Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.mft
File:                     RACrbRbCQdJkectXvk11NNdirGQ.mft (raw, json)
Hash identifier:          2yEngBLs21rskUyhTeyaCnGoVAunZRFajaQ5CWHv3pQ=
Subject key identifier:   F7:03:C1:2E:F4:E9:3D:41:99:FA:C7:83:D8:A5:31:40:E0:EC:E6:2B
Authority key identifier: 44:00:AB:6D:16:C2:41:D2:64:79:CB:57:BE:4D:75:34:D7:62:AC:64
Certificate issuer:       /CN=4400ab6d16c241d26479cb57be4d7534d762ac64
Certificate serial:       01A08A8D4B803DFB1F5C7C85AB0AB79409FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RACrbRbCQdJkectXvk11NNdirGQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.mft
Manifest number:          C1
Signing time:             Thu 10 Sep 2026 09:01:50 +0000
Manifest this update:     Thu 10 Sep 2026 09:01:50 +0000
Manifest next update:     Fri 11 Sep 2026 09:01:50 +0000
Files and hashes:         1: RACrbRbCQdJkectXvk11NNdirGQ.crl (hash: D6+XGVcdEHYQZdz2y2c+28laTuzxUHI/Oe/Flov5/78=)
                          2: m5gb-w9518gstz9yjRIAUkSRK_c.roa (hash: IVTdJ1T0IcnTvVeugDeWJR+5AmWQzeWUIlOuu0Rzbp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RACrbRbCQdJkectXvk11NNdirGQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8d:4b:80:3d:fb:1f:5c:7c:85:ab:0a:b7:94:09:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4400ab6d16c241d26479cb57be4d7534d762ac64
        Validity
            Not Before: Sep 10 09:01:50 2026 GMT
            Not After : Sep 11 09:01:50 2026 GMT
        Subject: CN=f703c12ef4e93d4199fac783d8a53140e0ece62b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ec:1d:bd:9f:8c:a0:3e:8e:f7:6e:74:4f:a8:
                    cb:2c:f8:c0:c5:3c:ef:a9:92:40:bb:76:6a:38:91:
                    46:4a:2b:b6:70:8a:ed:76:0b:06:2c:d1:2d:76:10:
                    a8:b2:3f:33:08:a5:dd:37:bd:6a:c9:89:df:d1:ed:
                    ca:04:e2:d0:d5:4f:2b:d2:79:cb:60:7e:f3:34:db:
                    5c:46:86:b8:b7:b3:cb:7e:01:3d:e8:dc:c6:a1:02:
                    26:f7:83:f5:fc:55:14:0f:30:05:4b:46:cd:05:8c:
                    d8:cf:f2:5f:e9:10:30:15:12:b5:1c:09:55:ac:f9:
                    3c:0e:48:93:38:d9:41:21:95:31:4b:ed:f4:d2:d5:
                    87:48:52:16:22:9b:23:44:9d:54:79:86:cb:04:1e:
                    fc:57:86:a2:18:75:08:33:40:a2:09:c6:cd:e8:7a:
                    5e:62:a6:0c:df:8c:df:d4:21:34:a0:4b:49:0d:97:
                    0f:43:20:a8:9f:0a:92:10:6b:83:36:64:0c:f8:54:
                    17:52:70:2f:73:53:22:b0:c0:a8:d8:f6:4f:a6:e3:
                    be:8f:26:9f:b9:4b:10:e9:af:cd:47:6e:3a:66:67:
                    87:11:4e:44:9f:e8:15:f1:22:03:4a:0f:14:e1:f2:
                    75:20:ba:c9:6d:c9:c3:a7:2c:14:08:68:d0:b9:3b:
                    1b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:03:C1:2E:F4:E9:3D:41:99:FA:C7:83:D8:A5:31:40:E0:EC:E6:2B
            X509v3 Authority Key Identifier:
                keyid:44:00:AB:6D:16:C2:41:D2:64:79:CB:57:BE:4D:75:34:D7:62:AC:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RACrbRbCQdJkectXvk11NNdirGQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/RACrbRbCQdJkectXvk11NNdirGQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:53:2d:b2:0f:56:dc:9c:cc:dd:8b:33:c1:d9:f2:dc:c3:12:
         ab:5c:e3:5a:61:77:09:e5:71:d9:d4:b1:9d:23:01:11:60:20:
         c2:2c:bf:18:00:ea:ee:58:ab:36:1a:43:1b:47:2f:01:a3:53:
         d0:e1:29:8c:9f:1c:e1:a7:0c:d3:16:c2:ef:68:70:bf:66:7b:
         79:82:f3:fc:84:a4:a9:58:b5:ec:02:a9:13:fa:66:06:08:09:
         95:9d:eb:58:46:3e:ee:91:e0:a2:ec:5e:f7:06:4f:7d:44:e8:
         ae:f8:b5:3e:3f:91:5b:80:88:d7:df:b8:aa:67:77:08:57:43:
         92:22:2b:2b:47:44:ca:6f:3e:4e:c5:a5:d8:55:ce:81:2d:8f:
         e4:e0:4c:62:a8:3e:11:1b:91:b4:13:4f:7f:6e:31:12:77:ef:
         e8:36:2a:8d:28:61:a9:aa:f8:3f:5a:48:2a:00:b0:d2:61:23:
         69:63:4c:ab:5f:91:73:87:99:5a:50:bd:0f:80:5b:59:83:5a:
         0e:4e:c1:06:f6:d3:9e:fe:e1:07:e3:9e:2c:cf:9b:98:78:b2:
         64:ff:1e:e2:0a:25:08:d5:a2:c8:89:6e:dd:91:db:1b:9b:d8:
         d3:8e:bc:f4:4f:0c:21:4d:1a:36:6b:c8:cc:ca:25:07:0e:4a:
         68:47:3d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:27:52 2026 by rpki-client