Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File:                     hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier:          V/Aun4gbwYlFxuc4XjqPQ0+iSeReG6+ArxL4gps03rQ=
Subject key identifier:   18:09:17:9A:65:CC:93:E2:17:E1:30:47:78:87:08:C3:40:80:03:2E
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer:       /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial:       01A08E69664D5C16C3AFD1295759F854A9C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number:          178A
Signing time:             Fri 11 Sep 2026 03:01:07 +0000
Manifest this update:     Fri 11 Sep 2026 03:01:07 +0000
Manifest next update:     Sat 12 Sep 2026 03:01:07 +0000
Files and hashes:         1: 1-3Gcx58fzra_v9eEZ6N_xRMnk-U.roa (hash: LxQsMlE6dccDgJVSFe4kQrNckGUI9bmtbjF5OIYdtrs=)
                          2: 4KN1agjGCetNojWRsDbUJbjhQKs.roa (hash: yTfVhH1Hf4jYfP2TiWx0oinRMtZ2QHu/x1BdH7OqRl0=)
                          3: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: iQzXUf5fe4rO6rj+x+YWbM28WY3R6VSwOHEr5SCJ0Bw=)
                          4: yyn2geOIU_--UUnG8pkuvnJsDpQ.roa (hash: bxmnlrGKd567WF+3ZEEy2gfmdqW2wGXYEodGeY8tXEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:69:66:4d:5c:16:c3:af:d1:29:57:59:f8:54:a9:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
        Validity
            Not Before: Sep 11 03:01:07 2026 GMT
            Not After : Sep 12 03:01:07 2026 GMT
        Subject: CN=1809179a65cc93e217e13047788708c34080032e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:39:51:a0:ca:88:8d:51:38:3f:a2:f0:4c:
                    80:30:05:b9:e3:64:57:7e:c6:5f:3f:61:f8:22:d8:
                    b4:ae:71:56:a9:72:74:53:5c:74:32:6d:a4:de:77:
                    63:7d:9b:e7:9c:34:61:18:37:b0:77:4a:0f:4a:86:
                    38:b6:66:2c:74:69:60:27:ee:09:0d:63:fb:3c:10:
                    04:9a:7f:3d:1f:48:67:27:f5:c2:21:3a:7d:20:77:
                    68:35:0c:d5:0d:00:e2:94:73:22:8f:8e:eb:15:df:
                    7f:68:8a:c9:fe:ee:10:f8:7f:a3:88:34:c8:d4:0a:
                    b2:9f:23:4f:b1:1a:0c:c5:9e:0f:e8:9f:38:4c:18:
                    7d:4a:68:b5:cc:38:8f:07:e1:a7:a7:d5:47:df:3d:
                    33:76:07:2f:0b:63:8d:ca:26:7a:49:33:fd:e2:b8:
                    74:83:d0:2c:5f:04:c3:ff:db:82:bd:fd:67:ba:cf:
                    da:0e:a1:01:55:c7:6e:a7:ee:a8:31:72:71:5c:73:
                    00:58:fc:5a:b6:6b:c0:27:c3:51:cc:4b:32:b2:34:
                    52:f9:29:ee:10:6b:b5:9f:a5:8d:f9:cd:0b:ae:b0:
                    aa:5e:a2:25:08:9c:e5:37:77:33:38:0b:24:d4:ed:
                    79:c1:71:4c:0b:db:b5:36:56:03:1a:aa:bf:70:08:
                    45:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:09:17:9A:65:CC:93:E2:17:E1:30:47:78:87:08:C3:40:80:03:2E
            X509v3 Authority Key Identifier:
                keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:87:4f:35:1a:c2:bc:7e:7b:94:aa:76:f7:4b:24:71:c9:fa:
         e7:93:da:7d:54:95:35:ef:0f:0e:18:a1:47:f8:8c:8d:9d:28:
         0f:5c:ab:b0:1e:29:77:38:d1:91:3d:9c:9d:5c:15:c5:1b:b7:
         ea:d1:e0:29:4c:62:4e:6f:aa:f5:28:f0:31:38:f5:6b:59:16:
         82:fc:ed:96:83:02:40:a7:53:89:78:69:5b:3f:74:d9:6c:78:
         02:c0:72:83:c3:81:41:23:ca:09:cd:9e:37:5f:bf:80:19:69:
         36:4a:72:05:e7:aa:72:99:f3:f5:01:88:b1:d1:47:a6:e6:de:
         0c:75:6a:26:e2:e2:1b:80:ce:8c:d6:58:fa:33:a8:ea:81:ad:
         e5:26:0b:28:08:22:0c:04:17:b4:d2:91:d3:0e:72:ad:b3:20:
         e6:55:ef:ce:a1:66:34:9e:d2:90:21:91:7e:9a:b8:3a:bd:32:
         a4:16:1c:05:24:64:56:97:78:ff:3f:ec:45:7c:b0:d4:bb:da:
         84:ed:cc:4e:7d:36:b0:38:6e:a7:ab:b1:8b:9a:2c:80:da:4c:
         26:74:73:c6:59:84:7e:b8:57:60:6b:d6:87:28:d3:a3:93:ba:
         12:e6:3d:9c:bb:ef:c0:40:60:10:08:c5:73:85:47:d7:de:2e:
         b3:10:30:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:53:01 2026 by rpki-client