Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
File:                     94Bqw18urALMoEbWUPsivv7mjUM.mft (raw, json)
Hash identifier:          BjcQV9iwc+2iluByJZHSVTMmnF2qy7qkrf4y8UDjrew=
Subject key identifier:   10:7D:F2:43:50:9D:75:DE:89:E0:3D:DF:D1:9B:F3:80:05:71:E7:65
Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
Certificate issuer:       /CN=f7806ac35f2eac02cca046d650fb22befee68d43
Certificate serial:       01A0C28E27FBDEFEF6178CF79E036979F884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
Manifest number:          1A65
Signing time:             Mon 21 Sep 2026 06:01:31 +0000
Manifest this update:     Mon 21 Sep 2026 06:01:31 +0000
Manifest next update:     Tue 22 Sep 2026 06:01:31 +0000
Files and hashes:         1: 94Bqw18urALMoEbWUPsivv7mjUM.crl (hash: Tic4hLuyxnsSF3qMSudRDlXI9WeacApQEpUsNc7GBno=)
                          2: lyCd8jSWuD5ylcHwCB_UZElDqqc.roa (hash: yIuhwu9g6Xxe3O7KESvgNx7V8m2Ye7H/CuRv/nEh5KQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8e:27:fb:de:fe:f6:17:8c:f7:9e:03:69:79:f8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43
        Validity
            Not Before: Sep 21 06:01:31 2026 GMT
            Not After : Sep 22 06:01:31 2026 GMT
        Subject: CN=107df243509d75de89e03ddfd19bf3800571e765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0b:7b:6d:5b:bb:4c:50:c1:d4:52:38:a5:38:
                    9b:15:6f:b1:73:96:13:b4:b8:6e:64:e3:4a:44:6e:
                    13:57:d0:64:29:0b:12:3e:4f:b8:d6:6b:2d:1d:21:
                    f8:e9:bc:71:46:70:4f:43:56:14:73:51:8f:e0:45:
                    10:ca:c7:e7:85:c9:11:77:2c:36:99:54:d0:47:79:
                    bb:80:cc:c1:6e:fa:c6:e9:14:7d:34:b0:e2:bc:55:
                    8c:36:39:cf:c7:fa:70:73:1e:3c:64:80:e9:d2:c1:
                    e5:93:2d:51:76:02:55:69:44:2e:cc:d9:05:55:a2:
                    24:34:69:49:f9:87:d2:3c:10:77:64:70:8b:b8:15:
                    79:67:95:84:d2:b1:b4:3f:a1:ec:ff:2a:3c:71:a3:
                    ae:65:57:16:5c:24:41:54:b0:47:8a:b1:db:ae:86:
                    b5:dd:a2:9b:8a:34:0c:a3:ce:8e:be:49:49:7f:a0:
                    78:4d:66:25:d1:39:fb:b1:6d:d8:b4:de:32:da:f6:
                    3f:91:1c:00:e5:2c:d8:97:b7:a2:86:f7:f8:63:7f:
                    7f:05:db:43:3e:5c:8a:b4:01:d9:88:01:a7:16:60:
                    50:b1:0f:e1:5a:24:df:86:72:06:3a:f5:47:c8:cf:
                    72:92:95:e1:57:47:6d:65:0a:af:e4:d1:7d:83:21:
                    df:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7D:F2:43:50:9D:75:DE:89:E0:3D:DF:D1:9B:F3:80:05:71:E7:65
            X509v3 Authority Key Identifier:
                keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:15:03:60:59:ef:39:40:65:2e:3a:ec:e3:96:f9:14:43:ee:
         dd:42:a3:e5:09:46:41:46:1e:34:cc:bb:90:54:20:1b:f3:48:
         fb:24:2c:c1:80:9e:6b:35:16:11:12:db:d6:99:4a:af:bb:af:
         31:c5:f5:d2:0d:7a:fb:18:66:7e:d5:48:25:47:36:c7:cc:bd:
         de:c6:63:ac:33:b7:9a:70:47:b4:a8:a2:6a:08:f4:ec:52:61:
         02:8d:b5:93:48:73:1f:58:4b:d4:37:19:bf:70:78:a4:a9:6d:
         67:c4:ea:d1:3d:10:1e:64:a3:8c:01:40:73:dd:8e:7c:50:18:
         1d:d7:8d:2d:28:ec:0e:8b:b5:73:31:c6:9b:23:56:18:5c:fa:
         f2:09:ae:bb:d8:50:c8:da:94:ad:ec:a3:a2:44:c6:85:32:f9:
         11:c5:4d:17:ef:20:1c:3a:5a:c0:21:a0:3c:8d:76:3f:ad:dd:
         21:3c:9a:9f:a4:43:73:cd:0b:b5:92:3b:77:56:9d:e8:32:1e:
         ea:fd:29:b7:d0:37:d5:4f:52:07:6e:5a:98:7e:e2:cb:c6:37:
         f9:b1:7b:19:ea:0a:62:0a:df:d1:29:d9:37:1f:ba:df:e6:fb:
         b1:22:91:97:9a:14:f6:de:a7:ad:2e:60:91:37:08:44:8a:ef:
         68:81:77:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:00:24 2026 by rpki-client