Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
File:                     9TRtPtvsbacngHIsCkGr7qY2Ydg.mft (raw, json)
Hash identifier:          S+B2TaIoBWgE/2V7tCp+zg/zMNQf1/9c1TThRobTpcg=
Subject key identifier:   73:01:9F:5A:71:74:E4:C9:D5:E1:5C:7D:8E:2C:D2:B6:67:01:9C:00
Authority key identifier: F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8
Certificate issuer:       /CN=f5346d3edbec6da72780722c0a41abeea63661d8
Certificate serial:       01A0C25653508B9486390FCFECD8B78748B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
Manifest number:          1A65
Signing time:             Mon 21 Sep 2026 05:00:32 +0000
Manifest this update:     Mon 21 Sep 2026 05:00:32 +0000
Manifest next update:     Tue 22 Sep 2026 05:00:32 +0000
Files and hashes:         1: 9TRtPtvsbacngHIsCkGr7qY2Ydg.crl (hash: WIf9+l1D7lFrnpYssphuwy9pzxjH12lKo85XQxN3ROo=)
                          2: D6pbu6PuaXGUO72aluwouFmWjyE.roa (hash: 8nTR6hgWB05NUmie1kc3rGQpyUGmaI7APNhiLwhFbGA=)
                          3: rcuhAyb47ghJSUkGluQz5xbi7a8.roa (hash: dSp7RJi/mX+RduoQcYjQOlir9QxlgPqiE3UuXIucR2M=)
                          4: tR_zS3A481vfOfnyyYvyFxLHia0.roa (hash: Qhq0h0WmbkiB7Z075UwkzQfNFRsgPnPMZNA9izf97NA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 05:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:56:53:50:8b:94:86:39:0f:cf:ec:d8:b7:87:48:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5346d3edbec6da72780722c0a41abeea63661d8
        Validity
            Not Before: Sep 21 05:00:32 2026 GMT
            Not After : Sep 22 05:00:32 2026 GMT
        Subject: CN=73019f5a7174e4c9d5e15c7d8e2cd2b667019c00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:52:e4:3f:a9:52:1f:eb:3c:97:e3:cf:d5:10:
                    d3:fc:d8:a4:cd:27:ba:64:fe:05:e2:5b:b4:43:fd:
                    c7:e5:ab:f7:3f:66:b3:fc:31:41:56:0c:fe:38:58:
                    b1:f5:eb:90:a1:a3:f2:e3:fd:89:a8:b7:d5:25:b2:
                    43:84:81:31:af:76:31:00:33:81:89:a7:31:87:89:
                    7a:3c:84:74:08:60:f6:09:e4:b1:dc:2d:45:56:6a:
                    f7:5a:3d:ae:6a:10:57:80:1f:9a:16:87:45:cd:3f:
                    e2:66:33:01:c5:c9:2d:86:50:a2:3a:3a:4b:af:3e:
                    9a:ed:e0:99:3f:5e:27:0a:88:50:94:84:4d:43:da:
                    56:b0:94:29:a6:e1:29:59:6c:ac:88:59:af:3f:76:
                    00:a9:da:0c:31:e9:b7:d6:c0:ea:17:ab:2f:6e:f8:
                    5d:d3:0e:2b:9a:5d:4c:1f:71:6d:04:1b:93:cf:7f:
                    e3:54:58:fd:aa:f1:8d:e0:82:3d:af:19:98:81:88:
                    e1:ee:77:e1:f1:7f:2c:3f:a8:27:95:96:57:1a:8f:
                    16:d4:5f:83:0e:e0:de:ba:61:e6:eb:b7:26:44:94:
                    be:7b:0a:e1:91:7f:a1:0f:5d:40:f0:57:f7:67:12:
                    b7:2d:ed:8f:07:75:12:d2:8e:c2:ab:67:29:28:e6:
                    32:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:01:9F:5A:71:74:E4:C9:D5:E1:5C:7D:8E:2C:D2:B6:67:01:9C:00
            X509v3 Authority Key Identifier:
                keyid:F5:34:6D:3E:DB:EC:6D:A7:27:80:72:2C:0A:41:AB:EE:A6:36:61:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9TRtPtvsbacngHIsCkGr7qY2Ydg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/be8064-9e11-461a-936d-fa70bd90e894/1/9TRtPtvsbacngHIsCkGr7qY2Ydg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:3c:34:ce:67:e3:d2:c2:d5:0a:fe:1e:c7:2d:93:8e:68:4b:
         5d:5c:09:f4:ac:3a:e9:44:4f:65:92:d4:6a:75:65:2b:63:9a:
         a6:30:8c:3a:34:d4:ff:f2:70:35:5f:1f:7c:ac:57:ed:03:77:
         24:17:34:ce:be:63:22:79:4a:9f:d5:49:de:87:f6:fa:60:80:
         0d:49:4a:1e:7b:20:fa:35:9c:47:8b:ef:62:93:be:59:94:ce:
         33:da:6b:16:45:cf:02:23:32:b0:f8:c8:9f:2d:86:5c:12:59:
         ac:bc:7e:e7:97:3e:67:76:c7:66:98:14:03:da:14:a1:f6:c6:
         54:53:d2:ac:d1:db:ea:f7:41:9f:bb:a8:cb:ef:2a:f4:9e:ab:
         4f:ac:58:cd:ad:4a:7d:7e:37:19:f6:2a:63:15:a6:5a:60:fd:
         d8:d5:a1:df:f5:a0:af:9d:af:2a:33:2b:9e:c4:27:6f:a4:8a:
         bf:39:6e:4f:53:b1:6c:c4:5c:50:3a:87:5d:81:a3:c5:56:e2:
         41:04:13:d7:82:d4:0f:19:1d:ea:48:f4:b5:12:b5:8a:a7:65:
         ba:74:11:96:bb:82:9e:d6:99:df:b6:19:33:6a:f6:b5:3a:9f:
         b1:cd:38:ad:20:d1:85:19:22:61:d1:dc:e7:a3:ea:32:49:5c:
         37:9c:eb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:28:28 2026 by rpki-client