Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
File:                     G9vEEUREgGUxPvC4LhzPeubqVyA.mft (raw, json)
Hash identifier:          ZCMeMOHCYnk2q22yYSTjhdtX/TQHAjlJ+rj45rZ2X4c=
Subject key identifier:   43:C6:3F:AD:C7:C4:5D:E2:C5:C5:02:7E:B9:44:AA:DF:F8:DC:E9:64
Authority key identifier: 1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20
Certificate issuer:       /CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
Certificate serial:       01A0CEFF73A81C07000F7496AD24EF1018E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
Manifest number:          1A6D
Signing time:             Wed 23 Sep 2026 16:00:42 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:42 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:42 +0000
Files and hashes:         1: G9vEEUREgGUxPvC4LhzPeubqVyA.crl (hash: ny1ub7HQqgCaRYYIeRKNWVie7mKKpIMphoYhhpdKdS8=)
                          2: tXwPHcD7KOQpl4ubBwGZXMLcNGc.roa (hash: kHVmMcCLDSaK/L8IsfRUQoLqMYtr8aRP/Gpfi71r/IU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:73:a8:1c:07:00:0f:74:96:ad:24:ef:10:18:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bdbc41144448065313ef0b82e1ccf7ae6ea5720
        Validity
            Not Before: Sep 23 16:00:42 2026 GMT
            Not After : Sep 24 16:00:42 2026 GMT
        Subject: CN=43c63fadc7c45de2c5c5027eb944aadff8dce964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:17:81:c2:df:94:50:54:82:45:df:9f:e6:95:
                    60:85:cc:4f:0b:f6:f4:77:22:f6:0b:ca:75:2f:b2:
                    26:98:14:79:35:80:2a:63:0c:34:45:f4:58:83:3b:
                    44:c2:2c:6c:9e:97:66:a8:2d:96:27:68:b1:de:41:
                    7e:6d:c6:bd:b7:88:43:26:4a:ce:1c:7f:d3:14:9b:
                    c2:03:58:83:96:8e:18:c0:19:9c:a2:0d:14:2b:0a:
                    d3:6b:a6:14:b5:74:ed:74:4f:24:cb:7c:06:87:91:
                    63:c3:20:d5:31:e3:c8:9b:b7:7f:b0:d4:0e:3e:35:
                    a5:c5:8d:33:3c:1d:b6:14:24:83:fb:7b:6a:e9:31:
                    97:a8:7d:f6:2b:e9:ef:29:78:05:96:67:49:76:43:
                    6b:ed:af:f3:cc:af:d3:ee:cf:ac:a0:d4:6f:aa:45:
                    5f:39:dd:c2:b3:a2:5f:29:d7:7e:81:a7:22:6e:de:
                    9c:bd:c7:05:44:d7:c0:bc:87:76:eb:00:70:86:e9:
                    fa:be:90:f6:38:be:4a:87:0a:1c:22:62:89:de:23:
                    e1:36:91:50:e7:76:12:78:77:c8:f1:8a:af:df:9b:
                    41:a1:9f:f9:f0:e7:7e:84:ac:2f:a5:b9:68:d2:18:
                    af:fd:ee:fd:25:c5:83:d0:53:a2:8f:2b:1e:a3:e7:
                    f8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C6:3F:AD:C7:C4:5D:E2:C5:C5:02:7E:B9:44:AA:DF:F8:DC:E9:64
            X509v3 Authority Key Identifier:
                keyid:1B:DB:C4:11:44:44:80:65:31:3E:F0:B8:2E:1C:CF:7A:E6:EA:57:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G9vEEUREgGUxPvC4LhzPeubqVyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4a293b-4c41-428c-9287-bd98b3e90e43/1/G9vEEUREgGUxPvC4LhzPeubqVyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:1a:eb:39:7e:4a:0b:82:90:88:b0:55:ce:67:c4:7f:20:30:
         53:ba:c8:d1:eb:19:54:95:03:9e:66:9a:7d:99:7d:4b:29:57:
         d4:76:e6:8b:64:a6:a1:c1:39:68:10:d9:6c:4f:93:fd:9f:52:
         dd:b4:0f:56:43:82:37:88:83:3a:90:82:75:5b:c3:f1:4f:eb:
         db:df:38:44:2c:cc:b8:a1:c4:a3:8c:cc:88:a4:ad:a2:1b:6a:
         04:77:de:4d:61:f9:77:62:b8:93:0c:76:47:2d:1d:10:95:00:
         3d:4a:8f:44:ca:35:fb:8c:ba:ed:6f:f8:e6:91:d1:b3:02:b4:
         ee:e0:d0:55:3f:bd:9b:0a:94:eb:57:d8:d1:82:64:6e:57:ad:
         d6:5b:3d:9b:dc:c9:40:83:87:db:b4:12:09:76:de:5b:1a:1d:
         4b:29:a2:d3:8d:b6:fe:88:e9:fd:a0:58:51:82:02:19:6c:34:
         d9:20:2b:83:78:0d:b0:8f:86:d0:2e:0e:0e:46:38:cb:d0:c8:
         60:d8:6e:f5:ff:52:64:d8:b2:13:2f:bd:f5:f4:84:cc:5f:f0:
         3f:f8:24:97:4d:c0:ac:13:f7:ff:cc:c7:48:de:2b:78:31:97:
         96:14:74:2f:bf:a3:4a:c7:18:a5:9e:86:06:3d:26:87:a5:3b:
         4b:3d:6d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:33:13 2026 by rpki-client