Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
File:                     lTXl04RZIbnV_fI2N8WYEbg4Y08.mft (raw, json)
Hash identifier:          vZEPhmzDYFmQfHpwYlqbobfSbbIWUGkGT0VnoCRFkQ0=
Subject key identifier:   EF:04:D5:66:3A:9C:A9:85:32:AA:5F:0C:7F:AD:D1:A1:D8:3A:C0:E2
Authority key identifier: 95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F
Certificate issuer:       /CN=9535e5d3845921b9d5fdf23637c59811b838634f
Certificate serial:       01A0C40D96CDA2567D3EAE85B129253AAC00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
Manifest number:          0450
Signing time:             Mon 21 Sep 2026 13:00:19 +0000
Manifest this update:     Mon 21 Sep 2026 13:00:19 +0000
Manifest next update:     Tue 22 Sep 2026 13:00:19 +0000
Files and hashes:         1: S0T2kL_9PWLHXGxcH-DefO6iYPU.roa (hash: Pu+0PGdxODxmEsVaBVFzUtH5CFGWNyj6dWAHyNzOXw4=)
                          2: lTXl04RZIbnV_fI2N8WYEbg4Y08.crl (hash: VlW9iorcuuEZ7I5/wDwToKms8tS85VW0iRW5zZ5nRIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0d:96:cd:a2:56:7d:3e:ae:85:b1:29:25:3a:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9535e5d3845921b9d5fdf23637c59811b838634f
        Validity
            Not Before: Sep 21 13:00:19 2026 GMT
            Not After : Sep 22 13:00:19 2026 GMT
        Subject: CN=ef04d5663a9ca98532aa5f0c7fadd1a1d83ac0e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:58:f2:c8:db:fd:35:d4:01:c2:0b:78:03:1f:
                    b3:53:12:de:12:d4:18:c3:8f:49:8b:76:9a:1f:55:
                    c4:86:2a:b9:fb:9b:58:a8:13:55:4c:1d:6e:95:06:
                    c0:a9:3a:7b:0e:f4:b4:2f:e0:32:46:42:1d:70:4d:
                    9f:30:6b:3d:c4:d3:7e:3f:e6:a4:ad:99:93:34:82:
                    75:98:99:59:b8:78:ad:03:7d:d1:4a:c9:c2:ce:ac:
                    d6:ca:b3:f4:3b:80:91:98:51:e1:84:4c:6b:4c:6d:
                    77:18:03:2d:33:85:91:88:9f:d3:dd:bc:6b:bf:48:
                    4d:50:22:a1:14:3e:bd:2e:22:96:25:24:9a:a8:b8:
                    29:cf:ef:b1:5f:63:83:9e:2a:22:02:0d:40:f2:43:
                    81:d7:cf:7a:40:1d:83:e3:0d:71:49:06:df:e3:39:
                    bf:68:ec:5b:6b:83:e5:15:42:f3:bb:8e:f9:aa:51:
                    4a:0b:5b:ce:74:8e:89:fd:e8:32:df:79:6f:76:bc:
                    27:0c:bd:27:22:38:d0:8b:1d:1b:bf:68:bb:e6:91:
                    53:98:f1:2d:cc:a9:ab:ac:06:71:f2:6a:8e:c4:41:
                    95:66:f8:71:b4:bf:5c:06:c7:d0:d5:67:f0:0a:4e:
                    19:4d:a9:2c:95:bb:46:91:52:51:d9:9f:87:84:f6:
                    15:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:04:D5:66:3A:9C:A9:85:32:AA:5F:0C:7F:AD:D1:A1:D8:3A:C0:E2
            X509v3 Authority Key Identifier:
                keyid:95:35:E5:D3:84:59:21:B9:D5:FD:F2:36:37:C5:98:11:B8:38:63:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lTXl04RZIbnV_fI2N8WYEbg4Y08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/fdd255-d61e-40b6-a78f-9cef917b8e37/1/lTXl04RZIbnV_fI2N8WYEbg4Y08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:01:51:b1:42:c8:07:86:10:c9:6f:1d:6e:42:d3:d4:6b:f7:
         6f:a1:07:f0:d9:0b:d1:8c:6d:73:bc:43:29:2c:0a:6a:f9:d6:
         6f:82:b1:62:a2:50:ce:47:47:28:33:9d:74:fd:c1:83:84:3c:
         a1:84:e0:64:32:51:d8:4e:55:8e:cc:e7:7d:5b:c9:88:d9:47:
         b1:87:24:62:79:d2:ae:12:24:7a:75:9c:e6:68:c9:e3:82:72:
         67:ae:7a:fe:b7:23:4d:93:2f:11:d1:66:fd:51:d9:9d:ab:57:
         d6:fd:12:0c:61:bb:70:f6:8e:14:8f:9b:3e:e6:33:25:23:28:
         90:60:a5:96:7a:e5:cf:a5:44:00:94:3a:62:9e:c2:4c:6d:c2:
         5a:a7:f6:c7:3b:09:c8:68:51:4c:99:7e:85:ab:e8:a4:cb:ff:
         00:04:e2:28:13:aa:00:87:0c:26:31:55:d2:43:95:37:fd:3f:
         28:ee:e2:72:ed:e2:60:11:82:f6:d9:78:15:fa:ff:ee:a9:a4:
         7d:15:87:e8:6e:e8:b2:08:f8:e6:61:4a:d8:0b:1b:5b:b5:04:
         f3:7f:d0:30:75:5b:58:a6:cd:24:5b:5c:a5:53:51:e6:3c:2e:
         39:fc:92:26:2e:6f:60:28:61:2b:7f:96:3f:2c:2e:71:83:96:
         2e:e8:14:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:24:20 2026 by rpki-client