Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
File:                     gXyxTOQBSsMmnXDu6onIcFWxdvE.mft (raw, json)
Hash identifier:          vrAexRobW7xdvzqid8x+JQb4PquourAACLOufCd/BwM=
Subject key identifier:   13:E6:CA:5D:71:E5:37:75:6A:6C:31:97:4C:E2:79:8E:0B:F7:0F:7A
Authority key identifier: 81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1
Certificate issuer:       /CN=817cb14ce4014ac3269d70eeea89c87055b176f1
Certificate serial:       01A0C746453203849CFA4AF144D110F95642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
Manifest number:          0B45
Signing time:             Tue 22 Sep 2026 04:01:06 +0000
Manifest this update:     Tue 22 Sep 2026 04:01:06 +0000
Manifest next update:     Wed 23 Sep 2026 04:01:06 +0000
Files and hashes:         1: gXyxTOQBSsMmnXDu6onIcFWxdvE.crl (hash: r71Y0dRUNaouJFfT2Spp/+s8D0/HQNDHReIKU4yz/R4=)
                          2: qdUh2hSoqgeqIRg-X_UezX9LadQ.roa (hash: T5mdwLAzJSWrOE2roB/OPAtD4ZvRlYtzJ6Bor5XITOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:46:45:32:03:84:9c:fa:4a:f1:44:d1:10:f9:56:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=817cb14ce4014ac3269d70eeea89c87055b176f1
        Validity
            Not Before: Sep 22 04:01:06 2026 GMT
            Not After : Sep 23 04:01:06 2026 GMT
        Subject: CN=13e6ca5d71e537756a6c31974ce2798e0bf70f7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ff:1e:b6:5d:7a:a7:67:50:45:48:5d:9c:ef:
                    04:45:bd:6c:ff:d2:4e:56:3c:23:3f:0d:33:f4:91:
                    09:cf:b2:a3:a6:0d:7e:36:5a:6b:b1:85:34:8c:68:
                    7f:08:26:45:f1:75:ea:5c:fe:85:49:e9:35:1f:0c:
                    61:d4:7e:19:40:42:7a:15:dc:d0:e7:ff:e4:35:bb:
                    8b:71:6d:ee:a5:4a:f2:ec:30:10:44:ad:c1:e0:5a:
                    95:38:a3:de:61:12:95:c2:9f:54:93:dc:bf:e9:e0:
                    31:ec:86:37:e0:95:43:7e:b2:ab:0f:e1:49:c8:66:
                    e9:a1:a9:86:3a:d4:4f:86:e1:7b:5f:72:13:83:4b:
                    c2:ef:bb:57:e4:fb:df:d6:1d:99:e0:94:e2:fe:00:
                    0e:08:91:81:40:5b:0b:46:87:fd:05:13:94:a2:a0:
                    b0:40:10:3b:a7:52:eb:3f:59:d9:ca:42:11:b6:36:
                    99:a6:00:f6:92:32:4f:ab:ab:b3:43:92:b0:40:0d:
                    7c:81:c7:b7:56:69:bb:76:be:0a:b6:41:d2:2c:cb:
                    14:19:b3:07:61:4c:43:33:93:11:ea:0c:71:45:4c:
                    7a:51:9b:39:29:73:17:34:3a:48:e4:0d:a7:f6:89:
                    77:73:22:bd:bc:55:82:f7:af:27:46:85:39:2d:25:
                    12:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E6:CA:5D:71:E5:37:75:6A:6C:31:97:4C:E2:79:8E:0B:F7:0F:7A
            X509v3 Authority Key Identifier:
                keyid:81:7C:B1:4C:E4:01:4A:C3:26:9D:70:EE:EA:89:C8:70:55:B1:76:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gXyxTOQBSsMmnXDu6onIcFWxdvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/f6f508-4b3e-422d-8fbc-1a2abda1a9e5/1/gXyxTOQBSsMmnXDu6onIcFWxdvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:89:60:b5:96:f1:ea:d9:df:71:4d:bf:c0:19:fd:dd:a9:64:
         0f:8d:8f:06:71:85:81:3e:c2:24:7b:43:53:5d:a5:c7:8b:aa:
         03:2b:b1:07:19:1d:d6:90:ac:9d:ec:5e:40:9f:04:25:ce:da:
         b7:91:a6:87:b0:23:3d:56:fd:2a:f0:d0:2b:9b:ae:fe:29:ea:
         8d:08:41:8a:60:7e:78:d7:cd:52:3c:57:4c:29:f5:8a:64:22:
         a9:e1:1e:5c:67:df:04:a1:cd:49:81:a7:33:43:f2:f6:f6:ef:
         ff:91:86:b0:26:b3:e6:c5:9c:04:46:0a:38:09:96:03:57:54:
         25:4b:5d:ed:5b:9e:88:d0:1d:c9:52:a2:d6:b6:d8:e8:b0:c1:
         fa:99:4a:08:ac:e2:84:ad:19:93:1b:c3:54:01:7e:b6:a8:e4:
         0f:7f:22:80:74:9e:78:bc:90:79:73:9f:f6:18:12:66:41:d5:
         16:83:29:43:8f:6a:90:f6:ea:37:1a:ef:af:6b:d0:81:b3:9c:
         f4:9a:e9:8b:fe:57:20:e7:b5:8c:c9:45:92:c9:c6:21:fa:36:
         3b:db:95:b5:08:52:6a:a6:df:25:55:97:12:b3:25:6e:67:77:
         c1:2b:f2:f2:0f:b8:22:74:bd:b4:5a:f6:3c:d1:7f:83:0b:9b:
         db:14:33:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:33:22 2026 by rpki-client