Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
File:                     g9zjc8GLlAqXg5CycnACebMv7jo.mft (raw, json)
Hash identifier:          Yf8YWaVQXLDTNptkdtbshBWAjtiSIwCS8Tq/KnFa+IE=
Subject key identifier:   C1:BC:A9:6E:94:F4:A2:4C:5A:71:76:17:08:8F:BE:7C:88:1B:54:0D
Authority key identifier: 83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A
Certificate issuer:       /CN=83dce373c18b940a978390b272700279b32fee3a
Certificate serial:       01A127D53775E1791BF87DD6CB36EF6EB3D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
Manifest number:          1A9B
Signing time:             Sat 10 Oct 2026 22:00:46 +0000
Manifest this update:     Sat 10 Oct 2026 22:00:46 +0000
Manifest next update:     Sun 11 Oct 2026 22:00:46 +0000
Files and hashes:         1: e9eDn1it9NdIiHqx44a7i4SS4xg.roa (hash: D0mw6gNgZUzu18/xmTgF0h13ejYJeMIRk7OFNvDQw/g=)
                          2: g9zjc8GLlAqXg5CycnACebMv7jo.crl (hash: wvFlDzmq+Jn2ATAZ0elxGDwaZNcryFTQyuRkWucjXak=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:27:d5:37:75:e1:79:1b:f8:7d:d6:cb:36:ef:6e:b3:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83dce373c18b940a978390b272700279b32fee3a
        Validity
            Not Before: Oct 10 22:00:46 2026 GMT
            Not After : Oct 11 22:00:46 2026 GMT
        Subject: CN=c1bca96e94f4a24c5a717617088fbe7c881b540d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:19:cb:08:68:da:51:7e:7a:6f:6d:e9:bf:b4:
                    09:08:2f:5b:8d:78:57:dd:91:2a:ea:27:b7:45:f7:
                    ca:89:16:ba:b6:07:e8:3a:6e:9a:3f:86:e5:ba:5c:
                    85:d1:37:43:2d:7e:9c:60:bc:77:58:53:87:ef:5d:
                    f7:70:3c:b9:a1:88:cb:1f:1f:8f:e3:bd:7c:a2:ed:
                    f1:f1:ea:36:69:8a:9b:7e:b2:e2:13:93:bf:14:d6:
                    06:da:84:17:14:98:d2:d1:6a:62:dc:0e:4a:1e:c4:
                    1d:0f:58:2e:13:b0:7f:2e:23:17:0b:cb:11:f5:2a:
                    2b:31:24:07:e4:cf:3c:f7:87:33:78:68:40:34:6f:
                    e8:de:49:85:00:66:fe:6d:97:fe:db:1a:10:f4:b6:
                    f3:63:0c:c0:ed:5d:36:b1:28:c7:1c:29:f3:20:8d:
                    7f:d4:36:af:53:db:65:05:fe:57:4e:e4:57:c7:3a:
                    8c:9c:63:99:d8:aa:e5:d0:d4:3e:11:e7:04:b6:d0:
                    ef:49:6f:3a:54:96:cd:ec:32:d1:b8:9f:7d:86:e5:
                    39:14:78:d5:69:bc:8f:69:d4:53:32:1e:b3:34:4f:
                    cc:0e:b4:64:a4:b6:bd:cb:c0:ed:31:7a:0a:31:b4:
                    7a:6d:a7:6f:15:eb:0c:4d:28:bb:4a:3d:b4:a4:76:
                    a8:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BC:A9:6E:94:F4:A2:4C:5A:71:76:17:08:8F:BE:7C:88:1B:54:0D
            X509v3 Authority Key Identifier:
                keyid:83:DC:E3:73:C1:8B:94:0A:97:83:90:B2:72:70:02:79:B3:2F:EE:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g9zjc8GLlAqXg5CycnACebMv7jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/48157e-d4f8-4f2d-b96d-2d6d56d9ff4e/1/g9zjc8GLlAqXg5CycnACebMv7jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:ca:16:a3:7e:7e:b0:50:27:aa:90:41:91:4f:5f:75:59:9e:
         fe:db:a3:c8:6e:bb:2c:e2:95:4c:11:e6:ec:b8:37:79:47:86:
         94:1a:e2:c6:5c:ac:79:7a:e4:71:ca:e7:33:d8:be:1c:e9:f3:
         28:b1:c4:13:ab:cf:ac:bb:dd:10:2a:67:41:34:a3:a6:7d:47:
         8c:b5:1e:47:fb:de:8b:ca:c9:76:f1:65:a6:a7:b0:2a:ed:ef:
         35:51:e1:29:d2:35:80:56:41:92:fb:84:38:58:88:3c:eb:bd:
         aa:da:4d:3f:25:9a:7b:e2:27:05:fa:75:ce:99:bf:8a:33:c2:
         fa:a9:f3:6c:87:50:70:1c:01:51:14:f7:78:cc:d2:0c:43:84:
         8d:51:d0:b9:e9:b1:18:b1:3b:c5:b2:a1:7a:0c:cb:b0:62:be:
         d9:6a:c3:9b:7e:12:35:00:bb:73:c0:55:57:f4:0f:3d:e2:08:
         de:f6:bc:78:23:af:b5:72:51:8c:60:ea:c4:b1:95:c5:29:d0:
         12:a1:e9:91:67:c6:47:b3:8a:61:d1:f9:de:0e:0e:fe:65:09:
         ab:4f:1f:e8:67:48:bd:84:23:ab:4f:8c:cb:6b:53:3e:5f:71:
         28:25:c6:e8:d8:b9:45:e3:c7:45:c2:2b:cd:16:ee:73:c3:d7:
         99:2a:f4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 07:19:16 2026 by rpki-client