Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
File:                     in2Cv6bL-YO5cDSUAb3veO1mgrg.mft (raw, json)
Hash identifier:          VkbWAiUYshEWqr2E1D6Af1t231jOv12OSlXXJOY5S2Y=
Subject key identifier:   26:4E:8E:F9:D8:16:A4:F3:A9:C9:B7:A9:66:C5:AA:81:53:9A:A0:B0
Authority key identifier: 8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8
Certificate issuer:       /CN=8a7d82bfa6cbf983b970349401bdef78ed6682b8
Certificate serial:       01A0CCA36C16FA1F6C3D6A88E58A4E757344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
Manifest number:          AE
Signing time:             Wed 23 Sep 2026 05:00:57 +0000
Manifest this update:     Wed 23 Sep 2026 05:00:57 +0000
Manifest next update:     Thu 24 Sep 2026 05:00:57 +0000
Files and hashes:         1: hMcWmfOrDrAMf7dFpd9dzvNPNAc.asa (hash: zDEzbE4uwtCgoLiCH/chQKVEo68ut8ck0BWOTkrF+1g=)
                          2: in2Cv6bL-YO5cDSUAb3veO1mgrg.crl (hash: lzy9W8Nf9xR6rO+K7qq36rCC0SdzcwxD0tnnGH/jw6w=)
                          3: xS8E-QjHw2dzPf1KkLqn10hE7LM.roa (hash: 5/fVJMfp+DX4M6I9ZjhWtgFG3senFJ4L1a5dgOE8EkY=)
                          4: yeXW_YTNCb28ui0glUomJkKeHCk.asa (hash: vdoh5rReyHOdjiVdFljYmY00V/dpR9j9Pzzhrb2/aMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 05:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:a3:6c:16:fa:1f:6c:3d:6a:88:e5:8a:4e:75:73:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a7d82bfa6cbf983b970349401bdef78ed6682b8
        Validity
            Not Before: Sep 23 05:00:57 2026 GMT
            Not After : Sep 24 05:00:57 2026 GMT
        Subject: CN=264e8ef9d816a4f3a9c9b7a966c5aa81539aa0b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:e2:24:32:ce:4c:a6:0e:df:7d:1e:0b:37:
                    c8:04:dd:6d:9a:df:72:b5:c5:39:ae:cc:65:54:54:
                    e9:ef:8e:e8:9e:e6:1a:e6:a2:67:dc:68:70:50:ef:
                    58:2f:79:c7:99:5e:44:ab:07:56:55:dc:a6:2d:1e:
                    a7:64:ce:1c:f6:73:69:db:5e:46:36:a1:fb:70:3d:
                    f7:49:80:20:56:9d:0c:13:3f:00:80:72:ae:8c:24:
                    e2:8d:30:14:ee:6b:27:f0:fb:e5:89:40:00:bb:f6:
                    7e:aa:9d:45:a1:de:92:7e:05:d4:15:6a:c9:5d:37:
                    60:72:e7:37:fb:58:44:bf:de:e1:33:1d:f3:ff:38:
                    7f:f8:f5:23:4d:fd:14:31:71:5a:34:90:50:06:38:
                    8e:9a:3d:b3:37:2d:dd:28:c7:90:60:1d:1c:12:7e:
                    36:0d:be:ff:48:f8:51:aa:1a:d4:5e:e4:a8:20:9f:
                    8c:6e:a5:18:a6:70:14:9c:6f:a9:89:72:5b:4d:92:
                    ee:81:63:19:4d:59:e7:e4:7c:4a:0a:99:d7:ab:41:
                    6d:e2:af:43:06:e8:d4:25:ca:51:da:70:f8:9c:30:
                    5b:18:39:b4:6c:1c:5c:fd:15:49:45:26:ad:54:31:
                    87:dd:ff:58:0a:3c:eb:6b:d9:98:d3:40:67:c8:c0:
                    fa:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4E:8E:F9:D8:16:A4:F3:A9:C9:B7:A9:66:C5:AA:81:53:9A:A0:B0
            X509v3 Authority Key Identifier:
                keyid:8A:7D:82:BF:A6:CB:F9:83:B9:70:34:94:01:BD:EF:78:ED:66:82:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/in2Cv6bL-YO5cDSUAb3veO1mgrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/666099-db59-4d33-9887-91f31008a2eb/1/in2Cv6bL-YO5cDSUAb3veO1mgrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:85:72:c1:2a:88:52:53:f1:92:cb:00:46:7a:1a:e0:8a:15:
         8c:0a:18:b6:72:b0:a0:14:b4:e1:d6:73:f5:66:bc:4f:e3:94:
         c1:4d:c7:ea:ae:63:d7:05:12:9c:8c:f1:5c:2e:90:51:cd:ff:
         57:e3:b6:c5:0d:3c:be:44:9d:5e:c7:8d:a3:3f:6d:d2:6e:f5:
         ce:33:d0:93:0a:8b:ee:90:52:d7:e5:56:74:51:a6:31:0e:32:
         b4:86:71:f4:92:87:62:49:e5:1a:4e:08:76:25:68:2d:8d:a4:
         e0:a7:2b:fc:0e:16:8f:ff:c6:5f:2b:60:25:fc:a6:ae:ef:80:
         de:d9:54:6e:66:47:67:1a:1c:7f:9e:9d:94:33:f7:cb:cb:0d:
         b1:d5:57:1e:ed:87:9c:82:bf:17:ed:2d:d1:66:65:ba:49:ba:
         d1:1e:2d:d3:dc:96:3d:96:73:ab:52:22:15:42:c7:03:28:20:
         9c:fc:c5:9c:0d:68:3d:82:88:92:76:bd:9e:49:8c:4a:7f:fb:
         7b:d7:0c:dd:8c:7d:6c:a8:85:ee:d6:bb:d3:0e:ea:b4:7f:30:
         40:44:3d:de:18:ba:e6:be:e6:66:ea:6c:3e:aa:27:0e:db:d9:
         11:74:a7:aa:5f:de:89:db:3e:6c:f8:81:1e:c5:75:a2:7e:35:
         36:f1:37:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:45:00 2026 by rpki-client