Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
File:                     RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft (raw, json)
Hash identifier:          5BYoZWL/v3SdKNmwMey7qQXY2TO86DeswCqetNYv+hU=
Subject key identifier:   59:60:80:4B:57:6E:1B:1C:31:B8:6A:46:A7:86:22:A0:73:75:42:04
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Certificate issuer:       /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial:       01A0DB7236C7F59A3150F390815385C1DCCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
Manifest number:          1A9F
Signing time:             Sat 26 Sep 2026 02:01:30 +0000
Manifest this update:     Sat 26 Sep 2026 02:01:30 +0000
Manifest next update:     Sun 27 Sep 2026 02:01:30 +0000
Files and hashes:         1: 7Ev4pPLmsyvYerb0on_2ycPvjhY.roa (hash: gLjOH0/LgfDmhdEX2dqo2Y4R5qiWj5EqAr1S6u4t4/o=)
                          2: A6U93TPy254S5BjM4H7y1qRp4dY.roa (hash: AobGsfJ1WuRAdN8W9Nmg4b8l6RkF6PoSoTCjgklNWCg=)
                          3: BBqB0S2BZ1MiprBp-ZbU8XCJFuM.asa (hash: Kt6PxLaHA8KqzdMw5yzTBeC2Dt7pKSQXeeJoIQjj8h4=)
                          4: RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl (hash: pinAJ7F/cUqGk8QIhl2mUqBSWFIsrjvH3WvnHW7G0hk=)
                          5: efFZNkV_9R76LBUEiCt9lJ0sXAw.roa (hash: EcZHGVhV5rtZW2h/D/nkyrejk12jAAWi5WJT/KtNz9o=)
                          6: gjksxvc8k4y0XXIS6sm4k5BKgmU.roa (hash: llURtuag8MOJGpx7pVNs4iiTs/jH9TAextZUe/qwrSo=)
                          7: kJ0DgJ8GncRn7ZZPIIWQuMqNGDU.roa (hash: B/NzJ7GlRVz7Qb3N74n5NGR3KvZ1Kbru2Tpi67t35QU=)
                          8: mZml4UltSWqYKsmpHLsrvVHIDGw.roa (hash: qDyWgBMf7ijB69O7qYcktZRhcmS49eWjuhDtFSCzusE=)
                          9: nCADtZCNJkYUNVOa9U_NAk0KS5k.roa (hash: Wf20IjUpqKSqLN3uHCmAWFDI3uxI4awBhCKDzl6rwTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:72:36:c7:f5:9a:31:50:f3:90:81:53:85:c1:dc:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
        Validity
            Not Before: Sep 26 02:01:30 2026 GMT
            Not After : Sep 27 02:01:30 2026 GMT
        Subject: CN=5960804b576e1b1c31b86a46a78622a073754204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:b7:a5:7f:47:42:c3:6b:e9:29:62:8d:a7:
                    a0:6e:cd:4e:1e:41:92:40:b5:25:49:94:6d:07:e9:
                    7a:fe:04:d8:16:5f:a2:dd:1e:31:ed:e6:32:63:d9:
                    1e:7d:02:d7:3c:3e:bc:cf:cb:c5:90:58:0d:ee:33:
                    12:a1:5a:64:6a:79:69:db:df:83:ac:60:ae:a8:05:
                    07:32:a8:5a:d1:f1:fb:fd:40:81:d3:8a:0c:cd:e9:
                    b9:4c:b3:31:cb:5d:6d:f3:db:e2:6c:ee:73:6a:92:
                    c6:f5:95:c5:37:77:7e:31:91:d7:40:b5:55:96:3c:
                    ab:51:ce:7a:04:2e:2d:66:b6:24:32:12:54:c4:a4:
                    c6:45:7a:52:17:59:6f:21:ad:2a:cd:b5:88:54:bc:
                    2d:9e:a4:b2:f1:2e:88:04:f4:7a:90:cc:6f:33:22:
