Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
File:                     YzCxTOdPYKjqSrtuqmDuRHD0On8.mft (raw, json)
Hash identifier:          aA/u4onFwyDKv5ixaGdREEtvgSbFh5VbWsx+kC1HqSM=
Subject key identifier:   7C:CF:B3:5B:BF:C9:18:8D:AF:F1:EF:67:1E:1F:1B:31:02:DD:60:43
Authority key identifier: 63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F
Certificate issuer:       /CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
Certificate serial:       01A0D012AFF2B2AD9956AB599C0169A570D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
Manifest number:          03CC
Signing time:             Wed 23 Sep 2026 21:01:20 +0000
Manifest this update:     Wed 23 Sep 2026 21:01:20 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:20 +0000
Files and hashes:         1: 30S6gV2oh78DXtrqvndtvSPPKd4.roa (hash: OcTAJVeDjRXR19iBC0Wj5Tjt34V2Iwuh2sKP2/1+Fgg=)
                          2: YzCxTOdPYKjqSrtuqmDuRHD0On8.crl (hash: 7ZPRH/es/EDwHQNQZLUWLwiVku9FAplqYFnWJYoWW00=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:af:f2:b2:ad:99:56:ab:59:9c:01:69:a5:70:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6330b14ce74f60a8ea4abb6eaa60ee4470f43a7f
        Validity
            Not Before: Sep 23 21:01:20 2026 GMT
            Not After : Sep 24 21:01:20 2026 GMT
        Subject: CN=7ccfb35bbfc9188daff1ef671e1f1b3102dd6043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b8:79:4b:17:fe:2d:39:45:20:99:28:27:cb:
                    9a:12:c2:21:6e:2d:4f:67:12:c2:f7:40:79:42:0d:
                    6c:9e:44:f5:28:6d:99:c4:0e:ee:60:52:44:6f:30:
                    cf:93:62:f5:e3:16:cb:01:ff:a7:ce:87:d3:d6:69:
                    73:12:b3:38:6a:28:7c:e1:f0:1d:3b:15:fe:09:2b:
                    74:d1:5c:6b:77:5d:d4:3c:82:6d:34:19:c8:63:03:
                    90:28:1a:58:a3:1f:8d:66:98:8a:df:cb:7d:2c:58:
                    8b:4a:9f:99:da:2b:e9:ad:63:44:33:33:43:c5:44:
                    a0:cb:8a:80:44:17:62:fe:af:36:f6:79:37:4e:18:
                    16:b9:4c:69:9b:35:ae:1d:9a:8e:87:ed:41:c0:10:
                    04:d6:68:00:5b:05:31:52:c0:dd:fe:06:09:a6:dc:
                    ee:4e:86:0d:4d:2d:fb:16:66:b8:16:32:6c:8f:3a:
                    07:98:63:46:62:43:0d:62:08:52:6c:73:7f:73:00:
                    cc:4d:41:de:7e:35:e6:fc:3e:d3:d7:77:be:20:dc:
                    94:9e:c3:7b:5c:60:98:d0:9e:ec:25:bd:42:a1:64:
                    49:87:cc:ab:8c:1c:31:02:28:ea:5f:bd:c2:1b:6f:
                    77:0b:61:bf:7f:ab:83:43:5b:02:b7:e1:39:05:68:
                    ea:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CF:B3:5B:BF:C9:18:8D:AF:F1:EF:67:1E:1F:1B:31:02:DD:60:43
            X509v3 Authority Key Identifier:
                keyid:63:30:B1:4C:E7:4F:60:A8:EA:4A:BB:6E:AA:60:EE:44:70:F4:3A:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzCxTOdPYKjqSrtuqmDuRHD0On8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/56fcaf-c2d0-41fa-9e33-f10ad82c8557/1/YzCxTOdPYKjqSrtuqmDuRHD0On8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:58:4f:3d:76:91:bc:cb:d7:98:2f:8b:a9:e8:fc:c0:17:26:
         24:37:ef:74:8e:eb:8c:aa:fb:62:61:eb:ad:1c:8b:2d:27:04:
         76:05:fa:8c:80:50:cb:1b:89:22:f4:a6:e4:23:a4:c7:f6:d1:
         75:d0:4e:02:c8:d6:d8:ee:23:13:a8:fe:ee:ad:48:92:43:32:
         8c:75:c1:11:cf:e5:b1:51:9e:14:16:15:3f:54:e6:1e:47:3c:
         6f:a2:57:c7:40:f3:c9:64:36:b3:3c:9a:2f:ad:3b:c9:df:06:
         64:c1:45:89:7f:ea:49:03:0b:59:0e:62:89:98:bb:a9:b2:42:
         05:3a:96:79:5e:31:93:d4:54:c0:e8:0f:50:1e:8d:e3:f3:58:
         88:f4:a5:db:a8:fa:05:99:21:e7:ba:83:40:56:a3:ef:f2:16:
         04:c2:9e:86:4b:77:6e:47:40:58:2b:e1:81:aa:30:28:71:20:
         5d:e1:4d:fc:22:42:60:1e:a8:1a:c2:74:ba:6d:dc:e9:83:33:
         2a:77:fa:74:cf:4b:dd:79:07:d2:10:85:61:13:e6:00:8a:9a:
         15:38:39:d1:eb:99:2e:80:31:6e:b9:56:c3:ff:95:1d:22:08:
         88:ff:d0:a1:6b:93:bb:c1:16:df:4d:22:8a:a9:75:0d:10:55:
         14:6d:da:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:26:23 2026 by rpki-client