Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
File:                     mur6lsnVY-ZQulkv-wbizutqCFk.mft (raw, json)
Hash identifier:          aOkDN3XLb5Da4Tm6kpfBzdMkOD0ToBM/8BmjVyrIlFU=
Subject key identifier:   26:4F:A5:5A:C3:3D:95:90:9D:36:8C:1A:33:F9:53:71:4C:10:81:2E
Authority key identifier: 9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59
Certificate issuer:       /CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
Certificate serial:       01A0EA0936A776D6B21D452962930C6A8962
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
Manifest number:          1A7C
Signing time:             Mon 28 Sep 2026 22:01:07 +0000
Manifest this update:     Mon 28 Sep 2026 22:01:07 +0000
Manifest next update:     Tue 29 Sep 2026 22:01:07 +0000
Files and hashes:         1: ZHTPMXBOpdp05MOA2aKrzlYilrs.roa (hash: QCNP42k/GUDd67H/ZxLk93Isvk0s3AXWCiuNHUZgsoY=)
                          2: mur6lsnVY-ZQulkv-wbizutqCFk.crl (hash: +GMmTH0Mjr527Xm60gmWRtkG7DSB8meRBjUMUPM3qHM=)
                          3: ynMxlcFBB2L4-uja3__b866yjKI.roa (hash: NfYPYHpG7deE0wKHNgZIplB1gjV6dRMZ7FyQyY5Xg+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 22:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:09:36:a7:76:d6:b2:1d:45:29:62:93:0c:6a:89:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9aeafa96c9d563e650ba592ffb06e2ceeb6a0859
        Validity
            Not Before: Sep 28 22:01:07 2026 GMT
            Not After : Sep 29 22:01:07 2026 GMT
        Subject: CN=264fa55ac33d95909d368c1a33f953714c10812e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0b:f0:2a:b3:34:06:95:cc:61:fc:65:57:f0:
                    ea:b9:82:9b:11:35:e5:2c:f5:95:3f:9d:b8:79:b9:
                    0a:7f:33:9a:72:fd:c5:30:bc:13:e4:da:38:88:a7:
                    34:a0:81:c4:6a:bb:6a:c1:bd:54:df:e2:77:28:b6:
                    b1:49:3b:bb:58:d8:47:6b:90:e7:0d:2a:cb:7c:77:
                    6f:38:42:e7:a4:25:e1:20:bc:29:2a:7b:6d:86:18:
                    ac:c7:4b:37:2c:8c:e6:0b:c0:50:a2:11:09:2c:70:
                    5b:b8:82:58:0f:e9:2b:43:92:6c:2c:22:b1:b0:71:
                    23:e1:88:f4:a6:a2:25:5e:67:62:65:1a:19:bd:d5:
                    4c:4d:8e:80:c9:cc:4d:6a:67:eb:16:35:8b:63:70:
                    a0:d8:37:41:f6:d5:b8:82:49:a7:d7:92:c5:e6:66:
                    9f:5d:d6:9c:d1:da:a9:dc:75:a7:5b:d2:13:4d:49:
                    53:0b:1e:17:62:7a:e9:00:e8:7f:98:00:85:cf:de:
                    f1:25:b2:ae:be:1c:cb:43:7a:16:a2:dd:da:04:9f:
                    4a:30:2c:7d:bf:d4:4a:6a:73:1d:16:0b:71:b0:1d:
                    95:bd:f6:67:3d:15:92:80:c7:59:3f:7e:3c:f9:f1:
                    09:19:89:83:1e:7c:87:55:cf:0a:3f:9d:93:44:f4:
                    f3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4F:A5:5A:C3:3D:95:90:9D:36:8C:1A:33:F9:53:71:4C:10:81:2E
            X509v3 Authority Key Identifier:
