Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
File:                     SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json)
Hash identifier:          8IExJvFSS3nyS1g8imBhxdxtx8nebPFMm4jS2BXSvNo=
Subject key identifier:   5E:0A:E9:EE:CB:63:5F:92:38:67:4C:0D:1D:E4:A4:1A:AA:1E:CE:D2
Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24
Certificate issuer:       /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
Certificate serial:       01A0BE50205B109BD7F262271EBFAB3B1A63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
Manifest number:          0B98
Signing time:             Sun 20 Sep 2026 10:15:17 +0000
Manifest this update:     Sun 20 Sep 2026 10:15:17 +0000
Manifest next update:     Mon 21 Sep 2026 10:15:17 +0000
Files and hashes:         1: 5cflrPSBczVw-y9CBdznGslTCz8.roa (hash: e3Ui7ThS6C0Gj8prOOjSxh7lUAWtygpEnNw9xX2dtRk=)
                          2: 6ikDq3uU-14xeZ06o1f5sBEku08.roa (hash: 14bAM4PQevceSeTCaULI+ouG0nOTQYIq9lETR/sCBX4=)
                          3: 6zmwiCnaR_RUV1zVvXd131O-Byk.roa (hash: wivF7cNRJAl3OyL7EJY6TuKfTwqgRld3+ZHQke6SRP8=)
                          4: 8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa (hash: ciLzKnjSavNPyQD1IQHv/gt0vWyFhjCiKLjRitLPEkE=)
                          5: DJA8iYfOt3bjbbEH0sfO-Yzt5D0.roa (hash: dll+XV6deSG185dIKUE72K/Hgk2Qi2c2WRrfDucz8Pg=)
                          6: DPMVT21xt_FxJ1sn3UX-_U68dhM.roa (hash: W+9Q7HyRT/GtNJeWW1rH3dBewR4z6axBBAIPrMJ0PUU=)
                          7: DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa (hash: MbxJlm+ziQoeXoBZ7l2IXv7uYhNPhhJgV3LLj54kjMg=)
                          8: HLY3yOfkVYAqEx3IXqQjGqSe60s.roa (hash: 89cRs5OEP6GzsmQJJPOS43nhrd5JryCvGoLQgmsG8Fk=)
                          9: IFDEhJ7WdnMP_iOIFV_PEMyMTFY.roa (hash: 3abxPKBoQtYdBt0dEdvRfKPwIMD697ubAlSThgqLZRY=)
                          10: OGHkr0sseqVyPYMaosc0EKOfAbE.roa (hash: wHhBT3+BNkPQLV5c3JD9yLqsApNS0AOyvlFX/QBAowQ=)
                          11: QbspjSgom0qmdSedksWxw1y_dkI.roa (hash: eJ1YS4oVCoR1VNmiqp1NCkjDzMJ9GIvRJ3pjx5vZ9ic=)
                          12: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: IeVq2xrehnVqDy9yMWvIxKL+xrY5ktnus1mu++TCkso=)
                          13: TOVytZLtGiR_loWDvv77N1q9Wfs.roa (hash: Sv4e/TvtoYqQVyB6uh9qVYGBsdkIHsts6lbRC1DO+ec=)
                          14: UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa (hash: Y4z7KLj7vfcDesQxa00pP19sxOBjnRSBjEe98F7tXaU=)
                          15: WgBBESiMNBhg0ejLbo4ygFVFK_g.roa (hash: fOGX3A1MJMqw5iFjseRV1GnR/NKzbA2c83gmI0QyUAc=)
                          16: bZJA4Zdk6OCETrYbfAEHSsuzwDE.roa (hash: IUm+Or+NvYeQ78zXKIY9OqKwxZRYHCF8Axsyp7t54Y8=)
                          17: cLp8aoUEerNehAr3h59hozd_gn0.asa (hash: H0H1PRm+pfO0EaD/QilESt/v2w81RZ9KkTdDOLHz0OM=)
                          18: q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa (hash: 1g4myUSs6hufFOhffJJdUxf69ZM3/4EE4AG3+gn7wds=)
                          19: r-jH3K8gcLw126eQ4FkoGo2cj9Q.roa (hash: WprvCGc4fvgZRtpPYXPu9X3gBWvFU60j9mgBknNXAj8=)
