Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/6f6b96-b8b7-49f4-8c85-6a52c11d27a5/1/ICoyH4Z67vcQ-5zL4TWiiQJz8HI.mft
File:                     ICoyH4Z67vcQ-5zL4TWiiQJz8HI.mft (raw, json)
Hash identifier:          3LoArpKXX1k9xodLVHGEcqV6iP/2il30LpvpuU24l6U=
Subject key identifier:   3D:C9:37:F8:48:4C:C1:66:1F:AE:DD:66:FC:73:EC:EF:CF:41:3D:62
Authority key identifier: 20:2A:32:1F:86:7A:EE:F7:10:FB:9C:CB:E1:35:A2:89:02:73:F0:72
Certificate issuer:       /CN=202a321f867aeef710fb9ccbe135a2890273f072
Certificate serial:       01A0B31A729CFA67B0990D0F2D6DCB21B111
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ICoyH4Z67vcQ-5zL4TWiiQJz8HI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/6f6b96-b8b7-49f4-8c85-6a52c11d27a5/1/ICoyH4Z67vcQ-5zL4TWiiQJz8HI.mft
Manifest number:          015D
Signing time:             Fri 18 Sep 2026 06:00:49 +0000
Manifest this update:     Fri 18 Sep 2026 06:00:49 +0000
Manifest next update:     Sat 19 Sep 2026 06:00:49 +0000
Files and hashes:         1: ICoyH4Z67vcQ-5zL4TWiiQJz8HI.crl (hash: XvD7kedYM79rRaHxY+usdqI3FfCEU+zDAcUTHD+Txcw=)
                          2: WcvGmVBQh07jSf5jDrMVsS6ZHpc.roa (hash: X051kpS+ioibrLfUT13OB2q4ttAQvXZO/Na1WKpoa5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/6f6b96-b8b7-49f4-8c85-6a52c11d27a5/1/ICoyH4Z67vcQ-5zL4TWiiQJz8HI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/6f6b96-b8b7-49f4-8c85-6a52c11d27a5/1/ICoyH4Z67vcQ-5zL4TWiiQJz8HI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ICoyH4Z67vcQ-5zL4TWiiQJz8HI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 06:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b3:1a:72:9c:fa:67:b0:99:0d:0f:2d:6d:cb:21:b1:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202a321f867aeef710fb9ccbe135a2890273f072
        Validity
            Not Before: Sep 18 06:00:49 2026 GMT
            Not After : Sep 19 06:00:49 2026 GMT
        Subject: CN=3dc937f8484cc1661faedd66fc73ecefcf413d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9c:a4:4c:21:7f:bd:13:2d:a9:51:b9:1a:fe:
                    bf:40:a7:65:78:a3:b9:b8:85:bf:7d:67:09:5d:49:
                    c0:ab:8e:41:5b:0f:bc:2f:2b:49:bf:e5:5e:34:32:
                    cf:15:25:83:ed:7c:f3:3c:b4:79:e6:ed:44:42:04:
                    8a:2d:5e:b7:47:98:9b:62:f3:77:ca:96:a4:b1:8d:
                    9a:8a:5f:c5:97:29:b8:dd:6f:5d:2f:c7:5d:e5:36:
                    f4:48:42:df:d5:7e:8b:ff:6f:ab:66:6b:10:88:12:
                    68:41:a7:85:90:69:56:cd:5c:51:15:39:94:da:1a:
                    7a:97:e3:2a:74:79:41:6b:cc:05:fc:d7:2c:9f:41:
                    a0:d6:3d:ab:c3:77:79:ad:5a:45:c0:4a:6d:54:19:
                    a2:61:85:cd:aa:a0:bc:24:94:12:93:c4:62:f0:6b:
                    fb:b8:df:c7:50:82:e2:0e:25:d9:16:23:35:07:e0:
                    19:49:31:09:d1:97:e9:46:ec:48:91:91:96:08:94:
                    51:8c:25:85:67:69:e9:f6:e3:5f:e2:53:6c:84:b2:
                    ff:f0:72:b6:fa:e1:73:a8:2d:4a:24:f6:f5:76:d0:
                    05:30:66:b4:65:4c:99:b4:f9:2c:00:ea:7c:a9:18:
                    63:e6:78:b4:13:e0:29:9b:0a:15:91:60:91:4f:a7:
                    fc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C9:37:F8:48:4C:C1:66:1F:AE:DD:66:FC:73:EC:EF:CF:41:3D:62
            X509v3 Authority Key Identifier:
                keyid:20:2A:32:1F:86:7A:EE:F7:10:FB:9C:CB:E1:35:A2:89:02:73:F0:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ICoyH4Z67vcQ-5zL4TWiiQJz8HI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f6b96-b8b7-49f4-8c85-6a52c11d27a5/1/ICoyH4Z67vcQ-5zL4TWiiQJz8HI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f6b96-b8b7-49f4-8c85-6a52c11d27a5/1/ICoyH4Z67vcQ-5zL4TWiiQJz8HI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:7b:c3:aa:f1:86:7f:09:fa:a7:85:65:0f:18:d5:5a:96:41:
         ee:09:bd:23:b8:d3:e3:b1:ea:4d:14:11:07:40:3e:fb:a4:3a:
         80:f8:78:8c:cc:2a:09:38:2b:6f:77:68:e9:2a:d4:cf:5f:9d:
         d8:81:15:cb:36:b9:08:96:91:82:3e:6a:71:f5:cd:f0:34:bf:
         2a:32:f1:7e:72:5b:2c:5b:e8:c3:f6:cf:7c:f5:4d:a9:a7:14:
         88:cb:bd:a3:af:a0:d5:e5:c9:69:11:0f:8c:96:5a:bb:1a:1a:
         5c:7f:09:7d:e3:fb:c7:b1:31:fc:4a:8d:59:93:09:29:09:7d:
         a7:6b:c9:b3:d7:35:1d:91:b7:d0:66:ad:95:d0:22:58:4a:3d:
         b9:c1:55:7f:bd:2c:8f:bc:5b:b1:27:0f:ba:27:fa:fc:25:2a:
         2d:c8:fb:0d:f7:da:f2:6e:22:eb:70:e4:19:3f:fb:0a:25:67:
         a1:c2:26:b7:12:8a:87:2e:be:c0:c1:1e:ff:72:ab:30:37:b3:
         2a:36:45:a1:f6:8b:da:93:22:b7:f9:b9:52:43:3c:8e:e8:15:
         ea:7c:76:2c:ca:0d:8d:ac:19:58:83:1b:b3:32:d4:2c:0a:f3:
         eb:fd:89:fe:37:1a:b8:50:75:cd:ca:1e:02:a8:fe:22:2d:e0:
         df:3d:a0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 10:01:43 2026 by rpki-client