Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
File:                     Rych442ItIUuLgmCd6L7IKsMgbM.mft (raw, json)
Hash identifier:          Xk9EZjNti7qvMw5B2NZkwmkn7CHtc4XhgylJY3dhxv8=
Subject key identifier:   71:E1:82:8B:D8:1F:0B:62:CF:E5:29:D6:4C:B6:EB:98:FC:2A:43:3F
Authority key identifier: 47:27:21:E3:8D:88:B4:85:2E:2E:09:82:77:A2:FB:20:AB:0C:81:B3
Certificate issuer:       /CN=472721e38d88b4852e2e098277a2fb20ab0c81b3
Certificate serial:       01A0C858AA5273C1397BDE748022F5C6C001
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
Manifest number:          E1
Signing time:             Tue 22 Sep 2026 09:00:48 +0000
Manifest this update:     Tue 22 Sep 2026 09:00:48 +0000
Manifest next update:     Wed 23 Sep 2026 09:00:48 +0000
Files and hashes:         1: Rych442ItIUuLgmCd6L7IKsMgbM.crl (hash: qBJN0B7veYWvjIR8+djii1auKwkHjUSfWUJ+OMFTOvE=)
                          2: Sh6wUutUQFoAhZbyc9mJ5TkoVys.roa (hash: jlA4qWWIetKLdd6pQUmLfLeRwFINjNkS5gKXoUmiZho=)
                          3: ZsYV7B7rXiV9Sd4d1WORwRKLc0M.roa (hash: ZZC9xuQEACqHh/6sNaCAxnay+gwuPiQeRofUXPKfCak=)
                          4: ndXtEXhaQsCV3FdMrXZs6wJq0fw.roa (hash: AhakacNqL0L3QNvTgK4DkPjXfP1L2yY1VMxHtjyhGWA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:58:aa:52:73:c1:39:7b:de:74:80:22:f5:c6:c0:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472721e38d88b4852e2e098277a2fb20ab0c81b3
        Validity
            Not Before: Sep 22 09:00:48 2026 GMT
            Not After : Sep 23 09:00:48 2026 GMT
        Subject: CN=71e1828bd81f0b62cfe529d64cb6eb98fc2a433f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6f:b0:fb:71:b2:d5:dc:78:45:0f:9e:fb:17:
                    fe:ed:5f:d3:ad:7f:6f:54:22:b3:79:56:fe:c7:e1:
                    39:06:5f:bb:e2:6e:c2:3b:7e:af:fa:28:78:c8:a2:
                    4d:5f:4f:07:41:cd:99:0b:b5:50:20:ca:4a:4e:1a:
                    b4:7f:5f:0e:d2:1d:c7:77:a5:6f:17:73:5d:06:c2:
                    3e:b1:3b:36:06:7d:72:9e:c4:93:5c:af:9d:74:0e:
                    cd:b4:7a:c6:ca:37:b2:c1:2b:b1:95:99:3c:f3:a6:
                    8c:b6:9f:ed:9d:ab:d0:16:27:f1:c6:48:16:b5:01:
                    d2:70:54:d4:9d:87:e3:4a:63:e1:27:bc:78:98:96:
                    71:c7:94:70:d0:2a:41:67:33:3a:00:f5:9f:11:96:
                    d8:a4:c8:f2:97:b8:f4:b1:9f:e7:e5:2c:a9:9a:cb:
                    93:0e:10:29:b1:9e:24:58:16:4e:31:13:19:3a:57:
                    a3:43:40:3a:cb:c6:fe:16:ea:4b:6e:f8:99:f7:86:
                    68:28:89:ea:8c:8f:f4:58:1f:f5:c5:59:af:07:96:
                    ab:3c:2f:4d:f4:25:83:31:40:6b:a6:6f:64:b8:b1:
                    f2:29:cd:90:af:e3:d4:cb:74:e9:af:6b:38:7c:bd:
                    2b:11:9c:9d:ad:75:c6:90:e8:8d:7b:2d:48:73:73:
                    98:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E1:82:8B:D8:1F:0B:62:CF:E5:29:D6:4C:B6:EB:98:FC:2A:43:3F
            X509v3 Authority Key Identifier:
                keyid:47:27:21:E3:8D:88:B4:85:2E:2E:09:82:77:A2:FB:20:AB:0C:81:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rych442ItIUuLgmCd6L7IKsMgbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/01a73a-8da0-48b9-aaed-a23c131c0d38/1/Rych442ItIUuLgmCd6L7IKsMgbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:6b:4c:44:25:b5:02:cb:ab:bd:3a:b0:85:86:7a:96:7c:1e:
         19:4f:46:8b:e2:54:18:41:1a:ae:d4:ac:b6:57:e8:6c:0c:29:
         12:a6:4a:93:35:1f:10:06:80:a0:6e:8e:51:de:be:27:44:8c:
         c1:19:d7:e4:50:8c:fa:83:09:0a:2e:cf:7e:63:40:9e:1f:06:
         01:35:9a:c6:ce:a6:32:d7:17:7b:79:8a:35:51:23:39:2f:26:
         0e:76:3a:ab:a2:6f:b2:c6:12:50:6a:f2:77:4b:9b:ab:60:08:
         c6:97:94:33:34:8f:d1:5b:81:e9:f0:e2:aa:f8:da:91:f1:b6:
         e2:14:71:d7:bd:20:33:e2:6d:19:f2:a4:8d:43:ec:f8:82:b1:
         02:42:38:91:66:25:74:58:bb:a4:67:4e:74:a6:c2:9e:6f:01:
         7b:06:5e:29:44:12:47:19:2c:16:22:ae:2e:72:3a:13:4f:0a:
         57:d1:ef:70:5e:ca:0b:19:67:dc:26:12:af:5b:88:b2:6c:53:
         d8:62:ab:14:28:44:3d:5a:4c:51:9d:75:04:ee:de:29:f2:d2:
         bf:c0:13:37:39:fd:9d:4f:8f:ac:10:84:d3:ed:16:1f:5b:28:
         1a:f3:76:49:f2:95:8e:4a:9c:19:41:1d:44:66:d9:23:f0:be:
         13:a8:92:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:01:55 2026 by rpki-client