Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft
File:                     i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft (raw, json)
Hash identifier:          BEP6aSQTxjgBGxQmLC9YM7TGAcoKfPiggAwmiBwL2Ns=
Subject key identifier:   66:3C:44:EF:4D:B0:4E:18:FA:0C:C7:D1:9C:A9:7B:9C:B6:2D:FF:09
Authority key identifier: 8B:B9:C6:26:B3:CD:4B:DC:22:41:EE:D3:42:F4:88:3E:FB:56:54:A0
Certificate issuer:       /CN=8bb9c626b3cd4bdc2241eed342f4883efb5654a0
Certificate serial:       01A0CA46A48F66A51907E948590F87DCAADC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft
Manifest number:          D8
Signing time:             Tue 22 Sep 2026 18:00:22 +0000
Manifest this update:     Tue 22 Sep 2026 18:00:22 +0000
Manifest next update:     Wed 23 Sep 2026 18:00:22 +0000
Files and hashes:         1: 6KuPFzf4RKyktQ4wnHHPdKvoFXU.roa (hash: XTZ6AAhH0mITXv4PMvo+aFQ0m0dDHZ+yiHDISIQyhLc=)
                          2: ZIZ030QhhzFvggSEl-vTxdGfHlg.roa (hash: CUycEuUDS0zxjJemu4oZ9wIU+xi7vqRjfi0W27XlBfI=)
                          3: eLGE_51_6fXDl6v8POnsDoLbXD8.roa (hash: 1RwsA34iJlX33Oz/snyk+pECLx2oO8VCH9UrkWAkfXo=)
                          4: i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl (hash: l8P2ZhpGMQre6O6pTXX9E9B/krnjC1pnM/mkFUDU+84=)
                          5: stTRni4YM83OgBxFCYHTBarMniU.roa (hash: sdW8g8p16K2y61HEzLwNn3mjfOgNWIo1IuskhK0jm60=)
                          6: yER6Jwc260jYGlbdAWyVTAN3WMM.roa (hash: vpGox+pD5sY2CKKHnvr7twErOeITxh7mmeX17MbXeQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:46:a4:8f:66:a5:19:07:e9:48:59:0f:87:dc:aa:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bb9c626b3cd4bdc2241eed342f4883efb5654a0
        Validity
            Not Before: Sep 22 18:00:22 2026 GMT
            Not After : Sep 23 18:00:22 2026 GMT
        Subject: CN=663c44ef4db04e18fa0cc7d19ca97b9cb62dff09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d1:25:4f:e0:74:a8:0b:07:10:55:34:9b:d4:
                    97:72:3b:34:cc:56:52:eb:cb:f3:85:67:aa:bb:2f:
                    7b:4e:91:4d:e3:f4:75:e2:39:7d:ba:95:a0:f5:d7:
                    54:65:46:d8:9b:d5:29:60:4e:f2:40:48:5d:0d:8b:
                    aa:d8:98:7a:3a:72:7f:0a:ea:0a:9d:c3:86:60:12:
                    92:ff:14:d7:cb:79:9a:56:da:7f:6f:ad:d3:14:c2:
                    f8:d4:ef:36:14:83:b8:7d:b1:99:1f:51:19:7b:bb:
                    ee:12:c6:05:8a:88:dc:ca:55:9a:83:93:cf:9b:c3:
                    e9:73:52:31:40:b7:3a:c6:20:bc:4a:0f:0b:54:c5:
                    01:94:f1:e1:d9:52:00:20:2c:f1:f2:d5:1a:20:f4:
                    ee:9d:b0:64:15:fb:3a:05:86:36:26:17:51:74:ed:
                    e8:a9:ec:89:2a:ef:86:bf:7b:b0:29:7a:83:b2:c0:
                    45:49:77:62:be:f7:09:2b:16:7c:90:2b:b5:5f:51:
                    c2:27:5d:9a:a2:cd:fc:88:b5:73:4d:79:7a:8c:af:
                    5d:f4:69:da:5c:e2:1d:cc:f1:8f:88:7b:60:b6:c9:
                    e1:23:ac:23:7b:e4:06:22:69:16:e9:38:96:26:19:
                    09:ad:c5:65:f3:b7:e3:7b:8e:79:ea:99:06:9e:32:
                    8e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:3C:44:EF:4D:B0:4E:18:FA:0C:C7:D1:9C:A9:7B:9C:B6:2D:FF:09
            X509v3 Authority Key Identifier:
                keyid:8B:B9:C6:26:B3:CD:4B:DC:22:41:EE:D3:42:F4:88:3E:FB:56:54:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7nGJrPNS9wiQe7TQvSIPvtWVKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/e93742-6cd6-4a50-81b1-c1521bdf344d/1/i7nGJrPNS9wiQe7TQvSIPvtWVKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:c8:d6:51:5c:94:f8:f5:d5:1d:2d:5f:f4:34:1f:a4:6f:ee:
         bb:4a:c9:0c:f5:8c:16:5e:06:a6:7c:e0:09:60:bb:25:8b:bd:
         b7:fd:52:30:b9:6f:2c:97:70:e1:14:c2:61:06:80:56:1a:22:
         79:7b:1d:37:71:ec:76:95:02:97:14:75:5b:2c:93:5d:e3:f0:
         be:67:69:02:34:e9:52:7a:6f:91:12:7d:02:4d:a0:27:95:74:
         15:5c:75:1b:8b:e8:b5:6e:07:fe:02:ff:7e:b2:b3:62:c1:4b:
         cb:04:42:05:59:87:57:2e:14:a1:2c:16:c3:c6:1d:a3:b3:3a:
         33:d5:b2:0d:07:e3:55:99:09:e3:30:3f:02:79:41:92:f8:1d:
         7f:96:83:7d:ab:48:2f:58:2a:44:03:9d:87:ee:ec:7a:7e:b7:
         ea:ae:e9:e0:c6:90:e5:9a:88:01:b9:32:af:27:3e:2e:29:47:
         96:a9:be:c2:64:d2:d4:f9:1d:85:f2:51:7c:e5:0f:11:ad:1e:
         e3:37:9d:73:af:19:ec:13:fa:6c:12:26:a0:bb:11:8f:8b:6e:
         66:e1:d4:96:89:e6:b9:b9:65:f8:0d:94:b0:6c:ed:ba:a6:4d:
         ea:57:02:82:36:3b:a6:31:2c:69:67:ae:4a:c7:a7:57:62:a6:
         0b:8b:17:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:10:18 2026 by rpki-client