Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
File:                     rm8YQW19RwqgStALyldoPHidhU0.mft (raw, json)
Hash identifier:          bX5brR8dhV64N9ALVzlKipTsnkTkBOBfyhmZ2RVzgAk=
Subject key identifier:   D7:C9:BB:19:B9:0F:DD:59:29:D3:E2:F4:1B:9F:55:C7:AA:72:00:14
Authority key identifier: AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D
Certificate issuer:       /CN=ae6f18416d7d470aa04ad00bca57683c789d854d
Certificate serial:       01A0D0EDD11DC60A44D61C8C9EA411CDFBFB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
Manifest number:          1152
Signing time:             Thu 24 Sep 2026 01:00:41 +0000
Manifest this update:     Thu 24 Sep 2026 01:00:41 +0000
Manifest next update:     Fri 25 Sep 2026 01:00:41 +0000
Files and hashes:         1: 4FbUQPbInKsJV6tUxAOCJ09zMtA.roa (hash: XDmbXmDYXHXEEVlnrPjHgOg48u89KTGeW87AL4CNgDM=)
                          2: rm8YQW19RwqgStALyldoPHidhU0.crl (hash: HIxgXBqcg0ww+DZn9LC24QUajlIpuy7aOeqSoCWodHs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 01:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ed:d1:1d:c6:0a:44:d6:1c:8c:9e:a4:11:cd:fb:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae6f18416d7d470aa04ad00bca57683c789d854d
        Validity
            Not Before: Sep 24 01:00:41 2026 GMT
            Not After : Sep 25 01:00:41 2026 GMT
        Subject: CN=d7c9bb19b90fdd5929d3e2f41b9f55c7aa720014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ef:bb:4a:f8:4b:fc:c1:94:1a:3a:d6:b6:2e:
                    b3:58:5a:bd:f4:11:87:55:4e:66:ea:e6:21:14:47:
                    63:ae:49:66:03:fb:4d:d0:44:74:a0:71:3e:94:3c:
                    27:46:d5:68:98:64:c8:4a:4b:38:20:6b:d2:0f:c1:
                    6f:e6:73:a2:75:b8:dc:61:5e:75:9c:aa:c4:a3:85:
                    ae:f4:fe:9f:ef:89:db:9a:0b:0c:cd:59:fe:4d:21:
                    b5:33:40:ee:41:92:80:7d:db:2b:55:05:95:53:96:
                    9a:a3:bf:d7:05:82:95:93:42:93:ce:4d:13:01:1f:
                    9e:1c:db:03:00:f5:3f:ef:77:ad:5f:81:dc:9c:ca:
                    bf:f0:d1:b8:59:40:ce:3a:bd:c8:c1:07:3c:c6:a8:
                    6e:ef:b1:f8:04:44:49:bb:e1:fd:eb:37:bf:ba:99:
                    ab:2f:8a:7b:bf:ca:f6:d8:82:0e:0d:dc:ff:ca:9f:
                    ce:21:fd:81:fe:86:86:ef:73:03:3c:ae:4c:9a:70:
                    7e:3a:f6:e6:1e:62:19:f6:78:68:ab:92:48:7c:90:
                    b1:fa:6f:d1:71:0b:d7:9e:2a:12:e1:70:a1:1f:d8:
                    b0:fb:2d:14:80:79:75:e3:ec:e3:b6:7c:f3:7c:e1:
                    89:3a:ca:2d:89:64:e5:b5:31:ca:62:0b:c5:d8:a9:
                    56:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C9:BB:19:B9:0F:DD:59:29:D3:E2:F4:1B:9F:55:C7:AA:72:00:14
            X509v3 Authority Key Identifier:
                keyid:AE:6F:18:41:6D:7D:47:0A:A0:4A:D0:0B:CA:57:68:3C:78:9D:85:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rm8YQW19RwqgStALyldoPHidhU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/97d97e-6de9-4332-b4df-06e54dd92171/1/rm8YQW19RwqgStALyldoPHidhU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:46:22:34:2d:74:a2:b2:77:cc:7b:03:d2:38:35:3d:ea:bf:
         48:8d:53:6d:72:b4:86:57:eb:a1:53:ec:ab:56:c7:d9:8d:ec:
         0c:9f:40:af:5a:53:0e:06:07:35:00:87:78:01:37:68:d0:13:
         79:84:92:9d:40:62:22:2b:23:61:7d:fe:3e:6a:de:45:7d:a8:
         96:40:ff:cb:a9:3b:2c:80:88:0c:e4:68:aa:f0:54:69:7a:49:
         c4:21:bc:e7:31:a9:79:f4:40:e1:dc:0a:43:91:95:b6:41:73:
         50:df:d6:f8:f4:f0:48:73:0a:6b:55:e1:94:22:c8:44:ba:61:
         28:cb:54:42:48:6d:ab:dc:f3:2d:9f:8c:73:4d:33:dc:0a:aa:
         fe:27:f3:39:fa:fd:10:6e:d4:cb:ab:bd:a8:94:a7:02:99:0e:
         4e:cf:02:51:86:f6:12:68:0a:6e:0b:39:d0:4c:08:74:1d:08:
         b7:67:f1:98:af:aa:ef:de:e0:21:c2:fe:0e:48:f2:85:7d:14:
         c8:6a:d7:44:3c:5d:e0:a4:17:67:72:bf:aa:aa:cd:dd:b3:1d:
         1e:c6:08:2e:1f:cc:7e:c0:4a:66:a6:99:07:d4:1d:70:5b:d9:
         78:ec:5e:ec:bf:49:04:82:3c:6e:91:37:1d:9d:0b:0c:41:61:
         91:27:bc:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:46:25 2026 by rpki-client