                    8d:aa:de:db:48:d1:32:03:77:d4:b7:f4:24:66:e9:
                    24:81:64:10:d7:c3:3c:43:e4:4a:36:8b:1e:52:69:
                    12:de:77:8a:aa:28:d3:41:25:cc:19:f5:d1:dc:eb:
                    9c:f2:02:4e:fa:1d:cb:71:31:08:1b:2a:e3:88:99:
                    50:6b:e9:a5:7b:62:7b:d9:d1:3e:8f:61:1b:8b:c6:
                    a0:2c:d5:25:1f:39:a8:2a:79:88:98:a8:56:ac:e5:
                    89:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:60:80:4B:57:6E:1B:1C:31:B8:6A:46:A7:86:22:A0:73:75:42:04
            X509v3 Authority Key Identifier:
                keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:f1:f4:4b:cc:1d:71:37:81:96:80:f4:27:79:f3:61:dd:7e:
         7c:ea:f2:49:46:9c:73:39:68:7a:77:37:7d:c3:b1:47:09:d6:
         78:e5:49:e2:cf:08:2b:fe:0d:a0:c9:fd:a7:b4:f5:36:b5:94:
         1a:95:d2:8d:83:a3:e0:70:c3:60:fb:e9:96:01:ef:f7:7a:a9:
         38:b5:6d:68:9e:d7:c9:1c:65:bb:ce:84:c3:31:30:01:57:ba:
         04:d6:16:5f:65:03:d9:cd:6c:52:56:38:60:29:82:c6:a1:fd:
         57:c3:25:06:84:65:9b:98:53:92:f7:1b:35:b0:1e:b4:79:9e:
         9a:70:a7:0d:dd:ef:d1:85:3a:32:cd:37:c0:ac:9f:93:23:4e:
         85:f7:f3:0b:66:71:be:3c:21:f8:d3:78:96:2c:01:c8:e4:7c:
         0f:4e:7e:46:d1:7b:4c:01:24:9b:e4:1b:22:20:60:92:d0:3c:
         b0:bd:a0:18:48:19:58:69:98:eb:80:43:6c:00:29:d1:53:3d:
         b7:d9:24:ec:d7:87:2c:15:9c:89:78:41:a7:7e:be:61:b3:47:
         ef:d6:18:15:fd:ff:ce:8e:2e:34:70:5f:7e:0f:81:33:a0:99:
         29:ff:f7:ed:93:8a:a3:80:8e:2f:56:2f:df:75:5e:f0:14:33:
         9e:49:9e:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbcjbH9ZoxUPOQgVOFwdzNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw
MzdjNmMwHhcNMjYwOTI2MDIwMTMwWhcNMjYwOTI3MDIwMTMwWjAzMTEwLwYDVQQD
Eyg1OTYwODA0YjU3NmUxYjFjMzFiODZhNDZhNzg2MjJhMDczNzU0MjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogO3pX9HQsNr6Slijaegbs1OHkGS
QLUlSZRtB+l6/gTYFl+i3R4x7eYyY9kefQLXPD68z8vFkFgN7jMSoVpkanlp29+D
rGCuqAUHMqha0fH7/UCB04oMzem5TLMxy11t89vibO5zapLG9ZXFN3d+MZHXQLVV
ljyrUc56BC4tZrYkMhJUxKTGRXpSF1lvIa0qzbWIVLwtnqSy8S6IBPR6kMxvMyKN
qt7bSNEyA3fUt/QkZukkgWQQ18M8Q+RKNoseUmkS3neKqijTQSXMGfXR3Ouc8gJO
+h3LcTEIGyrjiJlQa+mle2J72dE+j2Ebi8agLNUlHzmoKnmImKhWrOWJBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFlggEtXbhscMbhqRqeGIqBzdUIEMB8GA1UdIwQY
MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt
YzM2OWMxZDRjMzM3LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3
LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArvH0S8wd
cTeBloD0J3nzYd1+fOrySUacczloenc3fcOxRwnWeOVJ4s8IK/4NoMn9p7T1NrWU
GpXSjYOj4HDDYPvplgHv93qpOLVtaJ7XyRxlu86EwzEwAVe6BNYWX2UD2c1sUlY4
YCmCxqH9V8MlBoRlm5hTkvcbNbAetHmemnCnDd3v0YU6Ms03wKyfkyNOhffzC2Zx
vjwh+NN4liwByOR8D05+RtF7TAEkm+QbIiBgktA8sL2gGEgZWGmY64BDbAAp0VM9
t9kk7NeHLBWciXhBp36+YbNH79YYFf3/zo4uNHBffg+BM6CZKf/37ZOKo4COL1Yv
33Ve8BQznkmemg==
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:19:22 2026 by rpki-client