Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
File:                     alg23em52u81qKf3TWMm9rQtp00.mft (raw, json)
Hash identifier:          jVbWYhqRCinxAirwsiWukTt67wu8Nc1KiLfNnHaP3ck=
Subject key identifier:   C7:6E:60:DA:60:88:EE:77:8D:8B:3D:C7:57:AC:C0:3E:A5:33:A0:B2
Authority key identifier: 6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D
Certificate issuer:       /CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
Certificate serial:       01A0CD10A517963BB92416827DA9837A2AB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
Manifest number:          112F
Signing time:             Wed 23 Sep 2026 07:00:14 +0000
Manifest this update:     Wed 23 Sep 2026 07:00:14 +0000
Manifest next update:     Thu 24 Sep 2026 07:00:14 +0000
Files and hashes:         1: 2wOulV0vAbQf8biJXAnQkgGArPI.roa (hash: 7hYlyThHw9PBylpjQHX2//RefihYkxx++H9IszVVhRo=)
                          2: 588PNHg6CncRbEovNSIqaa8i5LI.roa (hash: cKLcHrzYxurc879bXkmUn4CshZz0QJYPGDzoguXub1Y=)
                          3: G8BPphhm9oFoNoaDVHCDJOi1A1I.roa (hash: o25EiApUpZto47Wgp7aaZGTEkqSv5P2WX51MC5xNgcg=)
                          4: JWw_FABd9Q-ewURwU3IZ1GpRRJY.roa (hash: ZCt1hbjV0Oxdybocx7QzONRXEhTOvQ3xXy28wEkffEM=)
                          5: M0vUEBMIUgT4jDZek6CAIPYaSIg.roa (hash: PIpybvqNjJxeWjfkr7UEGiD+MMuADppLXWFHDY6S5Vc=)
                          6: MZRQk6tT-Iy_0EmbTY5ZwDElyos.roa (hash: pr7kUc7XXbghgioDyj2+ehsGl4rvR5Ny0ZhIypP6qnE=)
                          7: alg23em52u81qKf3TWMm9rQtp00.crl (hash: PH5mideJxqhmAEwnB5eUD6Ir0sXzy6p6ehIhfQ3wXuA=)
                          8: cx2hNcUqecSEJqe3n2yH1nbkzcQ.roa (hash: VM9cV3NpEOzoGjoegWLpfoVKjMdeb/qreQ0du+7oLuc=)
                          9: lbJDMqkl3r_zP_8RcjCwdgnRqqQ.roa (hash: MLj9IAZg1W5TsVOSKsUt+tjSOZpaYeIgJDEMRDXfZGo=)
                          10: mQKWGJcUH9K-JRzm__zzvh8RY30.roa (hash: kWUBDBmUmrcdRJVoYANr5CHiRnOgTYOm1wjhrADWFGE=)
                          11: mSzzMA6L5QbhcWeV8GJlOnBN0cM.roa (hash: KFpvmdmXJzfhj/vqjMViv2cspmTTL885sm48c0BNhjc=)
                          12: pcGsYQ6WmjLQ7fW-l50FaHq8fAw.roa (hash: OyCY6h+GWUv+mGKdOjMTfLCqD3xuf3tOl0/vrW+coks=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:10:a5:17:96:3b:b9:24:16:82:7d:a9:83:7a:2a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5836dde9b9daef35a8a7f74d6326f6b42da74d
        Validity
            Not Before: Sep 23 07:00:14 2026 GMT
            Not After : Sep 24 07:00:14 2026 GMT
        Subject: CN=c76e60da6088ee778d8b3dc757acc03ea533a0b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2c:df:ce:90:c1:27:e8:fb:3a:bd:39:32:81:
                    39:64:fa:26:21:e7:9c:b6:5b:b5:f3:b3:66:c3:03:
                    58:45:ab:cc:e0:3f:4d:45:f8:42:6e:16:d4:09:b2:
                    d1:04:84:9f:a1:da:2e:f2:fd:fb:2b:57:47:15:de:
                    03:5f:e2:b0:aa:ec:eb:a8:dd:14:8b:1c:50:13:93:
                    50:f7:86:db:2c:0e:e9:8c:11:17:b3:d1:02:92:ea:
                    10:86:13:2d:ae:52:18:df:40:14:5b:24:c3:23:83:
                    74:8e:9e:bf:58:3a:a0:90:71:dc:f6:27:d1:18:49:
                    59:52:07:b3:42:c5:ad:27:44:44:85:55:98:b6:0d:
                    e2:da:9a:5f:29:9c:43:e4:ef:9c:6d:c3:3e:3c:c6:
                    b3:7d:82:6d:e0:28:95:7a:0a:6e:92:30:01:4b:0d:
                    47:b8:df:04:05:37:50:93:f2:ca:99:57:6a:e9:f4:
                    9b:81:d1:f2:dc:01:45:62:f9:aa:d2:3f:e5:bb:b4:
                    85:24:da:ca:d1:37:e4:f2:bc:98:85:51:a8:7b:03:
                    9d:98:89:bb:35:62:44:54:85:ec:78:23:30:d6:a0:
                    60:53:f2:93:6f:93:09:bf:bf:37:b3:43:aa:d9:12:
                    36:63:54:90:a2:5e:bd:8d:bd:d5:d0:b7:fe:db:c7:
                    f4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6E:60:DA:60:88:EE:77:8D:8B:3D:C7:57:AC:C0:3E:A5:33:A0:B2
            X509v3 Authority Key Identifier:
                keyid:6A:58:36:DD:E9:B9:DA:EF:35:A8:A7:F7:4D:63:26:F6:B4:2D:A7:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/alg23em52u81qKf3TWMm9rQtp00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/838032-db97-497f-8c95-c19942737e6d/1/alg23em52u81qKf3TWMm9rQtp00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:04:78:1b:e1:64:3d:d8:8f:a8:d5:a8:40:70:86:e8:88:59:
         f8:1a:d3:dd:57:91:cc:dc:74:f0:8d:b1:c5:db:66:5e:29:bb:
         b4:82:70:0e:99:97:9d:75:cc:c4:bc:13:17:5b:fb:ba:24:fc:
         66:c6:b3:9a:c9:81:ed:7e:7c:60:ed:d4:bd:c8:17:10:33:63:
         e3:10:71:5c:e6:a0:e3:0d:a9:bf:e6:3a:cf:70:4b:a6:ba:54:
         89:a0:d8:c8:02:3f:d7:9d:f9:7e:95:0d:31:2e:6e:73:41:d8:
         dc:10:64:54:08:25:c6:2d:18:01:f9:a7:76:cd:d6:70:d2:07:
         aa:c1:b3:41:77:08:65:5e:07:69:12:e1:dd:ae:25:1b:14:7e:
         bd:7d:9c:d7:8d:02:86:be:fc:d9:e6:bf:9c:3e:93:9c:d5:1d:
         df:49:c0:0c:cc:21:8a:98:01:19:f2:91:24:43:3a:08:30:ae:
         41:61:ca:16:4d:e5:16:74:dc:e1:9e:19:fa:f7:42:42:42:1d:
         d9:3e:9a:7e:6c:b2:66:19:98:55:11:08:f3:e0:da:3c:fe:73:
         04:2c:f2:37:18:52:47:5e:e0:b8:93:d5:43:c9:a2:42:87:2f:
         12:5c:87:ba:09:15:7c:fb:21:e1:58:6b:39:5b:a1:0f:ec:f2:
         e6:57:d2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 18:09:46 2026 by rpki-client