Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
File:                     RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft (raw, json)
Hash identifier:          eU6HcXXmJoGl6DW8WphDrL7d+aUet4dJ7NBi2YaevFk=
Subject key identifier:   AB:6F:1A:BC:DB:13:0B:B6:1F:48:A8:53:FE:22:C9:E0:95:DF:66:78
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Certificate issuer:       /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial:       01A0C4B2BC169A2B845EE2A75355CAB84793
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
Manifest number:          1A72
Signing time:             Mon 21 Sep 2026 16:00:42 +0000
Manifest this update:     Mon 21 Sep 2026 16:00:42 +0000
Manifest next update:     Tue 22 Sep 2026 16:00:42 +0000
Files and hashes:         1: 8fhYtKpVakt0uV4ZHUTjU4fIbFw.roa (hash: BUVZIDRFer90z5xzSe7ir9WDKqZ/aWAGvB26nEQK32A=)
                          2: RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl (hash: sCsO2wXYBlhHckZZfW9/enGBUzp0ET0V5GqG5ZganW4=)
                          3: TCAQGPQ0BZ8ud4Gm8UguZYpuzms.roa (hash: +Kmb6BumaUGSfi8TJeQxjsoBcMk+3PlRsvjbV5UF/c8=)
                          4: _xGsVJQeBzbBLpCkFLNfOvZbW4U.roa (hash: Y4500/iUXADzSRR+OyCO6ojWBN6EGiCPjwgXlWxzhhA=)
                          5: vcbEzvx1zie9dwpRKaaVwvTw4d4.roa (hash: s7dhy3Ht7fPj270WhKJcSmby6GyMwW0TOLWlYMocDDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:b2:bc:16:9a:2b:84:5e:e2:a7:53:55:ca:b8:47:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
        Validity
            Not Before: Sep 21 16:00:42 2026 GMT
            Not After : Sep 22 16:00:42 2026 GMT
        Subject: CN=ab6f1abcdb130bb61f48a853fe22c9e095df6678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:59:55:5e:26:9b:bc:89:c2:72:06:05:50:d1:
                    2b:a7:d8:dd:99:f5:75:82:99:16:ba:b6:eb:91:a8:
                    c1:2b:59:e1:88:df:c8:bf:43:4c:f7:f0:d9:e5:59:
                    55:d5:cb:1f:88:90:bd:9a:3e:cd:9b:e8:a7:f9:50:
                    e8:86:74:9b:57:d7:8a:22:79:f9:b3:3b:cf:78:0d:
                    9d:cb:41:30:da:3a:e4:9e:96:c9:4d:42:62:5a:32:
                    2d:91:7f:6c:21:b4:02:a7:ef:ec:61:70:9e:d3:13:
                    cf:52:01:07:2a:74:7f:36:18:45:bf:24:a7:4e:0e:
                    af:97:6b:0b:65:8b:9a:62:aa:4c:67:8c:04:55:01:
                    c0:07:21:95:bf:ca:50:c6:ed:14:de:f8:42:44:61:
                    5a:52:2d:cc:8b:41:fd:49:c3:26:71:80:8b:23:65:
                    be:93:ab:fa:88:fc:56:c4:a8:6a:cc:de:82:8e:b3:
                    f1:78:fc:87:86:00:68:8f:b2:74:48:03:8b:51:69:
                    ef:8e:3e:32:ec:b4:63:a3:e1:5b:64:55:4f:0c:61:
                    da:46:e4:5a:4c:cd:de:a3:05:f9:9e:3b:e4:d8:33:
                    31:4a:d9:05:4b:64:9a:f5:b3:05:45:c3:7d:ce:90:
                    86:8f:1f:c5:fc:4c:f3:af:61:42:53:41:aa:51:47:
                    34:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6F:1A:BC:DB:13:0B:B6:1F:48:A8:53:FE:22:C9:E0:95:DF:66:78
            X509v3 Authority Key Identifier:
                keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b1:7c:a3:3b:d2:50:df:db:fc:56:a1:aa:b0:d6:32:f5:50:
         23:12:0e:50:e7:d3:98:6c:15:c4:15:af:fe:37:c6:01:e9:38:
         58:8e:50:21:11:84:0f:ff:55:ab:5f:84:7b:fe:4a:04:b3:b2:
         bb:a1:9e:ed:70:c3:0e:0e:7c:dc:f7:3c:f9:8e:c9:25:97:c8:
         f9:86:27:57:de:a6:cf:22:09:00:cf:b6:1d:f5:96:67:36:97:
         0d:6f:d5:70:89:9f:7f:e4:f7:fd:ce:86:4f:7e:39:49:e1:fb:
         25:c9:14:7e:6a:a6:b8:e0:ac:19:27:0a:f8:3f:d0:d8:90:ad:
         08:7a:30:d3:70:c0:f7:8b:cb:e5:ca:3b:e5:17:e6:a3:4f:48:
         8c:b5:09:bc:84:86:b0:8b:a8:6a:1c:89:6b:19:d1:b5:86:e3:
         d8:9f:88:4b:f8:f0:86:e3:23:a7:0d:17:6e:00:47:e6:bc:4d:
         2a:c2:50:fa:c5:98:f3:7e:cf:48:94:37:07:28:c9:1c:fa:df:
         41:e0:99:2b:31:5a:62:0c:87:76:a9:d3:0c:2e:80:13:33:ae:
         70:3b:d5:df:54:11:fd:84:c0:58:51:c0:03:6e:91:59:f2:70:
         69:af:b7:0a:f5:1c:3a:d7:a5:10:12:30:10:61:69:ab:1a:21:
         d1:a4:e8:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:57:31 2026 by rpki-client