Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.mft
File:                     70j9hHzH_IIkciES7fij4GdNnFk.mft (raw, json)
Hash identifier:          DUQgIJU2TCqMoGx9y9iAyzup1jBT0LONBKDUSE2Y+7I=
Subject key identifier:   D0:4F:00:37:0F:94:98:4B:3A:EE:D8:8B:90:6C:76:59:23:F4:F6:2D
Authority key identifier: EF:48:FD:84:7C:C7:FC:82:24:72:21:12:ED:F8:A3:E0:67:4D:9C:59
Certificate issuer:       /CN=ef48fd847cc7fc8224722112edf8a3e0674d9c59
Certificate serial:       01A0404DF5DACEAC6D5A49458AE03D2A2FFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70j9hHzH_IIkciES7fij4GdNnFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.mft
Manifest number:          9B
Signing time:             Wed 26 Aug 2026 23:00:46 +0000
Manifest this update:     Wed 26 Aug 2026 23:00:46 +0000
Manifest next update:     Thu 27 Aug 2026 23:00:46 +0000
Files and hashes:         1: 70j9hHzH_IIkciES7fij4GdNnFk.crl (hash: b2PQi7O6ZPsXb9aHEysvFFrld7vg16F2P/rEK9G+ELw=)
                          2: YjNeZY8lXjlANuWmMIgxea0mOUk.roa (hash: +abHGBZVC+LFIVEyfAR8tGhDPLuDoHIqE+nsTvk2u0w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70j9hHzH_IIkciES7fij4GdNnFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:40:4d:f5:da:ce:ac:6d:5a:49:45:8a:e0:3d:2a:2f:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef48fd847cc7fc8224722112edf8a3e0674d9c59
        Validity
            Not Before: Aug 26 23:00:46 2026 GMT
            Not After : Aug 27 23:00:46 2026 GMT
        Subject: CN=d04f00370f94984b3aeed88b906c765923f4f62d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:34:44:34:3b:22:ce:99:38:c9:45:4c:9b:ce:
                    50:6f:30:a3:2d:a3:cd:b8:26:74:34:13:73:e7:01:
                    a8:d0:d7:e1:ae:40:12:79:22:82:6a:e5:24:6c:06:
                    52:c2:9c:cb:e3:8b:e0:cb:3c:90:02:d0:6b:05:77:
                    7a:b6:1d:4b:78:87:f4:38:36:34:c4:70:0b:60:d7:
                    9d:78:7f:d6:7c:35:ca:38:7c:87:8c:67:e4:bd:17:
                    d5:fd:78:c3:2e:5b:c9:89:3c:7f:6b:a5:ba:15:ba:
                    cd:65:08:30:3e:8f:4f:4c:54:a7:e1:91:e8:e2:a0:
                    6c:6d:bf:98:e9:85:7e:8b:37:af:f4:e6:48:f1:56:
                    27:c0:e2:cf:69:88:88:fe:ee:e2:09:85:f8:fa:85:
                    2d:59:4a:2f:78:35:a7:b3:a6:45:7a:63:34:1f:43:
                    a1:6b:2a:b2:a1:b0:35:fa:a5:16:30:ca:b2:0c:78:
                    5d:7a:bd:7a:91:70:79:d4:01:17:f1:aa:82:7a:10:
                    37:82:41:7b:4e:c6:3d:37:35:ee:36:38:09:c9:5d:
                    b1:88:8d:9f:79:94:ac:fe:e8:1b:8e:bd:a0:7c:b0:
                    17:0f:34:b6:11:fa:df:44:6e:7e:6c:99:5c:fc:3c:
                    eb:bb:9a:68:50:6d:3b:d9:b6:ba:08:f8:ca:28:62:
                    be:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4F:00:37:0F:94:98:4B:3A:EE:D8:8B:90:6C:76:59:23:F4:F6:2D
            X509v3 Authority Key Identifier:
