Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
File:                     cPTWBuHReQgGOXe2mHdoLtfi0e8.mft (raw, json)
Hash identifier:          iSRm3jk8XDFLXa5rHLn6xns4mjXnn4A66zV0czQzFOs=
Subject key identifier:   49:EE:31:31:06:73:B6:39:BF:39:C3:C1:F5:2F:69:8C:93:E7:BA:94
Authority key identifier: 70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF
Certificate issuer:       /CN=70f4d606e1d17908063977b69877682ed7e2d1ef
Certificate serial:       01A0C6D78504E578BE7ABD2F9DFAF1418362
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
Manifest number:          0760
Signing time:             Tue 22 Sep 2026 02:00:08 +0000
Manifest this update:     Tue 22 Sep 2026 02:00:08 +0000
Manifest next update:     Wed 23 Sep 2026 02:00:08 +0000
Files and hashes:         1: cPTWBuHReQgGOXe2mHdoLtfi0e8.crl (hash: hLNruZ2r/gy6Qrvb7vKYdKzjVBmVJcFE24/RdMGw/Ig=)
                          2: eUWfxWghJ9MEZ7tCGolfI7KpscU.roa (hash: NcF9IeGtFM+4GMOYjdME6cxPWgCCMAdO701188d5CSk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:d7:85:04:e5:78:be:7a:bd:2f:9d:fa:f1:41:83:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70f4d606e1d17908063977b69877682ed7e2d1ef
        Validity
            Not Before: Sep 22 02:00:08 2026 GMT
            Not After : Sep 23 02:00:08 2026 GMT
        Subject: CN=49ee31310673b639bf39c3c1f52f698c93e7ba94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:70:c0:b3:8c:a7:75:70:a5:9b:04:71:03:d9:
                    2a:45:5e:a2:88:5a:c2:c9:69:42:35:70:6d:15:3b:
                    90:31:b7:a9:5e:23:35:5a:d1:68:0c:0f:c0:61:5e:
                    f1:e7:a7:50:7e:84:9c:d0:6b:4e:49:02:3c:63:6c:
                    13:29:7f:3a:1e:8f:82:b5:bb:a3:4a:05:de:c8:48:
                    30:66:6e:be:76:c7:6e:0b:85:72:95:b6:19:0e:fd:
                    81:99:68:59:31:8f:60:57:ac:b3:d4:48:cb:d8:f5:
                    df:b8:22:a6:cf:bc:d3:7f:e4:20:3b:5e:c7:e6:28:
                    ba:06:e6:8b:e7:8b:62:d8:ec:e7:6c:08:39:20:ba:
                    da:dc:9b:7c:7e:43:58:fa:09:bc:5e:af:f6:70:79:
                    28:ca:06:41:db:aa:7b:e4:61:b9:1d:ae:b4:2a:d6:
                    1a:82:3c:53:70:20:e9:46:a3:fc:76:fc:eb:59:3d:
                    69:84:ca:00:b5:87:88:7e:c3:6b:9f:f1:01:a6:ec:
                    b6:02:35:02:42:25:55:bd:45:b2:3a:ae:3d:39:d7:
                    34:00:e7:a5:71:d5:11:ae:66:44:ca:2b:d5:78:fc:
                    33:a7:b7:8b:b0:3e:2c:93:c0:a9:da:2a:5d:ef:c2:
                    d5:62:92:d4:cb:9c:25:7b:6f:43:2a:0e:1f:50:96:
                    ba:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:EE:31:31:06:73:B6:39:BF:39:C3:C1:F5:2F:69:8C:93:E7:BA:94
            X509v3 Authority Key Identifier:
                keyid:70:F4:D6:06:E1:D1:79:08:06:39:77:B6:98:77:68:2E:D7:E2:D1:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPTWBuHReQgGOXe2mHdoLtfi0e8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b1083d-c078-415e-8d9d-576337e50dc4/1/cPTWBuHReQgGOXe2mHdoLtfi0e8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:ae:eb:4c:3c:e0:96:34:b7:0d:6a:ea:89:46:53:69:04:e7:
         75:d3:df:11:b6:c6:49:20:50:fc:5a:1a:2f:41:cc:18:1e:e2:
         8e:84:95:9a:e4:fa:25:f7:f0:67:2f:ec:9b:28:b8:66:41:48:
         48:17:32:ad:80:e8:77:78:9c:d8:97:a4:38:0a:68:19:b8:df:
         1b:ae:c0:21:60:9c:44:cf:58:61:b5:72:16:f5:b6:06:13:f3:
         2b:5a:e9:48:1f:4e:00:12:b8:e7:13:54:01:19:6a:4f:9e:cd:
         6b:1f:3e:a0:44:5b:d1:09:19:2f:75:e2:b1:db:ca:f8:fc:fe:
         95:cc:8e:68:de:ca:22:17:c2:cf:76:a9:2d:4b:4d:13:ff:8d:
         9b:9b:8c:be:69:52:ac:c2:01:05:9d:b8:12:de:99:87:d0:47:
         10:97:24:0e:ce:b0:25:bd:78:92:86:b9:71:af:5d:e9:a7:db:
         01:eb:c4:a2:b5:6a:f9:d8:3a:26:62:04:00:43:60:5b:ba:23:
         f9:39:4e:06:87:ed:06:57:5e:b0:3b:51:7f:7f:4a:e0:72:a8:
         93:4b:f3:f5:33:f9:e2:b9:1d:e6:84:63:3a:2a:da:1d:32:43:
         95:e3:84:ba:0a:63:6e:34:8a:4e:e9:3e:24:9e:6c:18:b9:fc:
         75:61:9b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:24:04 2026 by rpki-client