Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
File:                     rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft (raw, json)
Hash identifier:          7jYp4RtHwrfO1h04dqbUUaAewqLJh/XjLntuen6aVV4=
Subject key identifier:   F1:7C:5D:55:76:02:EB:D8:C1:38:15:30:75:54:BA:8D:DF:69:19:80
Authority key identifier: AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27
Certificate issuer:       /CN=ac82c9dd9d6ccfb38ca11640e102f751ae274927
Certificate serial:       01A0C10D21394B1DC890B98B36AD2C633EAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
Manifest number:          0207
Signing time:             Sun 20 Sep 2026 23:00:58 +0000
Manifest this update:     Sun 20 Sep 2026 23:00:58 +0000
Manifest next update:     Mon 21 Sep 2026 23:00:58 +0000
Files and hashes:         1: AsgCbpxXAfVEl8fMySxEMEBj3v0.roa (hash: 3DUclWrbvVnjRe22xwXjCYPITDFNxuR0Ynpweo6931E=)
                          2: rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl (hash: mqao6yQQmuMaD56f0t62iaJhoLLdsC9ErubRocZXVtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:0d:21:39:4b:1d:c8:90:b9:8b:36:ad:2c:63:3e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac82c9dd9d6ccfb38ca11640e102f751ae274927
        Validity
            Not Before: Sep 20 23:00:58 2026 GMT
            Not After : Sep 21 23:00:58 2026 GMT
        Subject: CN=f17c5d557602ebd8c13815307554ba8ddf691980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5d:f7:6c:25:fd:49:75:b0:06:2a:28:4d:20:
                    b4:8c:d5:d3:73:0b:0e:75:d6:bb:94:e5:ab:29:d6:
                    87:07:ec:66:34:1a:f2:3f:09:d2:13:80:04:e7:4d:
                    50:d2:bd:0c:fe:51:31:d9:24:14:e4:a5:f0:c9:d9:
                    6a:40:41:a4:13:f9:f5:36:e2:8c:e5:3d:75:2b:dd:
                    90:f2:21:14:3f:f5:0a:3b:4a:38:62:c1:fe:92:09:
                    fe:f5:d8:7a:35:6d:93:36:37:68:f1:16:f0:06:2e:
                    48:c3:3c:23:0c:5b:2b:54:95:10:24:99:8f:d8:17:
                    a3:28:57:d3:ed:43:96:f3:80:26:8f:46:87:97:cf:
                    e7:5c:bf:c7:e0:36:8b:2c:fa:6c:23:90:b7:2f:b9:
                    37:b3:fc:3e:ab:62:03:d1:54:ad:48:5e:d5:00:c4:
                    c1:3a:d1:71:b2:e8:17:ad:32:fc:ca:1d:63:93:99:
                    70:73:b5:02:de:d0:ef:96:a9:64:ca:c3:c1:2b:21:
                    ed:a2:b1:2e:2f:e8:38:c0:72:82:9b:26:c4:bc:fb:
                    45:dd:c1:6b:85:ab:b5:b1:ac:d2:66:d4:70:bb:da:
                    4f:41:ff:67:b1:b2:e6:74:72:28:50:48:96:28:00:
                    71:42:fd:ed:9d:8f:36:91:1c:9d:e6:d7:05:25:67:
                    09:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7C:5D:55:76:02:EB:D8:C1:38:15:30:75:54:BA:8D:DF:69:19:80
            X509v3 Authority Key Identifier:
                keyid:AC:82:C9:DD:9D:6C:CF:B3:8C:A1:16:40:E1:02:F7:51:AE:27:49:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/f5634f-c49f-4d9a-9534-1756887dd4cb/1/rILJ3Z1sz7OMoRZA4QL3Ua4nSSc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:0e:c9:82:cb:f8:e9:4f:5f:2c:43:50:a1:c3:9b:b6:06:a3:
         11:01:04:2d:dc:56:8f:04:7e:be:40:0e:54:44:4a:f5:40:54:
         be:5b:0a:11:50:a3:a3:3d:ea:be:d6:46:b4:fc:58:b3:d9:53:
         3e:7c:f5:a4:0e:1b:39:9f:80:61:f1:8a:a9:1b:5d:b8:0f:b0:
         a1:4b:ed:2a:3c:9c:2e:ca:be:4a:b6:05:98:51:a5:58:62:1a:
         ee:c9:93:b6:01:dd:d8:3a:c1:bb:22:33:5b:59:19:42:db:a2:
         d4:82:83:a3:c1:6e:e0:5a:67:c7:4a:2b:20:5d:0c:be:e1:50:
         1d:9b:01:89:40:ed:e0:13:fc:ac:21:7c:0a:d9:a8:cb:dd:5d:
         24:36:83:bf:8b:15:57:5f:58:72:da:3b:48:2c:6f:3a:a8:b4:
         da:d9:f1:c3:c9:a5:67:ec:dd:0e:35:8b:21:2b:b3:24:1a:9d:
         de:43:1d:99:8e:b3:d1:b0:69:f8:66:aa:05:bb:06:26:bc:3a:
         0b:04:55:62:86:fe:30:47:22:5d:c8:41:69:03:46:ca:c9:a2:
         9a:24:ec:9b:07:9f:16:6a:c0:3a:58:37:22:b3:90:40:a0:b9:
         1c:39:27:fd:2c:30:e5:10:cc:d4:2b:d6:b9:07:68:33:05:1b:
         50:04:46:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 04:54:32 2026 by rpki-client