Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
File:                     trIzPwZlc_UxbgdaAc4kkLWMauE.mft (raw, json)
Hash identifier:          BBrWaJQ2CIgwIuGkTJFZrrmfQIpk2crt6OLL+ecK3Kk=
Subject key identifier:   E4:4B:2C:D5:C4:FD:1C:87:4C:8E:17:13:93:CE:85:ED:78:4B:79:54
Authority key identifier: B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1
Certificate issuer:       /CN=b6b2333f066573f5316e075a01ce2490b58c6ae1
Certificate serial:       01A06EA7D25059655F4D06252B6A9F27861D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
Manifest number:          029F
Signing time:             Fri 04 Sep 2026 23:01:27 +0000
Manifest this update:     Fri 04 Sep 2026 23:01:27 +0000
Manifest next update:     Sat 05 Sep 2026 23:01:27 +0000
Files and hashes:         1: R53abRTy3nsePVXZ6FXqbP844c0.roa (hash: roRhMTyLNIYOGvT9vt5IgOR5P+5/7DtKqsBJYyp8XnI=)
                          2: ccTIBXpnBKiCIFP6jtkeUYvcfyU.roa (hash: RYLFC72B9dzFoQN0FlnNd+oyUoSf2vNtWKltjAP5ay0=)
                          3: dyP9HmlPNYApUiXMVkJy7vMe5z4.roa (hash: ZvC63f+lYCaC59XADOOzP040O3Hve9ZkEMDWI+F9kcM=)
                          4: loPeDfGPyDMlaIz52TWhtcsHUe8.roa (hash: eVYCTyXWXF7uzmYgmDXlX+QmiWaxF3k2ICYH5NEVWDE=)
                          5: trIzPwZlc_UxbgdaAc4kkLWMauE.crl (hash: VvbXbEf3mPCZrDOhgfs05nrTNnHYAMHwwrrLPCkIKWQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a7:d2:50:59:65:5f:4d:06:25:2b:6a:9f:27:86:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6b2333f066573f5316e075a01ce2490b58c6ae1
        Validity
            Not Before: Sep  4 23:01:27 2026 GMT
            Not After : Sep  5 23:01:27 2026 GMT
        Subject: CN=e44b2cd5c4fd1c874c8e171393ce85ed784b7954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a7:6b:0b:19:7d:f3:9c:a1:62:9c:11:b3:fc:
                    54:05:09:fc:64:df:38:d8:d6:9f:fc:3f:d9:74:de:
                    06:db:e9:af:ff:27:87:ed:4b:e4:b2:b8:00:43:3f:
                    43:9f:f3:48:b2:9b:f9:bd:aa:dd:7d:a0:59:a0:72:
                    1c:c5:5c:42:d7:93:55:d7:cf:90:4c:8d:13:7f:33:
                    2d:81:88:ad:a6:35:3e:07:40:66:c1:75:83:d3:81:
                    c2:ba:63:76:5a:c1:5f:fb:5d:78:5c:82:c4:30:7d:
                    29:67:b3:e8:f1:b7:8b:33:e6:06:48:35:61:cf:b2:
                    b4:bc:cd:1e:30:32:75:51:4d:96:fe:07:6b:16:b3:
                    c0:23:a9:c2:57:fb:31:f1:6e:28:61:1c:16:32:6c:
                    73:f9:b7:10:b0:7d:43:3f:bf:bd:84:30:16:af:dc:
                    b6:8c:16:cc:73:d7:1d:66:a7:5c:e5:c7:6f:64:72:
                    ac:d5:49:95:41:06:d4:16:7f:3d:71:0f:9e:bc:82:
                    e7:23:75:a1:41:7b:04:af:ef:4a:8c:17:13:0c:89:
                    ac:5a:1c:9e:c2:f4:f2:38:7c:e5:3c:aa:15:a3:0c:
                    21:37:0d:da:0f:85:0e:69:0f:6e:09:56:47:cc:87:
                    9b:49:ed:2d:d1:b5:a1:40:3d:cc:12:eb:29:09:71:
                    1b:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4B:2C:D5:C4:FD:1C:87:4C:8E:17:13:93:CE:85:ED:78:4B:79:54
            X509v3 Authority Key Identifier:
                keyid:B6:B2:33:3F:06:65:73:F5:31:6E:07:5A:01:CE:24:90:B5:8C:6A:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trIzPwZlc_UxbgdaAc4kkLWMauE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/5d68a2-95d3-4ddf-85f6-805170ac9c0e/1/trIzPwZlc_UxbgdaAc4kkLWMauE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:fb:79:28:0b:d1:b1:23:de:ee:6f:77:6e:b8:b1:d0:b5:60:
         69:16:8f:ac:5d:04:39:a5:dc:6f:40:da:48:c6:d0:e3:10:34:
         63:f1:3a:f7:40:53:43:2e:b1:00:54:5c:7f:c8:a1:3d:d9:2a:
         be:84:d4:ca:da:13:5b:97:52:3b:7b:99:2f:fe:53:b4:63:d7:
         fa:b2:90:b5:fb:d2:a9:3b:30:f5:ce:8a:48:dc:d7:16:7e:8e:
         cd:96:29:cc:9e:b4:96:2d:16:81:aa:fe:04:64:6b:78:c7:e5:
         de:cd:ad:a0:35:a4:42:61:7a:dc:ab:36:ae:4d:00:ad:c3:45:
         6c:6e:cd:da:3e:f0:e2:f0:1d:af:0b:77:e1:ce:37:89:c2:90:
         4a:e9:62:2a:65:df:49:a9:49:8f:3c:9c:36:ad:82:4c:5f:74:
         d0:78:a8:32:af:4f:93:1c:47:57:20:15:88:15:79:a0:1a:b6:
         28:b4:8f:3f:8d:bb:7c:7f:7f:d3:9d:ae:60:e7:56:9c:ab:0c:
         0e:d5:8c:e8:c6:2d:e9:44:9a:5b:3a:f4:3d:46:76:80:0d:e8:
         de:3d:06:34:65:24:ab:90:3f:2d:88:16:26:d1:b9:40:93:e9:
         7c:50:73:12:2c:c8:d0:5d:2c:38:1e:66:31:a2:2e:0c:b9:8a:
         0b:be:6b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:09:45 2026 by rpki-client