Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
File:                     Y14XDZsHxQ0bKa6GliBssUWk8fc.mft (raw, json)
Hash identifier:          9/sg9tq1zwjLAL9Nn2uIi7b1In7/1P+o4xejnFlAnI4=
Subject key identifier:   EF:70:C7:03:F5:18:EB:99:2E:1B:7C:D7:65:9F:93:6B:98:BF:D2:22
Authority key identifier: 63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7
Certificate issuer:       /CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
Certificate serial:       01A0DC4D88119ACB513168F31D1912497A02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
Manifest number:          03C7
Signing time:             Sat 26 Sep 2026 06:01:03 +0000
Manifest this update:     Sat 26 Sep 2026 06:01:03 +0000
Manifest next update:     Sun 27 Sep 2026 06:01:03 +0000
Files and hashes:         1: Y14XDZsHxQ0bKa6GliBssUWk8fc.crl (hash: yuukGBpQcynnkG25OBxWE9Z/47llOYlrDYqd3q5LW8s=)
                          2: w5p1hXEjQ2Xz1V3bTFCKNXnxTbs.roa (hash: BkrEG8IgRqXV47SrXBW3QPf+J5iuuBWyqjvE+aHIr/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:4d:88:11:9a:cb:51:31:68:f3:1d:19:12:49:7a:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=635e170d9b07c50d1b29ae8696206cb145a4f1f7
        Validity
            Not Before: Sep 26 06:01:03 2026 GMT
            Not After : Sep 27 06:01:03 2026 GMT
        Subject: CN=ef70c703f518eb992e1b7cd7659f936b98bfd222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a3:bb:f6:46:c0:b7:c4:90:bc:08:4f:ea:83:
                    cf:67:fa:4e:84:7c:32:15:5c:6d:ff:e3:23:6d:b8:
                    6e:b3:fa:fe:6f:7f:64:a2:fc:e0:bd:b5:f3:b8:ec:
                    04:4a:e3:11:b7:56:68:59:18:01:74:2e:58:bf:3f:
                    6e:2e:09:06:95:d2:11:8b:e5:7f:17:94:4f:15:41:
                    e2:d9:01:b4:7f:a4:e2:29:c7:51:6d:15:f0:b6:69:
                    9a:aa:60:4d:f6:97:97:9c:46:b9:47:72:b7:3b:d5:
                    ab:ff:74:e9:7b:96:61:5c:ab:78:62:3c:fb:83:54:
                    7d:91:23:50:6b:dd:a7:02:c3:d4:b9:87:e7:1b:43:
                    e2:e1:2a:07:93:a9:a6:cb:a6:90:04:d7:1f:f2:06:
                    51:65:df:1b:65:53:7b:74:00:13:00:e1:e7:c2:af:
                    98:f6:c6:6f:35:53:0b:8f:bf:d2:ed:b7:10:aa:23:
                    89:3a:07:ed:74:58:6a:e9:81:49:de:a9:4a:43:f0:
                    e6:95:98:5d:2c:53:bd:81:a4:5c:04:fe:54:c7:4e:
                    9b:92:b4:e0:91:88:de:ff:0d:b2:1c:8a:bf:00:a7:
                    f3:6b:4c:65:39:81:ef:d0:80:f1:08:24:12:c8:a3:
                    f1:48:eb:2e:84:0a:96:81:96:c2:95:80:ba:17:1c:
                    7c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:70:C7:03:F5:18:EB:99:2E:1B:7C:D7:65:9F:93:6B:98:BF:D2:22
            X509v3 Authority Key Identifier:
                keyid:63:5E:17:0D:9B:07:C5:0D:1B:29:AE:86:96:20:6C:B1:45:A4:F1:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y14XDZsHxQ0bKa6GliBssUWk8fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/7b2fcc-ebc9-4b02-b716-f80d5f31664e/1/Y14XDZsHxQ0bKa6GliBssUWk8fc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:a3:6d:30:e0:08:dc:89:46:79:4b:a1:76:3c:a0:b0:cc:23:
         93:90:de:ef:65:2e:83:8e:65:b1:46:71:34:48:53:88:37:d9:
         56:b6:a5:91:ed:b9:41:d9:19:95:53:15:51:76:70:03:c4:bd:
         ab:f4:ed:b0:b1:41:a4:35:72:93:5e:2b:3e:68:db:c0:b4:f4:
         ca:a2:19:c1:2f:29:bb:6c:ff:74:82:c6:4b:95:66:47:41:7c:
         94:08:67:da:c1:cd:a9:51:8e:e9:66:cb:17:88:c1:de:5e:08:
         f7:d0:b5:d5:a1:71:9a:73:1a:9a:4f:c0:96:41:b8:c4:99:61:
         29:e1:a1:ba:6b:1a:99:56:ed:b7:d5:3b:e9:a9:ed:f0:6e:a3:
         ac:ed:a3:a9:be:9f:3e:d0:25:5a:a0:0b:07:02:02:93:e8:e7:
         0d:80:41:18:88:41:04:8b:a7:57:0e:a5:b1:a7:1d:f4:23:ac:
         e3:84:fb:cf:35:f4:86:a2:23:a6:ad:d1:60:1e:80:03:d7:55:
         59:4c:b3:92:da:4a:4a:0e:c1:00:51:26:69:d8:a8:11:f8:0f:
         e5:ca:f1:c7:55:12:8d:85:6f:56:f6:90:17:5f:bd:e6:32:05:
         0b:4b:dc:fd:9f:49:9c:7e:4f:a7:20:d6:e3:9a:3f:01:de:21:
         5a:eb:90:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:10:25 2026 by rpki-client