Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
File:                     pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json)
Hash identifier:          zQpBs2Qj0JszYkcpJat3YwcVJbfRAfiegCsME7b6TNY=
Subject key identifier:   4C:2C:DE:62:01:A9:5B:2B:EF:1D:F1:44:C0:D0:80:E1:A1:71:67:0A
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Certificate issuer:       /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial:       01A0D0B6C8A06461C6126F47805CFCDEDB68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
Manifest number:          04C8
Signing time:             Thu 24 Sep 2026 00:00:34 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:34 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:34 +0000
Files and hashes:         1: 0MThwc4dXYxn4L8jsKgRgHG69GU.roa (hash: MKgBpJ/UU/ZtKigtHysf59U625q1r0cBUzNiuUSy1qM=)
                          2: 1-QpEsL_AtML3ScLvBXvkFT8qJ80.roa (hash: +pcA6aIuMEkhsfThQ01/KfIXIckOnFaz60ouEEzocyo=)
                          3: 3fS5dP7sG-xvFMbBP7UUi0eUUSk.roa (hash: pz2rG+hBKqBtyp01TUwFPW7c8W6AKlPJM3L7dBpBCVg=)
                          4: 5N096s-nFOH4_ZBqCouMJS-TbiU.roa (hash: Hh9HPS5FHpAUp4ixlEmsdD6a/vJqjzSz9yCpNR0cnOs=)
                          5: CiOsTyFL2d40vTJ0m9LvEDBbyFI.roa (hash: VtrIAitong9umQO4BUpXCYiuBJOk+XfuDXmVgwoHhXU=)
                          6: Eja0CE3ZxbDf7o-_WJU2Gi-eewc.roa (hash: fP4z0QfDdb5/q/K705XT9QrkxFFgOo2XV/DFWmhk+oA=)
                          7: S5Oy7oscdtTcE5PBdD76sxyxh8g.roa (hash: wjsYCyEbFrcGXZDDLcR3Z02bldg/o6w1jakXsiZwWwo=)
                          8: WMJW8PYFLwejvXuXLZdPSAFJeBs.roa (hash: K12FYnuwBEd2xhuCex9yO/lOKeYGEYVxhKuR491paWw=)
                          9: aPo9aKd2phX6IWiBvTkLJP8xZtM.roa (hash: ncpZr6Zu5WNnsN4SU+6F0b3Jkur0FLP5e1Yt6yA8ajA=)
                          10: cngSEETmst842JVqCMuJdzGT1YQ.roa (hash: +hcoS9Ai/ANXECo9DMi3KQohP9rUHNrlLQnH58O1SI0=)
                          11: demNlliFBXRCd4_BO7uGvr9OBWs.roa (hash: 3e0uS6Ngag4AQ8UkZJyAtJ3ajUAIc6mhDPE4a8UAS9c=)
                          12: hRhmaOU4gZ_tvD1FIXmr8g0vgP4.roa (hash: zCLqNFR/17rQqa13pT3OcgSGKUtKcJcNjAIXmiREIUM=)
                          13: jPK12EYF_F8N9qChJCYpeTggBjM.roa (hash: cyHVL2RzfZB+h/aqJsGsHiAbfgN+RdRCYZxKbcrn16k=)
                          14: mEFHR3ZO54gTaeeTWU5lmspVd_s.roa (hash: 0w2qL/ViAbe9xLVH17D2YZ/NouaV1VQroh9IMJno9TE=)
                          15: ot2MZTCpP9nZaT3V6EzfFvrzrkw.roa (hash: TYtFpB5ZnIdcgyHQu349+PWyQhvze7WRX2PQON2Vge0=)
                          16: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: +6nmHeuP2UiJbjutNkB2goJwdr1gEHOGWhyaQxjAII4=)
                          17: t2IZILmIlkrYmXptt2wUGw2uQwM.roa (hash: qFiwLdqK/Y7OvzgsKoQ4QT/arrjkDtpZ8/DZq9XFtzw=)
                          18: wnofk64UVBKP93Op1kPJw8OAZVA.roa (hash: tsj9FpIfOqGKJfVIRwRR/8c5mdUoax0lYr1/5kPg6Rc=)
                          19: x8XmJx41-rS3oQopw9axsmo7U5o.roa (hash: wJ4AKER/vvm4LzEhdW9wwiO9rdRJ4Gqly2DS/+StjsU=)
