Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
File:                     ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft (raw, json)
Hash identifier:          f8FwNjMoGp8ePl/atXN9aP4XV6oGL6vELU1Hvbg8mAo=
Subject key identifier:   E8:C1:45:79:D6:B1:92:E2:34:9E:FE:B5:46:E3:74:07:35:89:4D:3C
Authority key identifier: 13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92
Certificate issuer:       /CN=1319f052bc9e7284888074390c9d0bc127606692
Certificate serial:       01A06E7042F789074521575DF0366ADF78A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
Manifest number:          1A77
Signing time:             Fri 04 Sep 2026 22:00:45 +0000
Manifest this update:     Fri 04 Sep 2026 22:00:45 +0000
Manifest next update:     Sat 05 Sep 2026 22:00:45 +0000
Files and hashes:         1: 5dAVtaJIi1EXqqYU5USv7fZXPs4.roa (hash: F+ZaLmkSoDDXKvEZfC55Pqn2Kegitmab6UvzlFAoMLA=)
                          2: EYW0DPWxBVq8OkJlufsQTH29-zg.roa (hash: LYmKFSnt04HxJKJsThK8gfh7k7FUGUtbXQNPAEzqIUM=)
                          3: ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl (hash: aGYIyoi8e308794SVqn/yOvhHNELJNZZn7vLQTA5/o0=)
                          4: WyfVVVbupjvPxLzRmrpKaA7AkYw.roa (hash: 02QZajpOlAkNu8PwY46zt4fm5XsA4QV5bfhzU3rgZmo=)
                          5: Y_29QVsVJvHnxddFaQdcq2kyCOc.roa (hash: ycsC5DW4Lfa6OQ8J1BIx0zDPciZcjwI4JTfmbrMI8V0=)
                          6: _MW7W40W598GgASR5Eoa_4tP1ko.roa (hash: aru9WUwoYSO6XyN5TKKL7ZyhgIa+93XhWqRZBdE8/Ss=)
                          7: kyJQs5we30dtkYez5Z5lc7nb1uk.roa (hash: QYkWAPu1QeZJ7qVGGJyIAFdYbqAhnaEmDRslgqPIGEg=)
                          8: vkSBou13YVLJcpm4RzlvkM2VmEA.roa (hash: Yt5SBPreKEhsGRzUNTyivVfBSSg7gYCaurShg3S49zg=)
                          9: w66ZldWus98F7FLtFE_HfwzAVOw.roa (hash: dMhZ2iCHZg0KsJ/1R4eui0OO1+pgGYsJE5mhqZ9ftyc=)
                          10: yGko-YtBNaNvOP4tDs7GDUXg2eA.roa (hash: wSaHrBildo4ZcOo9cc+dzQPk/7VlKqTO3FnCX6x1CG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:42:f7:89:07:45:21:57:5d:f0:36:6a:df:78:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1319f052bc9e7284888074390c9d0bc127606692
        Validity
            Not Before: Sep  4 22:00:45 2026 GMT
            Not After : Sep  5 22:00:45 2026 GMT
        Subject: CN=e8c14579d6b192e2349efeb546e3740735894d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:e0:08:ff:27:c2:d4:49:88:cf:93:25:77:
                    61:18:4f:a1:24:82:7f:4d:2f:c3:62:8a:d0:b6:f1:
                    86:1d:54:c9:ae:9f:6b:aa:3d:2a:9b:ae:be:60:7a:
                    08:a4:7f:78:a0:11:25:81:5c:41:ac:a2:c6:fa:31:
                    00:eb:94:d7:d6:f7:94:fd:bc:ec:0b:2d:12:dd:2e:
                    fd:c2:17:fe:da:87:e5:42:2b:08:f6:98:d9:eb:6f:
                    cf:1b:cc:63:90:ad:30:68:b4:0e:17:49:e0:7b:02:
                    fb:58:a3:77:7c:07:8d:c6:6c:84:83:65:be:3f:51:
                    b9:e6:f2:0c:1a:2e:e1:1e:27:48:f7:41:2f:ce:6d:
                    c2:96:ff:2e:e3:7d:c2:74:4c:8a:49:5b:73:3b:11:
                    fc:d9:22:11:27:53:a8:fa:fa:44:24:60:94:f2:a8:
                    2b:d2:be:24:1b:dd:7d:31:0c:3d:f1:1d:aa:0a:2b:
                    99:0f:18:6b:a9:c4:ab:eb:28:8f:d7:a0:a2:e7:22:
                    ac:e5:6d:3f:78:8b:d8:cf:6b:9f:b1:df:b6:c6:d7:
                    b6:fa:85:ae:68:19:2a:70:1e:6c:90:9d:d3:72:5b:
                    ff:3b:d5:f5:e2:70:64:6f:a4:fc:b5:76:65:50:19:
                    1b:dc:6d:84:e9:b8:8c:34:01:22:90:4e:5c:fb:d3:
                    c1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C1:45:79:D6:B1:92:E2:34:9E:FE:B5:46:E3:74:07:35:89:4D:3C
            X509v3 Authority Key Identifier:
                keyid:13:19:F0:52:BC:9E:72:84:88:80:74:39:0C:9D:0B:C1:27:60:66:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExnwUryecoSIgHQ5DJ0LwSdgZpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5bbce-4220-4ec4-8af5-2c1a7730bd25/1/ExnwUryecoSIgHQ5DJ0LwSdgZpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:d2:e6:e6:0d:3d:2f:6a:18:2a:dd:40:3d:f4:31:79:e0:8c:
         e8:22:33:be:c1:f2:3e:09:82:12:b8:62:d6:21:79:ab:f3:44:
         fe:96:19:00:e2:52:68:48:c6:19:25:64:78:b8:4b:dd:b1:93:
         02:6c:16:10:39:41:a7:cb:7b:71:e6:49:80:d6:c8:99:67:2f:
         9a:6c:f2:42:4d:ef:cf:5f:6a:4f:b5:b2:95:c7:05:7b:0c:68:
         5d:82:90:c1:38:11:2b:f0:c7:de:6c:27:b5:1d:74:1c:e2:55:
         c7:92:4c:36:fc:b3:da:c3:b2:32:f4:96:b6:43:9f:a1:ac:09:
         47:05:0f:96:e8:bd:6e:86:62:f1:20:22:e2:9b:55:41:94:3c:
         be:3f:ed:65:62:a4:ed:e3:aa:01:ca:97:63:69:30:90:de:91:
         76:77:81:ec:70:5e:d0:ea:86:30:bc:b6:46:9e:e4:d3:2b:f7:
         a4:bf:00:32:f2:e5:67:a3:c6:bc:f9:85:fe:3b:00:3a:1a:59:
         12:c4:e6:56:2b:ca:60:9d:04:e5:25:29:6b:92:fe:98:74:4d:
         aa:ac:43:cf:b5:77:18:ac:56:be:f8:a3:19:02:ed:b3:bb:93:
         14:07:e1:cf:b8:e5:a1:eb:69:92:1a:1f:b9:21:56:1e:c7:8c:
         d0:2f:f3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:14:30 2026 by rpki-client