Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File:                     maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier:          oTDCLleRrjcvkhNIJKNlMRkKfHxIkdJKjSKXg5cuzl8=
Subject key identifier:   04:FE:AB:E3:68:B5:D4:7C:2A:14:C6:2C:0C:B9:2E:22:9D:29:27:47
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer:       /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial:       01A0C1E81EA2D3331200DCF08081F776814D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number:          1A6E
Signing time:             Mon 21 Sep 2026 03:00:09 +0000
Manifest this update:     Mon 21 Sep 2026 03:00:09 +0000
Manifest next update:     Tue 22 Sep 2026 03:00:09 +0000
Files and hashes:         1: CQ22INHNBj4XjlCUrI5XIygZ-R0.roa (hash: XIhPQfL8JPX1XhK5bY8YDY2+uw01ecHaNFfLz05TOJ0=)
                          2: KJY5nxCnM8VflNqrt-fuQ6cuQes.roa (hash: CD+3ziwBgnP7/0qdqqYvm343nyyRQZA21pgLWpHPvXc=)
                          3: lnG5zaZt-7xO_hAn8wuZTfTqkgM.roa (hash: AlDx5dd5qCfr7Hi5X2lV2/K6+UMvJudIe04xWsHdrCg=)
                          4: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: x06OTol5ERG190lU6VMHH3Fn+9cqgQ/0sr3k8C5Hyjk=)
                          5: pgw_vXBhOHyYYmolPmheFOInOlo.roa (hash: FBhZNS8WeqSQq7ASqmhTPAh4HzJGXnwv4pIHLO19zl4=)
                          6: vcqIh9RGrfqsmlHa25tlLbDVTfk.roa (hash: 8nj2WBXLZRsVEzQqCt+NovapA3YHbN5awEImncwyZTU=)
                          7: x1x-cyI_biGTaUkZngKWx4DjWCs.roa (hash: aGX6ptYmiAeod9VDsNlQzerfO//pVNDw6U3vNGlEKjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:e8:1e:a2:d3:33:12:00:dc:f0:80:81:f7:76:81:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
        Validity
            Not Before: Sep 21 03:00:09 2026 GMT
            Not After : Sep 22 03:00:09 2026 GMT
        Subject: CN=04feabe368b5d47c2a14c62c0cb92e229d292747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:c7:47:05:67:15:69:f4:26:22:b0:92:09:f8:
                    fd:b7:02:a3:56:29:78:eb:9d:13:19:df:3a:ba:c4:
                    7d:b4:8d:b2:3b:0e:cc:f7:12:a9:65:d8:0a:e1:da:
                    bb:5c:bd:d4:71:5e:0d:15:d2:7b:d0:91:65:40:c5:
                    28:b1:2b:2c:c7:df:e7:36:7a:03:89:d5:64:91:b6:
                    f8:dd:4f:9d:fc:13:6d:d1:5f:34:c1:18:b5:c1:dc:
                    d4:89:40:c2:e0:de:98:f2:b2:69:39:fc:4b:5d:89:
                    58:e9:8d:c9:9b:9e:4a:93:bb:07:92:11:4f:b4:fb:
                    02:94:ca:a2:bf:89:4b:19:61:fc:08:ba:13:af:dd:
                    e1:68:98:08:b2:b1:1b:e0:f5:d1:df:a6:b4:65:64:
                    fd:83:35:1e:c9:a4:1f:27:16:51:3f:b5:a1:5e:e6:
                    c1:ff:a8:7d:8d:cf:84:cf:ed:66:09:11:c4:5b:93:
                    38:4e:63:75:d0:b4:9e:b5:c2:77:91:f4:27:e4:3c:
                    6d:c8:4e:d1:4f:ee:7d:2a:46:32:b5:84:11:91:64:
