Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
File:                     Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json)
Hash identifier:          vK3XryZbRiIF04qB2sON7mONNmrdSJHMFmJFmINjeyA=
Subject key identifier:   AD:B6:57:BC:01:46:90:C4:96:A9:87:BB:4E:E7:76:7C:7F:97:F4:50
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Certificate issuer:       /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial:       01A0BF5551CA5967151D1D447B30106C2A65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
Manifest number:          0E86
Signing time:             Sun 20 Sep 2026 15:00:34 +0000
Manifest this update:     Sun 20 Sep 2026 15:00:34 +0000
Manifest next update:     Mon 21 Sep 2026 15:00:34 +0000
Files and hashes:         1: 4GUElnAPOkrPLe4DgpHfnLNp6J0.roa (hash: 9fjN9auBgqJVcYNofzCrv75bDC2wBZmo8SkzmPt8j0k=)
                          2: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: jEZNOgGBLpCzzGf0qUCY8hawRDeEiqD7TMiuX+BQvG8=)
                          3: I282anzuqDNnfUXZQwC7438bDro.roa (hash: AyYFkSKEVTPhYSL98MtWNGzVahEdTLNrPzpWGukk9EI=)
                          4: IJyWPZnNDgJGIYhxLR2ej2t89_4.roa (hash: Qk+CHppMk+2IdIytCSpQwUqW+0YGuxpw+lnNEU7EhcA=)
                          5: Kx1eIMK1ZB6OHHGc0668tmq96XA.roa (hash: lhgEO2Wo4yISCyt2s4yNXehUniTGVxp13Q/4RJVezZM=)
                          6: NRDXJZDQ0OHFo8ltyyB-kSPP1pE.roa (hash: DtNekApdMNPRg72NXouh7K4NrMm+yrRhvaVrr6YhrSM=)
                          7: PBaUsMT5mW4QdmVNy1huwmi14Rs.roa (hash: GH37jfI8HpuLofSLQfgmqiOioAVbcQ5ZxEHr0iJBbzs=)
                          8: Q0FYrPKVMh5kkSRmFyVQJj0e1Rw.roa (hash: WPIh6hbyuuhuP5KMCKvJ7WqPLV4IVG0JUTQFgBQuqzg=)
                          9: XSSPfODDElNAi7HHbT39Dq_G2W8.roa (hash: XAO7DayjW29BbqYUQasCT3PGXv6XygmyC7EFfkszTjo=)
                          10: Xlf4DIk8NdqdFsmrdmevAqVH6uk.roa (hash: bQ++7eQYTX8BmhZe8TKTwvDFZ9j6K/rMRT8QxDCKtvM=)
                          11: cMf9i5uQ_W8w4eYlPuCuDGVpKnw.roa (hash: ++i8IZt9sWW1wF4ErWsx0bQbw6R8LDli6rinP6RFECs=)
                          12: cid7HvMidFvtXH-s1EtdDJVv1aQ.roa (hash: ZcrBoPwGj+5nUM9q0wHZrerMhRIb1xZrFSae5lJQklM=)
                          13: ckvWEpZk8GRhPrKIFVzhYtX4HLo.roa (hash: XvnymWdIgJUBdvk4Eput5qhCNQkwhBx2JHcRbIziQ24=)
                          14: eE2QQRwGdkhCYaEeU7X8BmNk-EI.roa (hash: 3Mb1ZwjnO6N7pPKN5Ned7OyhEEInX7LRS977TQB+72Q=)
                          15: fOoxnzASXzopslTz2k2wiJL3x5M.roa (hash: D1BQFLMSMw0KzyyXwQEu8OixU3Lr8v2KEMxHdqrQGxI=)
                          16: pOQXq0nmpz6pKYDrNuVK9kkpTyI.roa (hash: 38r8niOxTbvNmg9dfnoXSRz/LfPPGz9NUmHiyiOX9Hk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:55:51:ca:59:67:15:1d:1d:44:7b:30:10:6c:2a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
