B:5B:B4:5B:73:EA:FF:59:22:1B:A2:68:24:DE:CE:16
Authority key identifier: 98:27:8F:19:97:86:33:5E:86:46:8B:4B:98:FC:A0:3A:66:B2:7E:DE
Certificate issuer:       /CN=98278f199786335e86468b4b98fca03a66b27ede
Certificate serial:       01A0C0D62C5F66C6E8E8283D110E11FDEC86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCePGZeGM16GRotLmPygOmayft4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/mCePGZeGM16GRotLmPygOmayft4.mft
Manifest number:          AE
Signing time:             Sun 20 Sep 2026 22:00:56 +0000
Manifest this update:     Sun 20 Sep 2026 22:00:56 +0000
Manifest next update:     Mon 21 Sep 2026 22:00:56 +0000
Files and hashes:         1: WgnWOUv-gbfkSkHsun9sFImtYDY.roa (hash: JD0mfdTRFtEepkN2tCd2j8n570DvIkGT71G7OwTRiZw=)
                          2: mCePGZeGM16GRotLmPygOmayft4.crl (hash: 65oGKXKKnMtiIPuNVykr3/k6r/h5P4jV+C7yu+qfGZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/mCePGZeGM16GRotLmPygOmayft4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/mCePGZeGM16GRotLmPygOmayft4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCePGZeGM16GRotLmPygOmayft4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 22:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:d6:2c:5f:66:c6:e8:e8:28:3d:11:0e:11:fd:ec:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98278f199786335e86468b4b98fca03a66b27ede
        Validity
            Not Before: Sep 20 22:00:56 2026 GMT
            Not After : Sep 21 22:00:56 2026 GMT
        Subject: CN=a6cb55522b5bb45b73eaff59221ba26824dece16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a9:51:80:ce:7f:40:82:b9:cc:42:44:c6:e0:
                    cf:c3:81:62:90:c4:4e:3a:0c:b7:6b:42:98:bb:f5:
                    54:15:c6:77:7e:ca:c5:61:ab:59:bb:09:cc:5c:3d:
                    d7:75:07:38:7d:98:2a:81:11:10:3a:73:4a:92:63:
                    a4:49:f7:95:e4:0c:b0:1a:65:d6:e2:ce:56:b5:8c:
                    ca:59:bd:c7:48:2e:3b:6a:e5:2c:ca:d3:5d:2d:0c:
                    08:42:e6:6b:1c:a5:c7:c5:ae:61:bb:7b:5b:f7:b5:
                    0b:92:c5:bb:96:19:b2:91:60:04:6b:93:74:b3:d5:
                    d6:7e:d3:6d:5b:40:c2:86:f5:f4:f0:d4:34:cf:cb:
                    ec:55:d3:ae:b6:48:2e:bc:89:19:25:8c:6f:e0:5f:
                    07:8f:9d:39:44:7a:94:cb:5f:e8:ad:cd:a6:cd:7c:
                    aa:b8:a3:ac:ce:5e:2e:45:29:a9:2a:30:f4:d8:b4:
                    32:4c:4b:79:e6:ad:bd:50:02:e8:73:51:c5:17:7a:
                    c7:c0:0f:70:eb:4e:5c:2b:0f:d5:33:f9:0f:4b:bd:
                    3d:0d:eb:fa:53:e3:df:91:5e:5a:ff:43:81:8a:c2:
                    6b:78:07:72:91:04:0c:06:74:58:2f:91:d4:0f:be:
                    90:d9:63:cd:7b:18:a5:11:14:04:38:4b:5b:5c:47:
                    c8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CB:55:52:2B:5B:B4:5B:73:EA:FF:59:22:1B:A2:68:24:DE:CE:16
            X509v3 Authority Key Identifier:
                keyid:98:27:8F:19:97:86:33:5E:86:46:8B:4B:98:FC:A0:3A:66:B2:7E:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCePGZeGM16GRotLmPygOmayft4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/mCePGZeGM16GRotLmPygOmayft4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/217005-d6b3-4028-b2cd-215ebe0b49b9/1/mCePGZeGM16GRotLmPygOmayft4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:47:de:24:20:e6:95:42:2b:29:c5:56:72:85:29:0a:04:26:
         c0:02:44:88:a5:ea:60:3b:c7:03:67:07:37:45:2c:05:16:85:
         1c:0c:e1:e4:65:9a:d6:fb:72:79:91:c0:af:51:c7:30:58:de:
         7e:79:04:b0:d7:d4:c7:af:e9:a6:8f:4a:ce:94:c9:3e:3a:59:
         72:5f:6d:d5:6b:d3:67:f0:51:19:28:fb:d1:a4:f1:70:e6:08:
         3b:94:b8:4a:94:a1:14:a4:49:c0:5c:26:27:17:0b:b5:cf:0f:
         b2:ff:57:08:37:97:22:b7:21:3c:c7:cb:65:3d:0d:a4:64:de:
         f0:88:98:34:ef:b4:f4:a3:9b:e7:43:c6:6a:a8:16:bc:d7:5e:
         eb:19:7e:47:c9:74:3b:1d:1f:a5:72:f7:a6:c2:2d:8a:c8:c7:
         40:70:57:20:cf:82:5e:64:e7:6b:6e:c3:0c:f2:9a:64:60:aa:
         be:ea:af:78:9d:ee:e6:75:a1:4b:97:5c:de:39:1c:46:b5:4c:
         0d:08:6d:ed:f5:82:14:66:ce:8d:92:04:d4:b8:6c:72:bd:1d:
         69:21:8b:7c:89:bb:0d:51:6a:b3:65:a8:c2:af:d6:4b:cf:d3:
         31:c2:8d:62:0e:d3:bd:64:82:c0:ad:00:0b:5f:50:71:a9:58:
         ef:c9:61:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:19:36 2026 by rpki-client