                    44:e0:69:38:56:9d:90:7d:cf:b7:ae:e4:be:c2:f6:
                    73:d6:51:c6:c7:16:7c:79:d7:e5:f0:30:0b:56:1a:
                    08:d7:e9:47:95:f8:e3:8d:ae:f7:2b:8b:3d:04:9f:
                    25:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FE:AB:E3:68:B5:D4:7C:2A:14:C6:2C:0C:B9:2E:22:9D:29:27:47
            X509v3 Authority Key Identifier:
                keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:ed:67:58:66:fa:c0:0b:c5:9b:3c:f0:8e:71:2a:26:5b:f1:
         24:ac:fc:c6:bf:ef:c0:41:ba:50:53:f6:a8:be:28:3e:e1:32:
         39:43:6d:fa:2a:d3:53:7a:8f:69:f4:90:d1:8a:9d:30:c4:20:
         f1:74:3f:86:a6:94:26:d9:f4:d9:6d:9a:6a:41:4d:5d:98:7c:
         4d:05:33:72:0c:35:0e:8a:87:11:22:fc:dd:f9:fb:32:3e:6a:
         d1:ef:f6:d2:93:2a:83:63:a8:f5:c0:ab:1e:ea:e9:ab:39:bc:
         94:a1:7c:c1:e6:f2:f7:be:4a:b1:48:21:81:e0:fd:51:7c:5a:
         e6:a5:59:06:05:9c:af:43:46:bd:76:ae:99:70:94:8f:ce:30:
         f9:74:25:64:0c:8d:42:e0:d2:5e:41:a7:1c:8e:c4:7f:37:f3:
         d5:d6:c1:11:02:cf:a5:8d:9b:ec:bf:d1:65:98:cf:50:0d:df:
         c3:58:ed:41:e5:79:61:25:e2:dc:89:2a:7e:fd:70:24:8b:4c:
         d4:2b:52:c2:1b:69:42:4b:55:08:6f:8e:39:34:86:97:ea:fe:
         73:74:de:6a:74:a5:4f:ff:d0:a3:f5:77:f7:8c:0a:b3:dc:d0:
         ba:8d:55:96:d4:96:32:0b:82:e6:60:41:03:a0:7d:c5:a9:70:
         5f:e3:ce:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDB6B6i0zMSANzwgIH3doFNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTJjMmVjZjU4YzQ0YjM1YTBkYTI5NTdmZjRkY2EyZTYw
YjY4NmEwHhcNMjYwOTIxMDMwMDA5WhcNMjYwOTIyMDMwMDA5WjAzMTEwLwYDVQQD
EygwNGZlYWJlMzY4YjVkNDdjMmExNGM2MmMwY2I5MmUyMjlkMjkyNzQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsdHBWcVafQmIrCSCfj9twKjVil4
650TGd86usR9tI2yOw7M9xKpZdgK4dq7XL3UcV4NFdJ70JFlQMUosSssx9/nNnoD
idVkkbb43U+d/BNt0V80wRi1wdzUiUDC4N6Y8rJpOfxLXYlY6Y3Jm55Kk7sHkhFP
tPsClMqiv4lLGWH8CLoTr93haJgIsrEb4PXR36a0ZWT9gzUeyaQfJxZRP7WhXubB
/6h9jc+Ez+1mCRHEW5M4TmN10LSetcJ3kfQn5DxtyE7RT+59KkYytYQRkWRE4Gk4
Vp2Qfc+3ruS+wvZz1lHGxxZ8edfl8DALVhoI1+lHlfjjja73K4s9BJ8lQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAT+q+NotdR8KhTGLAy5LiKdKSdHMB8GA1UdIwQY
MBaAFJmiwuz1jESzWg2ilX/03KLmC2hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAt
ZTVkNTA3YTgyNmJmLzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAtZTVkNTA3YTgyNmJm
LzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbO1nWGb6
wAvFmzzwjnEqJlvxJKz8xr/vwEG6UFP2qL4oPuEyOUNt+irTU3qPafSQ0YqdMMQg
8XQ/hqaUJtn02W2aakFNXZh8TQUzcgw1DoqHESL83fn7Mj5q0e/20pMqg2Oo9cCr
Hurpqzm8lKF8weby975KsUghgeD9UXxa5qVZBgWcr0NGvXaumXCUj84w+XQlZAyN
QuDSXkGnHI7Efzfz1dbBEQLPpY2b7L/RZZjPUA3fw1jtQeV5YSXi3Ikqfv1wJItM
1CtSwhtpQktVCG+OOTSGl+r+c3TeanSlT//Qo/V394wKs9zQuo1VltSWMguC5mBB
A6B9xalwX+PObA==
-----END CERTIFICATE-----
Generated at Mon Sep 21 08:13:05 2026 by rpki-client