Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
File:                     sLGxJtrAqgt3lIZADt5yVLJe6qY.mft (raw, json)
Hash identifier:          nVEJwOtKwkHXrRlW/HsFN8oneuwLVKlNtPqeJ/QAMb4=
Subject key identifier:   19:C1:C2:01:B1:CC:DD:6E:6A:9C:6D:5A:CE:08:5D:AD:18:EA:17:87
Authority key identifier: B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6
Certificate issuer:       /CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
Certificate serial:       01A0E13CF7B936D90667F3FA9C9641E69ADA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
Manifest number:          1A07
Signing time:             Sun 27 Sep 2026 05:01:04 +0000
Manifest this update:     Sun 27 Sep 2026 05:01:04 +0000
Manifest next update:     Mon 28 Sep 2026 05:01:04 +0000
Files and hashes:         1: 3CIM-rszzFckhjZbgzPmZtOKZv4.roa (hash: VqajRiaghj0MLKmKn/iBz4Zyi+LNEnSguYlblCLEBTI=)
                          2: sLGxJtrAqgt3lIZADt5yVLJe6qY.crl (hash: hK/15PJ4STjONiZqA+OReteWmXTDvlAWIhK2kS8rsyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:3c:f7:b9:36:d9:06:67:f3:fa:9c:96:41:e6:9a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0b1b126dac0aa0b779486400ede7254b25eeaa6
        Validity
            Not Before: Sep 27 05:01:04 2026 GMT
            Not After : Sep 28 05:01:04 2026 GMT
        Subject: CN=19c1c201b1ccdd6e6a9c6d5ace085dad18ea1787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c5:22:e1:af:e4:e8:13:42:b2:44:14:2d:a0:
                    e2:d1:9d:ea:c5:2e:ce:fd:b2:cd:ab:4e:60:91:05:
                    17:fd:6a:3c:26:a7:40:82:58:f4:e8:81:8a:74:f3:
                    e8:60:c9:61:a7:b3:a0:89:99:82:d3:ff:3f:87:e4:
                    81:97:b0:7b:12:8c:b8:6b:c5:9d:83:30:39:34:00:
                    2c:e8:20:6b:cc:8e:47:5a:fa:89:10:60:dd:c2:87:
                    d1:2b:2e:68:9a:66:e4:f3:8b:b4:fd:1e:72:c4:43:
                    59:24:d9:08:67:a0:54:aa:b9:2b:48:6d:6c:e2:96:
                    6f:a1:fb:83:36:8d:1a:cf:86:2e:0b:c8:45:8d:13:
                    06:5c:61:52:53:d1:54:0c:49:28:53:d9:00:43:84:
                    f6:46:96:19:d4:7b:1e:5d:af:a0:c7:ce:bd:c3:2e:
                    36:fb:39:94:e0:1b:71:9a:5a:d2:d9:95:55:a8:f7:
                    03:74:e0:e9:06:84:bc:57:4c:e6:ac:74:78:09:f3:
                    02:31:d8:6f:20:a0:37:89:44:f6:9f:1d:6e:90:c3:
                    fe:4a:7a:96:d1:bc:78:4a:45:e3:98:b9:c8:9b:bb:
                    21:b9:0f:93:39:5e:c4:f1:19:15:2b:59:72:b4:ac:
                    25:92:ce:1b:6f:05:bb:9c:16:9f:fc:4f:31:1c:c9:
                    32:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C1:C2:01:B1:CC:DD:6E:6A:9C:6D:5A:CE:08:5D:AD:18:EA:17:87
            X509v3 Authority Key Identifier:
                keyid:B0:B1:B1:26:DA:C0:AA:0B:77:94:86:40:0E:DE:72:54:B2:5E:EA:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLGxJtrAqgt3lIZADt5yVLJe6qY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8a476a-3455-4e3a-8c33-ff824b415693/1/sLGxJtrAqgt3lIZADt5yVLJe6qY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:4c:4a:26:f6:65:eb:7d:aa:ce:f7:f6:98:ca:a0:32:eb:62:
         08:df:ec:91:32:a7:5e:92:e4:39:95:e0:52:0b:0b:87:74:f1:
         02:c0:77:e5:61:4e:f7:da:d6:6b:73:d9:b7:10:59:8b:5d:d7:
         f5:ed:e5:e2:c7:a0:eb:e8:ca:93:35:e2:d4:ac:2a:fd:62:5e:
         e5:4b:14:78:50:53:31:56:c5:8f:ae:2a:6e:60:b8:49:b7:0b:
         86:ab:cb:da:37:df:99:f0:33:ec:16:c1:33:98:f5:87:84:fd:
         44:1f:7a:5d:2c:49:27:23:3a:de:d7:1a:7b:06:37:41:61:94:
         47:0f:24:ad:1b:f6:39:af:79:b2:d6:6c:66:e8:6c:25:0a:01:
         7e:d2:25:e0:55:c7:2b:eb:72:89:13:37:f2:43:47:94:37:02:
         21:4f:f5:de:6c:e0:77:4e:c6:01:28:62:41:91:f8:44:6d:c6:
         39:95:e1:c2:be:5c:f6:fd:9e:f4:1c:4e:46:ea:f7:b1:f2:b2:
         56:34:7a:f5:31:3c:91:0b:70:4b:72:d6:ac:b7:17:e1:5e:bb:
         cb:ba:d8:15:7e:5f:d8:69:77:1b:e7:f6:ad:47:08:e2:09:11:
         66:0d:96:6e:81:3a:79:8c:13:90:55:ed:e4:4e:4d:c3:75:91:
         87:0a:68:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:48:55 2026 by rpki-client