Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
File:                     kpWx8dzY-mrB73iCeMSJ4V6srnA.mft (raw, json)
Hash identifier:          IIeogLG4FIa/5j6b0QWTDkqziA38iu8qCxi7ieXxZsc=
Subject key identifier:   34:BA:2F:EE:66:BB:C8:40:B6:51:38:52:0B:23:9E:7D:4C:6A:63:3D
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Certificate issuer:       /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial:       01A0C7463B3C7F3689269CEADAA996396BBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
Manifest number:          1A87
Signing time:             Tue 22 Sep 2026 04:01:03 +0000
Manifest this update:     Tue 22 Sep 2026 04:01:03 +0000
Manifest next update:     Wed 23 Sep 2026 04:01:03 +0000
Files and hashes:         1: Mh0GCA4fU985YGcY_Sl-hoqqYak.roa (hash: dw7zE1QA5b14EOKa3p03pQXACOHf0x9i1vrxjiOG4Qc=)
                          2: j2nCgCNKu-8HhbapFFrobHwW1PE.roa (hash: GSO3KSJwSfb4pYZK1pE/e2C6mgmmsHzX3/UBNgiH+xA=)
                          3: kpWx8dzY-mrB73iCeMSJ4V6srnA.crl (hash: wiLSYtv8Lt1s7BxFW2CxH6ZeMDpPKn5/B4TZjVz58RI=)
                          4: rcD1dohMBrT0sIUfDYqyK5wqUuA.roa (hash: LHJxJ8uhzAWPnNINZvl3itiKDSVQRmXMQ+MPHPp9DtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 04:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:46:3b:3c:7f:36:89:26:9c:ea:da:a9:96:39:6b:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
        Validity
            Not Before: Sep 22 04:01:03 2026 GMT
            Not After : Sep 23 04:01:03 2026 GMT
        Subject: CN=34ba2fee66bbc840b65138520b239e7d4c6a633d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:8a:a4:24:d1:b7:93:d6:dd:da:aa:39:8c:
                    dc:b2:cf:cc:9f:0a:96:03:dd:8f:42:6f:10:09:1d:
                    eb:d4:87:f7:5f:ee:96:4d:ff:47:5d:93:b1:9d:9d:
                    ef:47:31:0c:52:0e:25:ea:08:94:3c:4c:58:56:df:
                    d1:28:ff:2a:5d:a6:83:ac:fa:0c:2d:8e:56:d6:4b:
                    a9:8a:ab:3e:ac:13:af:20:6c:f3:a5:56:ff:a9:d0:
                    27:62:ac:49:4f:5d:2d:35:9f:95:9b:60:30:cd:84:
                    70:84:a4:b7:c7:d3:fa:05:42:27:17:1d:79:4c:9f:
                    bd:09:19:7d:73:1c:d0:a7:c6:28:b0:0f:13:19:32:
                    a3:2e:6c:f0:ab:64:b2:e3:99:da:0b:f4:c4:bf:f2:
                    41:e8:0a:3c:ec:66:ef:ff:c3:56:b9:54:15:fe:4d:
                    e5:c4:77:2e:d9:0a:da:89:4f:f3:c0:6d:19:20:44:
                    fc:f8:7b:7a:4c:62:f8:bc:5b:36:2c:b9:be:2e:17:
                    4a:15:e5:90:a2:8a:ee:50:a9:7a:fd:be:c5:d5:28:
                    b8:44:93:5e:14:48:63:a0:09:55:4a:d0:48:4a:13:
                    3c:91:e9:95:8b:37:68:5e:f8:c0:60:e0:dd:07:fc:
                    d3:72:9a:b0:ce:13:b8:e2:ec:41:56:85:4a:e6:99:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BA:2F:EE:66:BB:C8:40:B6:51:38:52:0B:23:9E:7D:4C:6A:63:3D
            X509v3 Authority Key Identifier:
                keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:88:62:8f:23:78:1a:ab:79:fc:3d:79:de:24:e5:68:67:8e:
         7b:5e:04:31:80:45:14:a7:3b:9b:6a:c0:55:13:36:3f:90:54:
         86:ab:7f:7c:11:55:a9:84:7b:eb:9d:58:32:fd:b3:63:c6:06:
         3e:45:cd:cd:83:67:14:99:41:e5:d3:c8:a2:60:2e:3e:73:51:
         96:02:8d:64:a7:19:73:92:49:3d:b3:80:49:75:f3:21:2b:45:
         89:d4:3b:53:e5:2b:4b:05:de:ca:a2:59:be:c4:49:75:72:66:
         9f:ea:02:8f:ec:47:35:fb:18:3a:70:29:07:73:fe:6c:3f:ae:
         5c:c9:ed:9a:d8:03:ac:fa:23:69:a1:a4:df:2b:e2:a3:de:2f:
         c0:09:bb:02:6a:8f:b2:ea:05:4a:50:41:d7:c0:22:4a:c0:f5:
         6f:f9:cd:38:fd:76:b0:86:62:e5:94:2a:16:b6:19:a7:32:ac:
         88:81:92:11:b1:b2:17:fb:84:a6:e4:02:de:69:f8:cf:2b:d6:
         dd:11:6d:46:2c:44:52:07:62:1d:2f:f0:0e:c3:65:07:91:cd:
         08:9b:ee:cc:03:cb:2c:f9:76:d4:e1:4b:49:1c:1f:70:77:ee:
         7b:d7:b4:34:ce:7a:e0:eb:0b:dd:c2:e8:86:b1:a7:36:7b:05:
         9e:4d:43:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:01:25 2026 by rpki-client