Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft
File:                     Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft (raw, json)
Hash identifier:          1vi92spFuhU+H7wfeXaxCOMwF740/65PQE39+FWJ500=
Subject key identifier:   91:6C:30:D7:01:0F:75:85:3C:84:4D:5A:52:A2:3F:65:F7:9B:AA:7C
Authority key identifier: 17:2D:A9:A7:BB:C8:E1:63:69:B4:06:BD:25:6E:2A:30:02:CB:DD:78
Certificate issuer:       /CN=172da9a7bbc8e16369b406bd256e2a3002cbdd78
Certificate serial:       01A0C28D13ADAD67456B23362C2823413ED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft
Manifest number:          DE
Signing time:             Mon 21 Sep 2026 06:00:20 +0000
Manifest this update:     Mon 21 Sep 2026 06:00:20 +0000
Manifest next update:     Tue 22 Sep 2026 06:00:20 +0000
Files and hashes:         1: 5xGTfTQ4NQ6rMqpH3tDID_way78.roa (hash: F8H1Pp6BX6Q7UzR7IW00zFxASJYxtUwFmEz2td8WBTs=)
                          2: BWH36-bel5gTA_6A5H2Vs5lFhpM.roa (hash: w2VVqzjO7mvV0ab7JuRfyw+tb/CiyS8XdVuLVmyQYFc=)
                          3: Fy2pp7vI4WNptAa9JW4qMALL3Xg.crl (hash: Q75pMUe5hlQuTa/k9r7NqZxHBl1LiEOADL7WPvkdCwk=)
                          4: TFrFCFoNGOrEr-0X10FQhSCvIIM.roa (hash: 7CgOjycwa7iUcHPLxP4Ia/ozXApop9buE9JwEyEF3YM=)
                          5: uDov7n4fgQ3mm1Y0HBFFD_S7QcQ.roa (hash: TVOgxQIfQpHq2V2Hd2KnY6QeGGGPCyJ5eRO9EBWn8xs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8d:13:ad:ad:67:45:6b:23:36:2c:28:23:41:3e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=172da9a7bbc8e16369b406bd256e2a3002cbdd78
        Validity
            Not Before: Sep 21 06:00:20 2026 GMT
            Not After : Sep 22 06:00:20 2026 GMT
        Subject: CN=916c30d7010f75853c844d5a52a23f65f79baa7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a3:7b:18:6f:f6:73:09:d1:b2:39:10:a4:5c:
                    75:f5:69:bc:8a:e9:93:4a:0c:6c:51:c9:de:37:05:
                    e5:c4:41:ef:25:89:65:70:5a:a2:78:d7:1b:84:92:
                    9c:13:fc:f9:89:c6:af:43:01:81:f4:d9:6e:02:a4:
                    4c:73:0e:49:27:c0:c1:7b:d6:80:3c:4e:50:0b:78:
                    64:9c:82:95:84:7c:0a:a1:b0:b0:82:1c:e3:f1:65:
                    44:83:28:3b:44:af:ad:e5:e3:43:de:8f:05:c0:1d:
                    ba:74:5a:e8:1e:6f:8f:53:de:45:11:d7:b0:d3:ed:
                    e9:b9:40:64:2c:a9:30:92:91:c1:8a:d2:69:f9:ec:
                    8e:42:e1:c0:36:5e:fa:b1:2f:1c:4a:5a:72:8b:ca:
                    20:54:09:02:73:c0:fd:64:67:a0:71:6d:a3:4a:c6:
                    fa:11:45:e3:e4:8a:eb:4e:34:d1:9f:44:70:f6:20:
                    3f:aa:e5:a2:df:b5:c1:2b:73:9e:e5:19:1b:65:79:
                    bd:d3:6c:45:fd:ea:d3:21:10:1f:28:6b:fe:b9:a3:
                    e6:9a:29:eb:00:99:bb:88:b5:92:77:dd:0b:79:16:
                    fe:f8:b9:6a:c5:0c:91:0a:d7:8c:d2:72:26:01:e1:
                    ca:bf:b8:a8:92:68:9c:4b:7d:cf:3c:ed:f3:bd:1e:
                    d5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6C:30:D7:01:0F:75:85:3C:84:4D:5A:52:A2:3F:65:F7:9B:AA:7C
            X509v3 Authority Key Identifier:
                keyid:17:2D:A9:A7:BB:C8:E1:63:69:B4:06:BD:25:6E:2A:30:02:CB:DD:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fy2pp7vI4WNptAa9JW4qMALL3Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/Fy2pp7vI4WNptAa9JW4qMALL3Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:ea:5d:e5:e3:df:76:a2:81:d6:07:b0:a6:f2:85:88:31:99:
         55:65:8d:03:a0:ea:13:b6:9d:71:0a:3d:a5:81:05:cb:5f:cf:
         70:21:39:d1:17:c7:85:ba:47:4a:38:48:ac:83:fb:c0:67:a6:
         da:01:d7:db:55:d4:8a:5b:23:d8:90:91:3c:4b:33:4f:6e:ac:
         f1:66:5a:60:7b:93:6f:2b:e3:40:96:43:19:3b:4e:cd:3f:ad:
         c6:ec:b6:f3:12:aa:de:a0:a6:bc:22:0e:7f:85:cc:75:49:a5:
         20:fd:db:ef:39:00:ca:ce:25:b2:5f:60:84:35:13:b0:55:c6:
         de:0c:9f:65:cd:c9:0d:c0:b1:85:b6:ab:c3:10:d0:89:b7:99:
         16:c4:d2:57:32:3b:b8:48:e6:db:a3:17:7f:9d:72:a0:3b:b3:
         39:35:c8:e5:b7:41:51:31:61:a8:06:c9:05:94:8f:17:1f:77:
         c4:5b:d6:3e:ba:c3:c1:16:88:86:bc:d4:d9:e9:c3:86:d2:10:
         40:d1:25:1d:ee:34:ae:10:7e:81:44:8b:24:80:30:51:27:a3:
         a2:a4:49:cb:ef:84:b9:70:9a:a3:f5:47:7f:a8:9e:c7:8a:33:
         b1:85:54:16:e9:8f:e2:84:09:79:97:f6:9f:51:16:4f:5c:79:
         52:96:1c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:37:26 2026 by rpki-client