                keyid:9A:EA:FA:96:C9:D5:63:E6:50:BA:59:2F:FB:06:E2:CE:EB:6A:08:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mur6lsnVY-ZQulkv-wbizutqCFk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/47275d-5fa7-4bb2-99eb-1f00737cb2a2/1/mur6lsnVY-ZQulkv-wbizutqCFk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:86:bc:cf:dc:41:1f:57:c2:4b:2f:f8:6f:65:f5:5b:99:fe:
         ef:14:22:10:6c:b7:58:e1:54:d5:e0:4e:7d:ce:f7:c5:72:db:
         17:8f:8a:f0:75:28:e0:88:f5:ef:05:31:eb:14:8c:4f:fb:41:
         6e:46:b6:95:27:f0:de:3f:65:a2:62:99:af:10:ce:ca:16:09:
         8d:4f:f6:bf:13:69:cd:37:54:a0:65:30:08:ae:43:13:ce:14:
         76:ad:8c:f2:df:b8:ce:98:75:98:a3:2f:40:e7:58:6b:9b:76:
         6c:79:50:1b:32:8c:55:0e:fd:f7:eb:91:c8:b2:87:72:8b:31:
         00:bc:b5:31:02:5c:67:23:ba:52:3f:37:37:27:bb:a0:22:96:
         c8:55:98:29:cf:c1:3a:c2:f8:49:a7:34:a8:ad:24:67:e5:88:
         64:42:1c:22:43:45:36:88:43:51:d7:f0:09:2b:98:74:33:b1:
         da:76:c7:1f:02:41:1c:09:38:9f:c9:18:d2:a1:11:83:78:8a:
         a5:89:59:a0:4e:54:79:26:48:26:d8:65:eb:46:f5:26:27:c6:
         0d:83:f4:5b:52:1b:b5:46:0d:dc:00:d9:a6:77:8b:df:5f:10:
         2c:8a:f0:57:4d:56:39:ce:3a:5e:2d:b7:fb:df:17:4d:bf:61:
         79:3c:46:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqCTandtayHUUpYpMMaoliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhZWFmYTk2YzlkNTYzZTY1MGJhNTkyZmZiMDZlMmNlZWI2
YTA4NTkwHhcNMjYwOTI4MjIwMTA3WhcNMjYwOTI5MjIwMTA3WjAzMTEwLwYDVQQD
EygyNjRmYTU1YWMzM2Q5NTkwOWQzNjhjMWEzM2Y5NTM3MTRjMTA4MTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwvwKrM0BpXMYfxlV/DquYKbETXl
LPWVP524ebkKfzOacv3FMLwT5No4iKc0oIHEartqwb1U3+J3KLaxSTu7WNhHa5Dn
DSrLfHdvOELnpCXhILwpKntthhisx0s3LIzmC8BQohEJLHBbuIJYD+krQ5JsLCKx
sHEj4Yj0pqIlXmdiZRoZvdVMTY6AycxNamfrFjWLY3Cg2DdB9tW4gkmn15LF5maf
Xdac0dqp3HWnW9ITTUlTCx4XYnrpAOh/mACFz97xJbKuvhzLQ3oWot3aBJ9KMCx9
v9RKanMdFgtxsB2VvfZnPRWSgMdZP348+fEJGYmDHnyHVc8KP52TRPTz/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZPpVrDPZWQnTaMGjP5U3FMEIEuMB8GA1UdIwQY
MBaAFJrq+pbJ1WPmULpZL/sG4s7raghZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXVyNmxzblZZLVpRdWxrdi13Yml6dXRxQ0ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy80NzI3NWQtNWZhNy00YmIyLTk5ZWIt
MWYwMDczN2NiMmEyLzEvbXVyNmxzblZZLVpRdWxrdi13Yml6dXRxQ0ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy80NzI3NWQtNWZhNy00YmIyLTk5ZWItMWYwMDczN2NiMmEy
LzEvbXVyNmxzblZZLVpRdWxrdi13Yml6dXRxQ0ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjYa8z9xB
H1fCSy/4b2X1W5n+7xQiEGy3WOFU1eBOfc73xXLbF4+K8HUo4Ij17wUx6xSMT/tB
bka2lSfw3j9lomKZrxDOyhYJjU/2vxNpzTdUoGUwCK5DE84Udq2M8t+4zph1mKMv
QOdYa5t2bHlQGzKMVQ799+uRyLKHcosxALy1MQJcZyO6Uj83Nye7oCKWyFWYKc/B
OsL4Sac0qK0kZ+WIZEIcIkNFNohDUdfwCSuYdDOx2nbHHwJBHAk4n8kY0qERg3iK
pYlZoE5UeSZIJthl60b1JifGDYP0W1IbtUYN3ADZpneL318QLIrwV01WOc46Xi23
+98XTb9heTxG2Q==
-----END CERTIFICATE-----
Generated at Tue Sep 29 08:34:51 2026 by rpki-client