Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
File:                     p0j74dfTpqpHTeQ_qIXOLQkcUps.mft (raw, json)
Hash identifier:          OndGFSfSoGl6ScELYqj0PxxmZTEN8YYM/YaHmpcBG64=
Subject key identifier:   F5:BE:9B:2B:2B:6F:82:E6:43:44:B8:FA:3F:6B:D5:10:44:99:2D:6A
Authority key identifier: A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
Certificate issuer:       /CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
Certificate serial:       01A0C7B3E42CF9B557C87E727B96C684B659
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
Manifest number:          17B9
Signing time:             Tue 22 Sep 2026 06:00:50 +0000
Manifest this update:     Tue 22 Sep 2026 06:00:50 +0000
Manifest next update:     Wed 23 Sep 2026 06:00:50 +0000
Files and hashes:         1: X2Acde_AXJbiIzf4WSQxKTMikWM.roa (hash: BQtrWQacm7ByC/7TCno2qFJsSN/6VxyfhO1qrX07bW4=)
                          2: p0j74dfTpqpHTeQ_qIXOLQkcUps.crl (hash: RFbKVrh5SITfXP2OBSTVrAeq7hPfVRz48CwxSnMiOtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:b3:e4:2c:f9:b5:57:c8:7e:72:7b:96:c6:84:b6:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
        Validity
            Not Before: Sep 22 06:00:50 2026 GMT
            Not After : Sep 23 06:00:50 2026 GMT
        Subject: CN=f5be9b2b2b6f82e64344b8fa3f6bd51044992d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6b:e8:57:df:a6:da:7c:42:e9:68:e4:7d:90:
                    af:c9:cb:6c:70:ae:35:57:2c:a9:c4:3a:3a:e2:09:
                    cd:84:30:e9:81:f2:f3:ca:89:e1:d4:9e:df:b5:0d:
                    e6:45:c9:9c:eb:a1:36:02:55:79:7c:a9:b1:1d:52:
                    30:c3:fe:55:91:92:9a:9a:06:5b:df:fb:50:92:c9:
                    fb:55:f9:a4:46:76:b0:b2:fa:69:26:39:97:81:db:
                    57:88:ba:9a:b7:f2:1a:45:b8:0a:71:0d:4a:b3:60:
                    1e:f3:26:a0:bd:e1:1a:fa:36:f9:6d:27:9d:55:6f:
                    95:db:81:e3:86:1b:a4:b3:df:5e:a2:a9:31:80:0a:
                    40:a6:ec:18:89:1f:33:c2:e5:9d:62:fd:73:4d:f7:
                    17:1f:1c:18:b0:23:4a:a2:4e:cc:3d:96:e4:d3:e1:
                    f7:fe:35:c4:9f:e9:8d:c0:6d:17:a0:b9:ba:ce:57:
                    7a:83:a4:c8:6c:09:bc:e8:66:7e:99:f1:30:f7:41:
                    fa:ae:99:4d:0c:e6:fe:f6:00:e8:93:22:5b:d1:cd:
                    69:9c:78:2d:f2:17:85:05:11:10:12:a4:f2:db:de:
                    e2:ba:ce:cb:9c:de:44:c9:ec:b8:c0:ff:e6:26:ab:
                    49:fc:6d:6a:6a:49:7d:f0:1c:6c:e2:7a:ae:30:bb:
                    51:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BE:9B:2B:2B:6F:82:E6:43:44:B8:FA:3F:6B:D5:10:44:99:2D:6A
            X509v3 Authority Key Identifier:
                keyid:A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:67:25:ec:33:c9:f0:2e:d1:5b:4c:d2:82:9a:2d:f7:be:45:
         24:23:c3:ad:63:c9:fc:7b:0b:85:b8:7d:7e:9f:d7:2d:fb:18:
         e5:39:f0:a2:27:1b:b9:9c:e8:b7:c3:b2:04:29:96:89:4e:6d:
         e0:5c:58:2b:c7:ff:65:1a:d0:45:fd:d3:06:0a:ec:87:ca:52:
         d0:1b:78:51:cf:0f:90:04:c0:b7:4e:3d:ee:99:37:ae:6f:98:
         96:29:77:29:ce:ed:05:93:be:03:f8:32:c5:2e:40:79:dc:56:
         1e:f0:cb:aa:ae:1c:d0:6b:e6:7a:50:8e:b0:b5:f0:4d:2a:29:
         f0:cf:06:6f:b2:80:b2:fa:12:0b:39:7c:44:44:dd:f4:51:ef:
         68:2b:21:26:d2:a5:e0:74:29:e5:6e:ac:3a:ff:f8:d4:62:56:
         41:ea:64:12:cf:20:c9:f6:90:bd:ac:c0:d3:dd:c1:cc:ca:9d:
         4c:56:74:ba:36:ea:09:3a:62:37:5b:bd:25:71:f5:ef:63:d1:
         b6:34:f1:a9:d9:ee:23:00:df:8a:a7:91:c8:24:53:c7:11:b9:
         e1:d2:41:74:8b:aa:44:4e:8f:5e:ba:c0:7a:98:85:50:00:05:
         7d:a3:63:fb:79:98:d7:fc:b3:88:45:2c:fe:9a:62:d7:48:14:
         3a:84:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:39:16 2026 by rpki-client