Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
File:                     tUMb1z4KfwN965fYLRqV_NZxBRw.mft (raw, json)
Hash identifier:          DBS8YN6l4fhdbrnqx7px00FILAwslJJDBDpZyGuL2P8=
Subject key identifier:   4C:69:92:6B:2A:AA:4E:00:A8:DB:48:0D:DB:37:74:14:87:B5:24:09
Authority key identifier: B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C
Certificate issuer:       /CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c
Certificate serial:       01A0B79BA31C17A387173145C8A5164E3781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
Manifest number:          0332
Signing time:             Sat 19 Sep 2026 03:00:25 +0000
Manifest this update:     Sat 19 Sep 2026 03:00:25 +0000
Manifest next update:     Sun 20 Sep 2026 03:00:25 +0000
Files and hashes:         1: ptIvn2G44nmjMz4OoTPMvDGmQ4g.roa (hash: mVPD346A3srmdFGJdgacd5EA7ZXTURNtKW04Yxreb0M=)
                          2: tUMb1z4KfwN965fYLRqV_NZxBRw.crl (hash: X5BrrqLbmopM8yI21z5w6kQi8VcZ2irQ+D1n8H+xX64=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Sep 2026 02:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b7:9b:a3:1c:17:a3:87:17:31:45:c8:a5:16:4e:37:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5431bd73e0a7f037deb97d82d1a95fcd671051c
        Validity
            Not Before: Sep 19 03:00:25 2026 GMT
            Not After : Sep 20 03:00:25 2026 GMT
        Subject: CN=4c69926b2aaa4e00a8db480ddb37741487b52409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:0d:ab:52:8d:df:ee:d3:f3:b7:03:ae:ed:
                    6f:30:5d:8e:2d:43:4f:64:52:e1:96:50:7d:67:0b:
                    11:0c:f8:65:f4:04:a8:0a:fa:c4:06:f5:90:4f:c1:
                    5f:72:77:39:4a:39:13:51:37:88:d6:69:f3:17:fa:
                    8a:9b:84:40:e1:8e:fb:1d:b9:78:0b:80:6c:e1:40:
                    95:43:52:75:02:9c:f8:1e:5d:18:41:fc:16:b4:e3:
                    0c:5e:d1:be:0e:ae:2e:f7:16:7e:a9:be:80:0d:f0:
                    a0:52:ba:23:e2:7f:25:d4:21:7b:e2:4d:eb:5d:96:
                    52:bb:ff:7e:67:21:b4:05:f0:09:eb:bf:88:09:1e:
                    5b:ce:d1:7e:3b:bc:0a:84:3f:f4:b4:2d:e7:e4:c6:
                    1d:e7:17:28:40:18:cd:35:bb:07:89:6c:92:46:d9:
                    a7:d7:87:db:39:04:91:f6:4f:0d:b9:0f:5b:c4:c5:
                    a3:4e:a2:1d:41:99:ce:3f:27:c9:38:63:27:8b:b7:
                    a1:08:6c:6b:90:61:59:0f:22:cc:09:65:bd:71:03:
                    73:e5:04:6c:4f:f7:cc:a7:fa:6a:a8:2e:af:39:53:
                    ef:e3:fe:97:80:11:58:6c:92:53:e8:92:9e:92:5a:
                    a5:71:47:b2:e7:fe:94:d8:97:15:8e:5a:0d:f1:95:
                    7b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:69:92:6B:2A:AA:4E:00:A8:DB:48:0D:DB:37:74:14:87:B5:24:09
            X509v3 Authority Key Identifier:
                keyid:B5:43:1B:D7:3E:0A:7F:03:7D:EB:97:D8:2D:1A:95:FC:D6:71:05:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUMb1z4KfwN965fYLRqV_NZxBRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/a12629-8bdf-4cdd-8672-1fd9f2c98956/1/tUMb1z4KfwN965fYLRqV_NZxBRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:bd:81:99:e9:f4:80:2d:7f:61:24:e9:04:d7:f2:87:a5:d5:
         81:4b:77:07:d9:2f:28:76:17:bf:fa:4e:b3:c8:96:fb:f2:8c:
         74:44:31:e9:f6:3c:c8:82:52:7f:19:bd:ec:99:22:23:76:8d:
         15:39:66:fc:a4:ab:73:a8:76:47:89:d0:8b:9b:e4:fd:a3:82:
         61:31:e0:1c:57:3c:dc:ad:45:6b:3a:f5:6b:06:56:bf:6b:99:
         20:0a:2c:03:c8:1c:08:ce:8f:40:89:18:a3:2b:f1:8c:be:0d:
         2a:c8:73:c2:ee:59:cc:3e:a9:91:eb:77:42:8d:87:81:7f:e0:
         95:7e:0d:0e:14:5f:8b:a2:95:7b:35:5e:02:27:ca:47:79:db:
         79:47:d9:d4:09:4a:61:3c:da:5c:c4:82:0d:80:f5:77:fc:10:
         31:7f:c7:c1:e1:81:96:09:e7:e5:60:d6:7f:17:72:65:7b:a2:
         56:11:b9:bb:d4:4e:68:55:3a:d8:88:71:68:4f:c3:32:09:e6:
         b9:94:22:79:cf:f6:e3:e6:5c:de:2a:4f:52:0f:32:20:94:d5:
         01:c3:fd:6b:76:7b:58:3a:1c:bc:bb:7d:44:23:85:7f:fa:0f:
         1a:2d:46:9e:3d:a0:7f:c0:6a:07:3a:ec:fa:10:bc:61:d6:83:
         cc:6e:23:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 07:38:46 2026 by rpki-client