                          20: zn5InVym4Qw5pjaPhyuTeRl9bXQ.roa (hash: 1aIIVljxsESDDdBO8gz+BvW7tts7pQ5Z+DlOMn4Xgvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b6:c8:a0:64:61:c6:12:6f:47:80:5c:fc:de:db:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
        Validity
            Not Before: Sep 24 00:00:34 2026 GMT
            Not After : Sep 25 00:00:34 2026 GMT
        Subject: CN=4c2cde6201a95b2bef1df144c0d080e1a171670a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:fd:60:b5:79:c6:fb:31:0c:db:af:b5:fa:
                    df:15:01:6b:cd:cf:b5:06:82:91:42:15:62:dc:a1:
                    6a:01:05:71:cb:be:b2:81:0d:6b:67:f6:11:fb:4e:
                    b8:1e:9e:f6:75:8a:f1:75:c4:1c:b2:fa:50:62:ad:
                    d5:f8:4e:fc:6e:52:21:ab:bc:22:d8:32:6a:a4:41:
                    84:ff:87:68:66:2f:1d:20:13:09:63:51:d6:63:08:
                    18:37:df:cb:7d:83:28:8e:7d:00:4b:cb:7c:e2:f8:
                    c7:cc:ad:10:7d:c8:81:86:69:36:e6:4e:c8:28:73:
                    ff:a9:19:85:7c:0e:e4:07:4b:d2:52:ad:7d:01:34:
                    e9:c3:ef:b0:7a:e2:b6:76:3c:33:34:7e:35:05:01:
                    54:ce:38:18:1a:66:a9:77:83:e2:1f:9e:12:91:18:
                    b1:5d:56:64:6b:4e:e4:00:8d:6a:00:4f:27:4c:a6:
                    ef:c9:b7:64:ea:c7:a6:77:18:6d:5c:83:71:fd:fd:
                    ef:6b:7c:7d:16:70:c9:f4:f1:8a:76:e7:af:fb:9b:
                    bf:33:bb:44:ad:19:3f:22:68:8e:e2:56:96:fd:64:
                    6e:ea:81:ee:1e:44:f2:72:ad:a2:3d:65:27:fe:75:
                    97:85:a1:f3:4a:3d:0c:e7:b5:53:f7:38:4e:06:9d:
                    09:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:2C:DE:62:01:A9:5B:2B:EF:1D:F1:44:C0:D0:80:E1:A1:71:67:0A
            X509v3 Authority Key Identifier:
                keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e0:92:6f:8e:a1:c2:d2:89:59:6b:18:98:cb:ff:bc:4b:83:
         fe:4a:27:9f:53:f9:56:70:98:ec:db:a1:fc:48:e1:64:47:89:
         16:f2:fb:39:02:8f:05:d6:ce:6c:83:34:ff:7d:28:b1:a7:fe:
         a3:2a:00:dd:52:6d:26:5b:09:69:f4:4b:9f:54:ab:b4:f2:ea:
         96:60:e2:bd:70:08:ab:a4:47:a9:dd:cf:6b:6d:f5:9d:71:2d:
         1a:60:90:4d:9e:67:6e:72:2d:15:d7:f3:1d:2f:99:b4:d5:71:
         58:ab:09:0f:8b:1e:76:dd:d3:f0:e9:b0:f9:e7:f9:9e:70:9b:
         7c:3b:38:c8:25:1b:80:74:d8:78:1a:52:6a:af:05:c4:0a:64:
         18:2e:26:cf:22:79:06:11:57:83:4d:33:64:42:df:8a:ae:f7:
         7c:67:98:4d:02:9d:1c:7e:4b:4a:6c:0e:4c:ae:6d:1f:62:a7:
         e1:98:6d:10:29:e3:6d:77:e3:49:14:d2:48:a3:17:3e:ed:7d:
         c3:8e:a8:cc:d8:0b:35:f4:99:fe:14:3d:1b:f4:d3:93:d0:58:
         47:47:32:74:7a:b6:6a:64:10:fc:f2:06:9b:56:0b:94:5b:a9:
         0c:c9:51:04:06:8c:46:38:70:48:d5:0d:46:92:75:70:66:0c:
         71:e8:6a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:05:40 2026 by rpki-client