Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
File:                     rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft (raw, json)
Hash identifier:          FY1fGEdZ3jE8jZNrIHuKOYJl4+ggrPFASIS3nsgy4s0=
Subject key identifier:   95:20:53:38:E6:8C:37:BC:19:C9:DC:22:63:4C:3F:AB:52:3C:F3:70
Authority key identifier: AD:D3:EE:C3:31:B7:02:A2:06:B5:4D:FE:90:63:B8:C1:7A:42:B8:1C
Certificate issuer:       /CN=add3eec331b702a206b54dfe9063b8c17a42b81c
Certificate serial:       01A0F18BFC08BAAEB99EFFDC11EFE763DF4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
Manifest number:          01C4
Signing time:             Wed 30 Sep 2026 09:01:18 +0000
Manifest this update:     Wed 30 Sep 2026 09:01:18 +0000
Manifest next update:     Thu 01 Oct 2026 09:01:18 +0000
Files and hashes:         1: WgFjeIjodHf0tIFJwgd7qL6VzDY.roa (hash: SbLcaGFtR51gDtKvy7+lV/tvtr//sjAXrktSn3Oq23Q=)
                          2: rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl (hash: ZBLgu9E3/toA9cJk+UbFoViJjconz+TLCF+E5D2r11w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 09:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:8b:fc:08:ba:ae:b9:9e:ff:dc:11:ef:e7:63:df:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=add3eec331b702a206b54dfe9063b8c17a42b81c
        Validity
            Not Before: Sep 30 09:01:18 2026 GMT
            Not After : Oct  1 09:01:18 2026 GMT
        Subject: CN=95205338e68c37bc19c9dc22634c3fab523cf370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c9:8f:14:1c:c7:f0:1c:f4:ba:3e:5f:f4:26:
                    3f:81:a8:a2:73:50:35:cd:a8:41:4b:71:38:fb:f5:
                    a7:84:9c:34:b2:f8:33:19:0a:7a:b1:7b:33:89:9f:
                    3a:43:ea:7c:62:ec:a9:a9:93:5f:bb:f8:0d:7c:03:
                    9b:78:40:d4:aa:de:0c:1b:70:d7:5a:58:9e:ef:a1:
                    07:e4:a5:00:a8:8e:bf:25:bd:92:75:fd:8b:bd:57:
                    c8:93:d1:18:7e:14:c5:fa:f9:0f:95:a4:14:fe:19:
                    53:08:4f:91:9d:8b:71:16:b1:34:4f:a2:55:3d:7c:
                    f1:54:c5:c0:fc:28:de:a4:44:1f:25:8e:e2:ad:c2:
                    4e:95:68:fb:a0:94:3d:3e:ca:0c:7c:92:d0:bd:4f:
                    4a:a3:81:4b:6d:f7:da:37:6e:e5:8c:50:3e:13:67:
                    70:c2:6e:ee:c3:d4:82:7d:88:a0:ee:95:9e:55:ab:
                    9e:d5:da:89:56:ee:9f:2d:be:38:9f:d1:8b:96:2c:
                    4a:8a:f2:ed:ad:40:7e:39:12:6f:39:1e:ca:9e:28:
                    e0:55:54:dc:7c:1f:6f:28:c5:17:01:36:72:d1:93:
                    b0:a4:7c:22:8b:31:83:a1:1d:c2:5e:e6:a5:ee:15:
                    02:ae:9b:a4:e9:61:69:7c:1c:cd:bc:89:bc:5d:23:
                    de:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:20:53:38:E6:8C:37:BC:19:C9:DC:22:63:4C:3F:AB:52:3C:F3:70
            X509v3 Authority Key Identifier:
                keyid:AD:D3:EE:C3:31:B7:02:A2:06:B5:4D:FE:90:63:B8:C1:7A:42:B8:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdPuwzG3AqIGtU3-kGO4wXpCuBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/fe6f93-b2fc-49e0-be87-34bb710a3478/1/rdPuwzG3AqIGtU3-kGO4wXpCuBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e0:5b:e2:ae:24:f0:b2:51:d0:97:7d:f7:79:73:b6:fc:6b:93:
         cd:64:ac:a4:ac:db:5c:47:af:9b:6d:9d:a2:2a:fb:b8:e2:85:
         31:f0:77:58:6b:a3:9d:68:b0:bf:75:e3:98:d2:e5:3e:72:68:
         52:1b:4f:f7:7d:e8:20:f4:e7:7c:ad:92:07:b6:a3:83:3e:e0:
         4c:e8:90:9a:5e:d9:f0:63:f2:dd:0f:bd:ce:18:8b:8f:77:e6:
         34:a2:3b:e9:86:27:13:ad:b9:ad:a5:1c:6d:f4:f0:d5:e5:95:
         95:14:04:b0:99:bf:33:bf:ec:a1:49:c8:f5:29:c8:1c:f4:f1:
         f2:a8:78:34:c3:0c:89:59:0d:3f:7a:1d:e2:11:db:2e:39:f6:
         8e:88:01:9c:28:23:83:17:c3:36:ae:7b:f0:b5:bf:65:d5:bf:
         23:18:9a:1f:d8:ea:d3:bf:0a:88:7d:5c:7c:67:cf:6e:1f:11:
         f8:43:93:a7:f3:c9:f9:ee:46:06:55:bf:6b:f6:98:46:c9:a4:
         d0:5a:80:a4:9a:37:5f:6c:92:cd:95:22:40:5f:71:f0:84:77:
         07:a2:76:99:cb:43:6f:93:a2:63:7e:30:ed:0f:90:ab:5c:50:
         1d:f6:79:d2:bc:15:1f:97:93:30:a7:0d:66:8b:25:da:8c:ab:
         0d:3a:f7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:23:11 2026 by rpki-client