        Validity
            Not Before: Sep 20 15:00:34 2026 GMT
            Not After : Sep 21 15:00:34 2026 GMT
        Subject: CN=adb657bc014690c496a987bb4ee7767c7f97f450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d6:36:57:b5:f3:11:98:9b:8e:d2:bd:86:dc:
                    48:31:94:28:26:32:7a:b7:41:0a:4c:39:a3:23:d7:
                    3a:ad:c2:bb:9b:ba:1c:8d:90:49:1c:60:17:c7:66:
                    d8:94:7a:6b:70:40:95:47:2f:f2:9d:9f:d4:11:e7:
                    ee:c3:8e:9e:15:f7:cc:81:49:a0:fb:50:3f:be:c9:
                    40:4d:c6:48:2f:2d:ed:45:7b:c6:67:0e:5d:32:7c:
                    47:9f:9a:f9:f9:ca:be:7f:44:e8:06:05:49:dd:ce:
                    48:08:4a:e0:ec:0c:5c:d7:e4:cb:28:54:be:fb:8f:
                    22:02:9a:c5:7c:11:ab:fc:7d:cb:42:b9:d1:f5:29:
                    8b:e7:3f:0d:20:40:d4:dc:ea:9d:d2:57:25:e0:84:
                    15:7b:64:f2:3f:c4:ed:7b:5b:4b:e5:ca:f5:28:fc:
                    83:fb:43:9d:83:3a:a1:ef:d2:d2:d9:7f:54:cf:04:
                    1e:f7:76:ff:5e:cb:79:fb:8b:ac:72:81:3d:19:1d:
                    46:68:47:4a:80:4f:3a:e2:61:96:d5:cf:aa:41:82:
                    66:f5:0b:81:25:5a:19:ba:45:60:51:00:04:2e:f9:
                    0f:a5:f8:96:7e:bf:16:77:c7:ad:74:6f:94:61:13:
                    6f:70:a2:12:ce:5f:28:c9:7b:8a:b1:1a:6c:39:13:
                    c7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B6:57:BC:01:46:90:C4:96:A9:87:BB:4E:E7:76:7C:7F:97:F4:50
            X509v3 Authority Key Identifier:
                keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ce:d5:fe:e6:48:0d:17:3d:e0:c4:fb:29:3e:32:97:53:5c:
         c8:b7:4f:a6:96:28:36:16:13:07:4f:86:36:bc:c8:96:b2:3d:
         d8:39:e2:88:8b:1e:f3:33:e9:ac:8a:89:da:8d:1f:10:88:74:
         bb:d4:47:1d:e9:69:b6:7d:9e:e0:20:06:1a:6c:45:24:24:33:
         96:87:ed:54:46:93:c4:e6:3c:bc:96:e2:5d:14:f2:f5:64:69:
         da:63:5e:86:19:a3:86:5e:9b:30:08:82:95:34:b6:51:0a:f2:
         cf:5b:b5:4d:62:8c:c5:41:ff:9f:a2:d5:ba:51:93:b3:ce:17:
         43:63:6b:b4:27:5d:4c:84:2f:d5:b2:03:ab:31:a1:52:98:3c:
         55:81:00:12:d2:d9:7f:48:44:96:10:58:3f:d9:8f:53:b5:7c:
         a1:79:f9:d5:f3:7d:04:6a:3a:03:b8:15:cf:aa:c1:85:02:cf:
         44:68:63:3e:0e:cc:3c:5f:19:be:f9:9d:15:a5:2d:62:1c:71:
         d2:92:40:57:24:09:03:c2:5b:78:22:1c:65:66:08:39:f5:37:
         5f:09:ca:d5:84:ef:46:a8:76:e0:be:ad:84:16:b3:3c:cf:5a:
         b6:e4:07:ed:1d:57:96:0c:f4:08:36:66:d2:bf:c8:63:03:1b:
         47:c9:c3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:27:22 2026 by rpki-client