Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
File:                     IWmMHNxm3ChdD4B2KcRiYaiLLec.mft (raw, json)
Hash identifier:          BOxQcWbNjaEb6I2QICqLwtSkH5F5sQ1SFljzKXPKS+0=
Subject key identifier:   1D:E2:ED:9A:DC:11:4F:6A:8B:11:F3:0A:02:8E:86:DD:5A:A0:B1:20
Authority key identifier: 21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7
Certificate issuer:       /CN=21698c1cdc66dc285d0f807629c46261a88b2de7
Certificate serial:       01A08B9EC716A580F818AD483ACE182AB63D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
Manifest number:          1A51
Signing time:             Thu 10 Sep 2026 14:00:33 +0000
Manifest this update:     Thu 10 Sep 2026 14:00:33 +0000
Manifest next update:     Fri 11 Sep 2026 14:00:33 +0000
Files and hashes:         1: 1-1889f_-iRQYnH3-fqXrOkR2ikE.roa (hash: /z9uTfpjXRCmTc6GwPli+bHZeS9FVw3t6IXyn4g2iag=)
                          2: 4tb80eIeaemuew5fxP0iEI9imgA.roa (hash: e9ASBdL/cxgsl0ZRb+D15EqqF9ntvaIWRU4Syd78R4c=)
                          3: 5imhJ2Nn32k7XMqdnbo3nfJcYuc.roa (hash: wdooR1EonyLTBTWw2tpg6m0I9TSD570lR7yhgwvAcsk=)
                          4: IWmMHNxm3ChdD4B2KcRiYaiLLec.crl (hash: DJD/fWi6jaZw1wYVTm849HX0aGBUSiueru+POvzUnaY=)
                          5: V6C5S8FHu-VQP7fJy_qJO2TbRW8.roa (hash: ERX1UGNBCgL3/72WnrYeAgNLYeESJE2SSaY/KZ9ee1o=)
                          6: xQDTUuqpTq2N6Fx6Gq6mEULV36k.roa (hash: mElWxlPb4ggRHli9cITYJ0YySn8gxZXbhGQNUFYIVAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:9e:c7:16:a5:80:f8:18:ad:48:3a:ce:18:2a:b6:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21698c1cdc66dc285d0f807629c46261a88b2de7
        Validity
            Not Before: Sep 10 14:00:33 2026 GMT
            Not After : Sep 11 14:00:33 2026 GMT
        Subject: CN=1de2ed9adc114f6a8b11f30a028e86dd5aa0b120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:31:59:75:fb:f3:bd:54:b3:02:7a:76:99:6d:
                    d7:1a:4d:d9:59:ae:ce:89:d1:bb:db:33:91:5f:d8:
                    09:df:77:eb:99:27:8a:c2:75:bd:78:aa:4f:da:dd:
                    3b:c6:84:5c:a3:1b:db:7f:59:24:10:5d:ae:23:9d:
                    db:ad:48:c1:b2:88:17:16:e4:5a:84:5b:a3:b4:50:
                    30:5d:c6:95:68:b0:ef:42:68:56:66:02:9e:fd:a2:
                    44:25:ad:3e:ac:7e:07:bc:5c:f6:64:9c:d4:7f:b6:
                    55:7c:8d:5b:8a:5e:c6:51:ac:31:34:15:1b:3f:c3:
                    4f:7a:b9:f0:b7:b7:5b:91:d2:c2:2f:94:44:a2:f9:
                    ff:da:8f:1e:69:34:ac:54:cc:11:99:bd:0b:fd:af:
                    22:cd:21:6d:43:d4:13:d7:4d:01:49:2f:ef:ce:54:
                    1f:ac:c4:97:a5:37:1e:74:49:7b:f0:7f:ee:5a:d1:
                    98:ca:c6:02:cf:45:8e:63:27:45:a2:3a:3a:84:79:
                    0b:77:53:8d:85:8f:40:92:fd:12:b5:d9:5a:c1:db:
                    80:2e:e1:fa:3a:da:cb:dc:d7:21:ba:ca:1e:d8:a4:
                    4f:d9:4a:23:eb:15:c3:44:8f:cb:82:aa:b1:f5:34:
                    56:b2:0e:b9:b6:aa:f4:c9:61:fa:e8:da:9b:ac:34:
                    24:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:E2:ED:9A:DC:11:4F:6A:8B:11:F3:0A:02:8E:86:DD:5A:A0:B1:20
            X509v3 Authority Key Identifier:
                keyid:21:69:8C:1C:DC:66:DC:28:5D:0F:80:76:29:C4:62:61:A8:8B:2D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IWmMHNxm3ChdD4B2KcRiYaiLLec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/11dc71-8170-45b5-8c5b-4d73730f7d32/1/IWmMHNxm3ChdD4B2KcRiYaiLLec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:bd:30:8c:4b:6d:e2:34:33:21:69:e5:a0:af:73:70:f0:ef:
         d2:71:c5:5e:50:85:29:92:73:c7:72:48:a7:cc:aa:81:d8:7b:
         dd:e5:33:ff:7d:e0:78:b2:b1:46:d4:49:04:6b:40:2b:58:ba:
         bb:a5:63:6b:e4:07:ae:cc:1e:3d:a8:0e:91:da:9a:1a:f6:e6:
         5e:a5:86:b0:f6:be:02:03:1e:fd:b5:7d:a1:ec:18:dc:4e:d4:
         ae:a4:4a:92:fb:b3:07:cb:e7:85:56:5b:e9:aa:74:82:5a:ec:
         7d:4c:9f:80:f9:b2:39:5c:ce:00:13:be:d0:99:40:f4:2d:6c:
         f8:92:54:f9:3f:18:b4:b4:db:44:43:18:42:8c:f7:3e:26:db:
         14:78:2e:c5:53:b1:1e:47:1d:95:ed:3a:6f:35:26:99:92:f1:
         2c:11:7b:fa:d5:aa:06:0c:fb:19:b2:0e:85:5a:c3:71:ed:ca:
         e5:3b:2f:8f:80:f5:7e:62:c2:32:24:d2:35:29:c3:6f:a4:d0:
         84:26:da:4d:79:5f:91:7b:be:3d:94:bd:1e:78:5d:1b:58:37:
         73:7d:a7:3b:3c:82:6e:57:78:0b:49:64:e8:8c:4c:68:24:d0:
         bf:bc:d7:17:bc:bc:20:3b:74:fc:8f:b0:d0:79:64:d6:14:54:
         16:ed:ff:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:32:12 2026 by rpki-client