                          20: uLmKjHdh6xVL5Ct2SX4RrNBGZlY.roa (hash: M6ZErU+xYI38Ut27LDMzp6JcZbiEl5nEdPQAb8KQF+I=)
                          21: vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa (hash: s7mP1EwT7gSUHcvBRHCBoQGsDjEPpmRpeu0/iQN+vMQ=)
                          22: yaioAwQqgstiMhVwqwEHasXnYDs.roa (hash: B1OftcLanWUv1RXMYsVOlCmHJWT10XchoJjDrQXqjiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:15:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:50:20:5b:10:9b:d7:f2:62:27:1e:bf:ab:3b:1a:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24
        Validity
            Not Before: Sep 20 10:15:17 2026 GMT
            Not After : Sep 21 10:15:17 2026 GMT
        Subject: CN=5e0ae9eecb635f9238674c0d1de4a41aaa1eced2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:53:2e:28:dc:6a:f5:03:7c:a4:66:4a:9d:fc:
                    fc:d1:2e:c6:08:5f:31:20:35:a6:4c:86:f9:aa:7a:
                    83:56:b5:96:82:9c:40:a7:09:c7:76:db:5e:1c:cf:
                    12:4b:25:bc:e0:9a:bd:23:fc:0e:af:99:00:59:da:
                    c1:ad:67:97:54:54:55:92:93:16:5f:92:1c:45:ab:
                    e0:ad:34:d5:f7:fc:73:32:89:45:d8:fa:f3:51:e9:
                    da:7c:fd:72:dd:e7:45:6d:89:eb:cf:78:da:ee:c1:
                    81:42:e8:07:e0:be:72:a9:75:27:ef:50:51:dc:ea:
                    38:63:ff:e3:43:58:08:34:cb:92:54:97:ff:8b:61:
                    b3:be:e1:c1:9d:2b:e6:eb:52:11:72:e8:3a:15:ba:
                    c6:4b:5c:76:5d:64:8a:c7:2e:e0:ee:fc:2a:da:ed:
                    6f:37:08:a7:df:af:c7:57:b4:ba:31:00:3a:48:60:
                    70:42:fe:3a:43:46:49:c8:85:de:ac:5c:45:e6:49:
                    fc:2f:1a:0a:3f:16:1a:80:30:14:05:ec:c7:15:5b:
                    1a:6c:2e:68:96:8f:0b:e7:9b:89:70:4e:2d:f6:f3:
                    c9:8b:a5:cf:42:64:c1:fd:93:6e:db:05:f6:5f:32:
                    5d:5a:1d:e8:d8:84:bb:5d:d3:86:31:fc:97:91:d1:
                    d4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0A:E9:EE:CB:63:5F:92:38:67:4C:0D:1D:E4:A4:1A:AA:1E:CE:D2
            X509v3 Authority Key Identifier:
                keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4b:f3:89:54:49:55:37:91:04:83:7d:dd:8d:76:0c:ef:9a:
         51:da:27:19:8e:c5:46:17:ba:77:83:c4:1c:87:3e:35:49:cd:
         5b:49:34:eb:93:eb:55:86:50:27:3d:63:16:d4:77:bf:cf:3e:
         56:cb:41:1a:be:c0:f7:9e:70:7a:bc:73:59:2d:54:9f:8c:db:
         db:6e:b6:e5:08:30:ec:da:bb:88:ff:b8:6a:28:c4:ee:c6:5c:
         37:c0:b2:d9:22:d0:88:77:4a:11:c7:25:7f:ba:ad:6f:6c:95:
         07:3d:0e:ee:22:4f:6d:6c:13:6d:50:04:fd:36:ce:1b:64:39:
         0b:ff:d2:da:a6:83:57:4e:e5:a3:3a:28:b0:c7:3d:5e:31:d0:
         1b:46:59:b0:98:a8:a3:22:5c:5c:3a:cf:62:72:5b:65:07:92:
         87:be:f6:46:6c:9f:59:f8:ad:9d:b8:da:9c:9a:8c:93:da:89:
         9a:7b:00:eb:30:ae:3e:17:a2:0e:ee:b2:e5:13:c2:d8:0e:38:
         db:9f:92:58:44:a9:f7:79:68:6d:70:27:27:a1:03:f5:4d:a3:
         3d:d9:5d:37:37:aa:9a:88:ab:1f:86:b1:3d:dc:26:55:82:2b:
         1a:38:c9:4d:b1:39:5a:26:ea:8b:3c:a4:5f:8b:10:c2:33:27:
         13:c1:7d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:34:52 2026 by rpki-client