Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
File:                     syycJt98zYrTjYm9XUk4C5Ox4Ak.mft (raw, json)
Hash identifier:          GihDLe5qSICXgq0w8imkRBbjfYuUrsdVMY419uLWsQA=
Subject key identifier:   23:FD:CC:CE:87:AA:98:D9:FA:51:D9:3E:15:B8:B6:A9:99:D7:EF:4A
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Certificate issuer:       /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial:       01A0C5C4F6C15C6F3D5CF4688ED5067D29D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
Manifest number:          17C1
Signing time:             Mon 21 Sep 2026 21:00:14 +0000
Manifest this update:     Mon 21 Sep 2026 21:00:14 +0000
Manifest next update:     Tue 22 Sep 2026 21:00:14 +0000
Files and hashes:         1: TtF2-5jlTeNtomtDsnLXaVfZZQs.roa (hash: bOFctgKhUglT+7Rnoc8CMHSaJ6gExTqm2TI5PVgaKVs=)
                          2: cxrYDYRve-AK30Fn1TQ9Kqrsm3M.roa (hash: omj5Dxmbd1CeguDg9OXaZDFdwZG6Smx/H+Y39YrtYK8=)
                          3: jpMgfOXsWY_dXar5ukUfc44iJfo.roa (hash: Vr6SidyDuchvsNpWGptCRsdP0YTMrZLP6qYLEmokLMc=)
                          4: syycJt98zYrTjYm9XUk4C5Ox4Ak.crl (hash: aenbDpjLuonmSKFZB4OQ8KuFqop20QyJqfThZ/z/FKI=)
                          5: zH07H7zQmk0_BI3n--kBX2rTXZk.roa (hash: mqYZEsIkcJHMyWUH+Ig2HfzxxSYtrbeLFsv8Je8AY40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:c4:f6:c1:5c:6f:3d:5c:f4:68:8e:d5:06:7d:29:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
        Validity
            Not Before: Sep 21 21:00:14 2026 GMT
            Not After : Sep 22 21:00:14 2026 GMT
        Subject: CN=23fdccce87aa98d9fa51d93e15b8b6a999d7ef4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e5:6b:ad:e8:61:59:bd:32:11:2e:ac:95:8f:
                    62:42:b3:a0:8f:a6:8e:40:1b:52:8d:4f:f1:6a:60:
                    c2:7f:2b:ef:52:18:ae:c6:ba:36:12:9a:3e:7f:e9:
                    d5:ca:af:4b:d6:75:b6:32:57:0d:ed:85:46:31:a4:
                    e6:00:3d:3c:e2:44:1c:4c:3a:9d:45:5b:70:89:31:
                    42:3b:19:e2:b3:c8:dc:f4:f5:91:25:3e:0e:dd:c3:
                    53:3d:b2:75:ed:83:7e:d2:99:a2:61:47:4f:3f:3a:
                    67:8f:c6:dd:3d:dc:dc:6e:c8:26:9c:ae:fd:75:47:
                    6a:4d:6e:7b:76:7e:7d:47:ec:ae:2e:f1:bf:46:c1:
                    81:4f:d2:cb:93:ae:a3:1d:c7:36:ad:33:82:2d:1f:
                    f3:2b:1e:d5:ca:4a:3b:f3:01:19:0a:b3:cc:2f:2b:
                    65:89:0b:75:b2:45:2c:ff:f3:c7:fb:a4:e2:a9:de:
                    53:e0:49:a8:be:12:65:2c:1a:bc:8e:27:4c:9c:ff:
                    cd:42:28:90:2f:07:ce:e1:c3:96:94:76:70:03:0d:
                    57:d3:f5:72:ca:f6:52:c6:28:10:45:63:82:e5:99:
                    20:f1:51:97:cb:c2:23:d2:fa:fc:e5:1b:c7:09:ba:
                    f4:d6:de:e7:4c:22:59:e0:53:a7:1a:f8:5d:ef:e2:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FD:CC:CE:87:AA:98:D9:FA:51:D9:3E:15:B8:B6:A9:99:D7:EF:4A
            X509v3 Authority Key Identifier:
                keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:2b:ce:a5:ad:da:32:b4:d4:58:63:4f:d9:f6:8b:e8:3f:49:
         77:4c:a2:57:74:23:e0:ec:c6:b4:2c:3d:a2:8e:90:b1:9b:d7:
         e2:22:d7:e8:09:95:fe:af:ff:21:78:c3:94:78:b0:04:cf:07:
         1b:11:67:2e:b2:f3:4c:69:ca:fd:b4:fe:4e:5f:4e:d0:d7:9f:
         43:ac:cd:29:0c:89:34:be:09:ef:18:00:82:62:dd:f6:bc:8b:
         f3:a4:0f:7c:b6:b5:e4:8e:d3:b5:c2:98:88:ba:01:76:95:23:
         d4:86:fc:61:da:37:86:17:56:d3:5a:bb:69:9a:43:e2:d5:99:
         45:a2:57:c3:fe:92:d9:6b:11:0a:be:f4:d1:2f:2a:ac:3e:55:
         76:78:59:ea:04:46:ee:d8:b8:a9:d2:d3:31:b2:18:4a:77:3f:
         26:e1:3a:da:b4:5e:ff:fb:cf:02:aa:31:1e:0f:52:44:a4:36:
         ee:e8:9d:0c:68:d8:28:ea:1f:4a:77:c7:7a:d4:b4:d5:32:fc:
         b9:7b:35:c6:68:f1:5a:78:fa:6d:74:37:08:1c:04:94:81:da:
         f6:00:9b:e1:a0:48:cf:0b:dd:db:9c:22:43:f3:03:7b:42:69:
         0f:cb:d1:8e:3c:8c:60:a7:bb:0c:91:1f:9d:d6:10:34:ef:54:
         6e:32:7c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:32:06 2026 by rpki-client