                keyid:EF:48:FD:84:7C:C7:FC:82:24:72:21:12:ED:F8:A3:E0:67:4D:9C:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70j9hHzH_IIkciES7fij4GdNnFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/21ca43-d3e1-4ec0-9a9d-39afd9316598/1/70j9hHzH_IIkciES7fij4GdNnFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:5b:42:03:fa:00:43:82:b1:a4:cf:43:9a:3c:bb:5f:a6:
         ad:f7:45:c8:3a:14:31:42:f8:2b:b1:ee:a8:10:35:59:33:75:
         bf:c8:b2:a6:a3:c4:b5:49:0c:ed:f2:74:59:1b:e7:a0:25:e7:
         10:e1:3c:2a:cd:f9:39:4a:36:0c:42:02:7f:b1:74:79:97:84:
         df:71:83:ef:76:a7:9e:c1:93:51:47:0d:f2:9d:10:49:39:1a:
         31:ee:7d:12:6a:f2:ac:68:a6:c6:00:a0:f7:90:9b:cc:bd:c5:
         7c:74:51:5e:12:a3:af:19:06:65:3d:b1:87:cf:df:84:4a:8c:
         e9:4a:ff:5c:98:4f:1d:d9:f1:1c:d7:62:14:67:99:31:18:00:
         c8:b9:76:02:c5:0d:ed:29:6a:98:a6:1f:35:61:63:7a:67:41:
         13:25:60:e4:f0:54:1c:a6:3a:31:f5:6e:88:03:2a:f8:8e:ef:
         6b:97:ee:20:9a:d8:24:c7:9e:c5:10:e1:9e:44:ad:27:c0:ce:
         35:b4:24:50:85:86:77:40:5e:c4:4d:f7:cc:94:da:f7:b8:3f:
         e8:9c:8d:d5:58:6c:9b:cb:fa:18:63:65:f6:7e:ab:8a:51:a2:
         56:f0:da:52:98:55:68:91:e0:07:a1:61:dc:8b:a7:71:f7:30:
         d5:e1:38:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBATfXazqxtWklFiuA9Ki//MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDhmZDg0N2NjN2ZjODIyNDcyMjExMmVkZjhhM2UwNjc0
ZDljNTkwHhcNMjYwODI2MjMwMDQ2WhcNMjYwODI3MjMwMDQ2WjAzMTEwLwYDVQQD
EyhkMDRmMDAzNzBmOTQ5ODRiM2FlZWQ4OGI5MDZjNzY1OTIzZjRmNjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjRENDsizpk4yUVMm85QbzCjLaPN
uCZ0NBNz5wGo0NfhrkASeSKCauUkbAZSwpzL44vgyzyQAtBrBXd6th1LeIf0ODY0
xHALYNedeH/WfDXKOHyHjGfkvRfV/XjDLlvJiTx/a6W6FbrNZQgwPo9PTFSn4ZHo
4qBsbb+Y6YV+izev9OZI8VYnwOLPaYiI/u7iCYX4+oUtWUoveDWns6ZFemM0H0Oh
ayqyobA1+qUWMMqyDHhder16kXB51AEX8aqCehA3gkF7TsY9NzXuNjgJyV2xiI2f
eZSs/ugbjr2gfLAXDzS2EfrfRG5+bJlc/Dzru5poUG072ba6CPjKKGK+uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBPADcPlJhLOu7Yi5Bsdlkj9PYtMB8GA1UdIwQY
MBaAFO9I/YR8x/yCJHIhEu34o+BnTZxZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBqOWhIekhfSUlrY2lFUzdmaWo0R2RObkZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQt
MzlhZmQ5MzE2NTk4LzEvNzBqOWhIekhfSUlrY2lFUzdmaWo0R2RObkZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8yMWNhNDMtZDNlMS00ZWMwLTlhOWQtMzlhZmQ5MzE2NTk4
LzEvNzBqOWhIekhfSUlrY2lFUzdmaWo0R2RObkZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALttbQgP6
AEOCsaTPQ5o8u1+mrfdFyDoUMUL4K7HuqBA1WTN1v8iypqPEtUkM7fJ0WRvnoCXn
EOE8Ks35OUo2DEICf7F0eZeE33GD73annsGTUUcN8p0QSTkaMe59EmryrGimxgCg
95CbzL3FfHRRXhKjrxkGZT2xh8/fhEqM6Ur/XJhPHdnxHNdiFGeZMRgAyLl2AsUN
7SlqmKYfNWFjemdBEyVg5PBUHKY6MfVuiAMq+I7va5fuIJrYJMeexRDhnkStJ8DO
NbQkUIWGd0BexE33zJTa97g/6JyN1Vhsm8v6GGNl9n6rilGiVvDaUphVaJHgB6Fh
3Iuncfcw1eE4Hw==
-----END CERTIFICATE-----
Generated at Thu Aug 27 05:25:15 2026 by rpki-client