Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File:                     khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier:          hJteyKhUocxvcCqMGK2Tr2K6RcWecy/gixB71v0tePo=
Subject key identifier:   E1:77:25:A4:3E:3D:8D:FC:0E:A5:4C:4C:5B:10:BA:EB:F8:C8:F0:37
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer:       /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial:       01A0C2FB14AAF145417DC69AB9E3C904FF11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number:          1A68
Signing time:             Mon 21 Sep 2026 08:00:29 +0000
Manifest this update:     Mon 21 Sep 2026 08:00:29 +0000
Manifest next update:     Tue 22 Sep 2026 08:00:29 +0000
Files and hashes:         1: MXKD9QsPykWAQJhnjjbTV1rmUg4.asa (hash: 4VmRKBZNRPbOPPVLL8bRH+4A57GG/bTgh8T9hfNi3Tk=)
                          2: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: QTNFtLLtGQpU3WBtCGcPCKrMnC2GPQrDD1xh0Xu+QXc=)
                          3: xJQowT_Tnb4ieuT2nnX57E1i8Bg.roa (hash: FZ2f/lnbWXsd7+lHlVJ1AgksXQQVTj6Vr+zQW+G3nfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fb:14:aa:f1:45:41:7d:c6:9a:b9:e3:c9:04:ff:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
        Validity
            Not Before: Sep 21 08:00:29 2026 GMT
            Not After : Sep 22 08:00:29 2026 GMT
        Subject: CN=e17725a43e3d8dfc0ea54c4c5b10baebf8c8f037
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ea:1c:16:d4:57:c6:ae:04:6e:6f:d8:19:82:
                    63:f2:43:db:55:de:17:d7:a7:46:7d:ad:4c:35:5d:
                    bc:b0:61:22:97:c3:a2:be:4a:22:33:29:2b:7a:eb:
                    c5:1e:eb:0d:95:dd:9e:12:54:d0:38:62:c3:98:38:
                    46:df:db:80:aa:a0:f4:97:ab:09:b9:57:6e:63:09:
                    48:d4:c0:9d:c8:57:83:e9:5e:a0:78:5b:c9:4c:47:
                    bf:7e:f9:33:38:98:49:19:07:45:9e:14:38:e9:61:
                    92:8f:ce:3b:a5:7f:ed:60:43:36:42:5c:5b:89:6e:
                    c0:0e:e8:11:3c:32:09:55:5b:dc:62:0a:bd:4e:48:
                    18:e7:af:f9:97:dd:04:5e:f1:b2:28:5c:3a:11:a8:
                    5f:83:22:9b:6b:07:79:79:cb:47:64:2d:66:58:30:
                    26:59:83:65:02:99:12:1a:f6:53:b8:e3:83:b5:92:
                    8a:96:dd:08:69:6c:77:e0:f7:a2:f8:c9:13:61:94:
                    63:53:b0:25:32:55:b7:02:5b:57:ee:69:93:61:9c:
                    42:2b:2d:47:62:79:0e:e9:c9:22:e1:fa:6e:32:d0:
                    67:be:0d:83:9b:13:23:a2:b8:63:ec:4a:fb:0c:84:
                    69:69:b7:c8:b1:bc:04:2e:62:9d:0a:f7:43:e8:a6:
                    7b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:77:25:A4:3E:3D:8D:FC:0E:A5:4C:4C:5B:10:BA:EB:F8:C8:F0:37
            X509v3 Authority Key Identifier:
                keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:65:a8:17:02:77:e5:a2:6e:db:95:7f:07:9d:13:9d:37:38:
         10:51:a4:5e:58:84:7a:51:00:76:b5:18:cc:fa:19:9e:da:1c:
         a6:a0:19:d7:4a:1c:ba:d5:27:28:82:bd:0d:6e:73:1c:3c:9e:
         29:07:f1:5d:8d:7e:0e:f8:3f:f1:e8:a8:0b:a4:a4:be:4a:06:
         00:39:85:bf:b0:4d:d9:38:e3:5d:b2:c5:0f:d1:23:27:92:34:
         1b:ca:da:63:a6:ef:87:82:a7:6f:78:c4:fd:60:86:72:91:d0:
         38:b9:8e:5c:db:dd:8f:2a:ce:32:30:28:da:0e:7e:6f:03:e8:
         7b:8d:d6:e0:8b:12:0d:eb:be:77:63:9e:d9:5c:94:57:cf:0e:
         bf:ba:f4:d7:b6:6b:32:a6:94:5d:e6:d1:b0:6f:e3:1d:69:4f:
         34:ce:b5:05:7a:c8:33:64:90:f0:6a:27:0a:46:04:aa:53:81:
         78:d9:65:87:66:9c:c8:fa:ab:99:1b:d2:eb:f9:ae:4f:8e:fe:
         84:80:ec:e5:80:d7:1b:dd:20:ce:8a:ed:5c:82:51:ba:ab:a5:
         ca:bb:05:dc:7d:5f:45:3d:3e:28:81:fb:7f:39:ad:cc:e6:48:
         f3:f7:85:09:81:c2:a3:7f:de:b8:01:a9:72:78:89:61:d2:da:
         fc:29:05:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----