Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
File:                     Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft (raw, json)
Hash identifier:          DeewqA7qEi40ecHthpFc+wXzt/KRVdU7Ebc5pFvQJYQ=
Subject key identifier:   10:20:80:A9:F6:40:F6:19:66:98:B0:FD:D9:C9:DE:70:DF:DD:94:06
Authority key identifier: 4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A
Certificate issuer:       /CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
Certificate serial:       01A0D1242B1DB50DB36E5820950AE923F7B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
Manifest number:          1732
Signing time:             Thu 24 Sep 2026 02:00:03 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:03 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:03 +0000
Files and hashes:         1: 1-PTdsM_AGC5XNTFED_Bd1lKJUrY.roa (hash: t/bF8BVKmcIucBirQ4iHEKuh8d9LX26p0NPMDv8nEak=)
                          2: 4qABJGwgFUFuvmAEHteeA7rJeZw.roa (hash: l0sKCAwspdUIfQjPD3CVboLz2SqClsdPV71LM0PlV5o=)
                          3: 6PInJ2tbRTip0fDT1jftw8w7R7I.roa (hash: JDGvPisnEK8vyfb4vuVlQuoioDUHeR2I2cF0Dy3S3VU=)
                          4: B3ZEk8Cap2g9KplZIsoRlruoyZE.roa (hash: g43dat6xdrbXP10ocqQ6N9VTX+6RhA4yXEtNgHAbATA=)
                          5: Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl (hash: VK5FAutwX9mC7Ft8rng6VRon/OgmY0eU37RNvmpimrY=)
                          6: hxyFg93cyoODusD3h3L8hfc5HG0.roa (hash: BPNhbAxVULf2vc9aGDatTvAGnPVmpDD0d77IZ2F/Ui8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:2b:1d:b5:0d:b3:6e:58:20:95:0a:e9:23:f7:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4acfac8645a3c6f10042dc4a74d700d9d06af17a
        Validity
            Not Before: Sep 24 02:00:03 2026 GMT
            Not After : Sep 25 02:00:03 2026 GMT
        Subject: CN=102080a9f640f6196698b0fdd9c9de70dfdd9406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8a:47:ff:40:4f:a8:fe:ff:01:27:11:83:f6:
                    33:67:96:48:3b:ae:e8:8f:03:a2:af:da:25:66:02:
                    ce:a2:f1:57:81:cb:24:00:2b:26:a6:4a:d0:8e:07:
                    db:f2:ae:c3:2f:ed:ed:c8:bf:c5:a4:f1:16:ff:78:
                    c0:a1:c0:8a:7a:40:11:8a:a8:67:ed:49:0b:92:d0:
                    0b:fd:9b:db:bb:ba:f8:eb:b5:69:e0:0b:cc:8a:90:
                    5b:03:9c:82:df:fb:82:5a:2d:6e:0d:83:f4:94:53:
                    a5:aa:38:ba:88:16:1f:38:f2:08:8c:fd:0b:41:f8:
                    ab:18:9f:58:ec:0a:f2:9a:40:b2:b2:75:0c:d9:dc:
                    92:a6:e8:c0:49:ba:63:50:89:42:23:66:75:f8:79:
                    7f:a4:27:3c:f6:58:4b:cf:93:54:15:2f:b4:f1:7b:
                    83:df:7e:2f:49:02:a8:3a:17:37:9f:77:b2:b4:da:
                    32:e4:d1:eb:7a:cf:15:53:76:c7:3d:dd:d3:ff:77:
                    65:eb:c7:a0:d4:b9:77:da:a3:af:62:2a:37:18:bc:
                    28:2b:12:5b:08:3e:52:de:91:12:04:27:8f:fd:7a:
                    8a:22:18:2f:19:ea:b0:d0:79:e1:01:f3:f8:19:fc:
                    b1:1d:32:f6:a5:21:41:30:49:57:b9:c1:bc:3b:56:
                    c0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:20:80:A9:F6:40:F6:19:66:98:B0:FD:D9:C9:DE:70:DF:DD:94:06
            X509v3 Authority Key Identifier:
                keyid:4A:CF:AC:86:45:A3:C6:F1:00:42:DC:4A:74:D7:00:D9:D0:6A:F1:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2c17cb-4742-44cf-891f-7bf8277d8a2f/1/Ss-shkWjxvEAQtxKdNcA2dBq8Xo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:04:2d:03:db:06:2a:4f:e3:63:82:95:9a:6a:e8:0e:c5:bc:
         0e:35:33:f9:77:14:b5:2e:0e:2c:61:45:ff:e8:41:a5:aa:32:
         c8:4c:42:71:a0:e6:04:08:63:38:89:b7:22:de:65:91:00:57:
         ca:18:71:74:3c:92:55:f2:85:19:71:c8:69:e2:7e:47:b4:b6:
         fa:53:48:d9:0a:a3:ef:c4:18:c1:28:8c:25:ba:c7:df:c2:75:
         3b:f1:1c:51:46:b4:58:0c:57:4d:02:04:88:27:01:9c:79:c5:
         6e:8b:0d:bf:1b:51:e6:41:8b:14:c6:9e:70:bb:bb:67:c0:dc:
         74:35:64:d9:43:55:44:b9:dd:cd:a9:6f:91:ce:a2:cc:f1:af:
         89:4b:df:83:93:32:e9:27:ac:d5:0d:8b:c2:af:13:ac:e1:89:
         92:92:81:b1:53:17:7c:83:6e:6a:3c:bd:a5:6d:db:19:cf:7a:
         77:26:95:a3:c7:01:c4:0c:98:62:9b:01:bb:61:71:3e:41:35:
         cd:6d:1b:be:50:d3:a9:82:a5:0f:b1:d4:2f:b6:8b:17:45:38:
         d6:32:7a:91:a2:1e:b7:94:ad:52:38:40:09:10:6e:2b:17:c9:
         84:61:ac:8f:1e:f2:83:21:07:fd:3a:1f:41:1b:c1:33:24:7b:
         df:99:7b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:33:08 2026 by rpki-client