Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File:                     Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier:          TsljW6wHD4V7gtvvuURnFrdSY79TKIN5TXrCpmvfF7w=
Subject key identifier:   EC:74:84:E7:A4:C7:74:92:05:7C:3E:46:97:A6:76:D1:B1:6F:A8:FD
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer:       /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial:       01A0C33247D942F5BB7778EE43EC5E4BA552
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number:          0873
Signing time:             Mon 21 Sep 2026 09:00:47 +0000
Manifest this update:     Mon 21 Sep 2026 09:00:47 +0000
Manifest next update:     Tue 22 Sep 2026 09:00:47 +0000
Files and hashes:         1: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: cJ3ypZ1ytX1xRCfQozfhi/JgckXdEio+3KRjfytQm0E=)
                          2: TkBggeEIG38cTqgeQZJyjYdfERw.roa (hash: TVtGwEq6QFTLzR+0I1131Dy7n+e87d5rFxxyq5eLPbY=)
                          3: WEVqV3-Rp-d0LXAX2D5pD9lVyK4.roa (hash: /YFcmAE3f+SI8C115sE0xgY4yWWtCJhMHzRULYVE/Ig=)
                          4: nGgWCHlP5Rfk7nEXR5r0SwPGVhg.roa (hash: ub89EExosLdu9SpuUWFdEh7qASm/VbEptc/K/f13V3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:32:47:d9:42:f5:bb:77:78:ee:43:ec:5e:4b:a5:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
        Validity
            Not Before: Sep 21 09:00:47 2026 GMT
            Not After : Sep 22 09:00:47 2026 GMT
        Subject: CN=ec7484e7a4c77492057c3e4697a676d1b16fa8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:48:cb:e3:bf:01:5d:46:f2:31:62:37:c8:f3:
                    d7:1e:3d:f4:5a:64:b4:23:0e:04:cb:e7:05:98:40:
                    15:30:6e:d5:eb:80:d2:cf:a5:c7:09:52:e9:a2:25:
                    6d:8d:3a:3f:87:de:33:62:ff:1b:ff:b2:26:c8:7f:
                    9a:9d:91:76:dd:15:74:58:7c:23:bb:00:bd:0d:6f:
                    00:fb:84:2f:2d:9c:57:53:22:c8:b2:b1:3f:3e:8c:
                    d3:5a:6e:83:c9:c3:dc:b9:96:11:67:94:84:ab:e3:
                    d7:36:6c:ca:90:14:d9:fd:5c:79:8d:a7:2a:e0:42:
                    fe:9e:cc:17:55:22:aa:5d:ab:a2:c5:60:25:97:bd:
                    a3:7a:1b:3c:06:3f:21:19:8f:58:6c:75:a8:8a:2f:
                    85:27:cd:10:31:92:77:0b:44:ee:f1:f0:b0:76:b5:
                    a3:3a:41:61:25:f9:83:b9:18:38:d1:78:e2:47:e9:
                    69:71:03:31:53:04:ad:28:89:b4:98:ef:17:43:ef:
                    a9:08:ff:7a:63:ac:eb:0b:8d:f0:81:fe:02:0b:ff:
                    63:6c:f3:d9:5c:26:c6:9e:1c:93:b5:d3:3b:46:da:
                    e5:64:51:97:4b:ad:82:61:58:8a:a3:42:84:21:e9:
                    30:18:dc:c1:86:50:a0:72:46:e4:d8:29:50:a0:bc:
                    23:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:74:84:E7:A4:C7:74:92:05:7C:3E:46:97:A6:76:D1:B1:6F:A8:FD
            X509v3 Authority Key Identifier:
                keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e7:ad:c9:9f:b4:7d:9e:65:4a:df:80:81:01:1e:d4:2d:01:
         c8:84:65:24:ff:35:4d:aa:ad:b5:a6:2d:91:e0:d8:a0:a1:cb:
         60:ba:75:d5:ce:39:cf:2b:a2:af:67:9d:f0:22:16:35:fc:98:
         55:2b:f6:b6:69:f8:2f:a6:1c:4e:9a:7b:d2:11:82:81:b7:ff:
         56:bb:eb:53:a7:6d:bf:c8:69:a9:80:22:55:a2:70:25:3c:ce:
         88:1e:48:07:ce:ad:56:f1:b6:cd:fc:4a:cf:4f:96:ef:83:29:
         8f:de:7a:67:52:cb:7b:90:ac:b4:c6:c6:be:ed:76:ea:20:31:
         37:6c:ed:bf:5e:7a:54:d6:06:ae:15:c4:c6:76:dc:cf:41:61:
         b9:ab:21:10:18:91:b7:2c:86:cd:b3:5f:68:ba:da:97:36:f5:
         a8:90:61:b8:52:a1:c7:fa:2b:f3:42:ed:74:7e:ef:de:82:41:
         ea:d8:51:10:03:ae:73:32:03:37:ec:c7:4c:66:d4:4f:8e:9c:
         af:54:68:35:8b:b4:66:c0:2a:5b:33:50:61:7e:67:c1:6f:14:
         cf:f9:20:c9:49:75:b2:e5:1c:49:88:1a:94:86:0a:6b:7f:07:
         8f:23:13:2a:23:b0:73:32:34:40:ad:49:04:f3:35:f9:b8:b0:
         8f:75:a1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:04:36 2026 by rpki-client