Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
File:                     g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft (raw, json)
Hash identifier:          3anu2dzcsVa/Lo0y5PirMEf8b2Y2BNwc4gCXoQxq61o=
Subject key identifier:   72:BE:90:8F:AB:87:26:74:98:0C:50:CF:3D:A6:9C:FB:A4:87:86:3B
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Certificate issuer:       /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial:       01A0EB5311D2B0637CC4036DAF9D91547343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
Manifest number:          1AA1
Signing time:             Tue 29 Sep 2026 04:01:24 +0000
Manifest this update:     Tue 29 Sep 2026 04:01:24 +0000
Manifest next update:     Wed 30 Sep 2026 04:01:24 +0000
Files and hashes:         1: 1--JUDppRbu7T0stV0TMFX_JdJqk.roa (hash: 7ElxaU2FrJVBWuFjmaI5WPADPHQpzQarn/tOamW8ol4=)
                          2: 2a_uy4DA086BpyZucBJ1RKLvGB0.asa (hash: WXt1+GiMi8yguUv71CdSXteV8ij1KFQD4MWVZRlVGGo=)
                          3: F6V95NvKIPnP0tmYoAEtHc-x5Bc.asa (hash: 5EJJJJTtBq0BMEfKnD57LEly92Ux1IDLT80gLRVXa+s=)
                          4: GvIMpzg1BrWyJZnNUgc-c9Cv_wE.roa (hash: QqPKk6SddSUzOWwAEp4MtmTKN+FX4BL1RGH8TdopCcU=)
                          5: Hxy4OYK276xESCf3Anb_fwGbVFA.roa (hash: OEZqLe2GA3/g06uklHFF+Qr+gAumMT+wNuHWtE1vS0I=)
                          6: MywVTrCitZ0jjbFx7Ww-pldZ2-E.roa (hash: 3AQWbOwtzZshqM3V2nv18YVl7dRi4sEO32WjYpoQrG8=)
                          7: P5DeZi-NZPhI3zAbu6P2URQXDh0.roa (hash: 3xwHLPA2O8drb+zjl4yg8vS/CGvVdoGiWmy4gUvfoNs=)
                          8: PvOMcu6kkYu1VaD3XwX_1ePatyY.roa (hash: FOWoO0sh/7LnR+o/5+ENcU9IVroksYKfAOK89ZHzs8M=)
                          9: XUgse1SVG2LYV88Lp4UVNGgo6_8.roa (hash: g7ViDtzqv8KPcw50VAZhPz4xcsCIQITUrXQJTHZp81Q=)
                          10: dID3LhBrOI7h-JjxBCDXGS6Ka90.roa (hash: Rx7lZVpO1Kcn3Rd9uI0ZIiOCJf4fpdx1CaamZMAapoY=)
                          11: g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl (hash: 37+hVWAXtpDtKK/sgI5ISAbN6CtvT0Wn1hxJEtRal/w=)
                          12: h4qnmgZvvV6hazj9Xn7cghOv6uI.roa (hash: vjv4+ammuobmFm2l5IQ69DMODD0qU4CxTRycj23fFCA=)
                          13: jPosKpC4jbWbnigp_N_xbEGwtdU.roa (hash: PKivQvn7H0k9WsK5zKGzhI4jllClxyjJNOUB8aA/6s0=)
                          14: nfSZBgblqY4hDbV-RAcbJ9qyUpc.roa (hash: 8ijpB21chkCGF/aduPmL2pt7xjwG/XOf0XxCs4lLVxo=)
                          15: nyYCtMbd7TZK8VqIfB53aS7KNLs.asa (hash: BqapecHd3LVpjtUiBcf/9yimCcVOdhG5vEebX7N6HDE=)
                          16: o5BKntmZ9JtZu-kMInHB78iso3o.roa (hash: y3nwxUjTAtP6jlMnZQwlOLiitgv+xb6KltP0aX7WOCQ=)
                          17: tjzdvWQXGyuZr6RYVMx1Yjk9et4.roa (hash: E99Roql1GDYJZd5vONjmCjCyvJPv3bXeRSYT36UiYFk=)
                          18: vc3_2HwZU1b1IDix6yqY246HGsI.roa (hash: C2RwLxlNEFwKzGr5sfPtGfDi2mMkvqCKZMvxOHJKA+M=)
                          19: yhnCcvMGfFoTZMf1oJ6P5sYzLfg.roa (hash: mwt4irHC6GhVnuZ5Xr0w1wBWRdsXBhU6yRY/gWgSeJE=)
                          20: z657-juX3He43lAQRFdSrUowMuA.roa (hash: cF2Zd6GwGD3rF8S9m/D0s5xLKX+lYpS93npMzrcgzIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:eb:53:11:d2:b0:63:7c:c4:03:6d:af:9d:91:54:73:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
        Validity
            Not Before: Sep 29 04:01:24 2026 GMT
            Not After : Sep 30 04:01:24 2026 GMT
        Subject: CN=72be908fab872674980c50cf3da69cfba487863b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2d:10:81:7f:01:6b:4f:43:42:a6:80:ac:71:
                    c1:1a:eb:a9:5d:aa:de:ad:1d:d6:6c:63:5b:62:a0:
                    d9:6e:a3:ab:8a:5f:64:a1:e1:50:89:2b:5b:54:04:
                    41:3b:f4:bc:82:c0:78:ea:2f:19:89:92:7c:bb:68:
                    38:ba:52:3b:a1:4a:9c:6e:a7:90:aa:f0:ff:37:bf:
                    eb:6c:1b:20:c9:cd:de:7a:9d:c5:2c:93:d6:93:a2:
                    62:e6:56:2a:bb:5b:90:9a:a3:8c:b8:f2:ae:de:ef:
                    d3:30:da:78:8e:9e:9e:15:c2:16:be:c5:34:cb:76:
                    b0:f8:dd:ff:5e:dd:15:1d:35:62:b6:94:3c:e5:17:
                    05:58:b4:1c:8f:3f:3c:cc:4b:7b:1c:9f:68:f6:1d:
                    cd:0a:57:f1:6c:db:c5:11:da:19:12:6b:51:7d:68:
                    bf:0c:30:43:1b:37:9d:ea:59:a2:61:63:06:22:6c:
                    b0:ae:a6:64:ef:97:4e:58:b6:c4:1e:2d:a6:8a:cc:
                    df:67:79:96:14:b7:49:ed:d7:3f:a6:c2:2d:75:19:
                    06:41:0b:e0:64:ac:d6:af:ef:47:fc:89:4c:58:65:
                    4a:49:1b:35:e4:63:40:d7:11:ba:11:3b:52:30:b4:
                    87:fb:ff:7a:78:4f:16:d3:34:09:d4:02:21:9d:c7:
                    c0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BE:90:8F:AB:87:26:74:98:0C:50:CF:3D:A6:9C:FB:A4:87:86:3B
            X509v3 Authority Key Identifier:
                keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:a3:e7:74:d0:eb:98:f8:96:a3:5c:92:a8:59:11:53:0f:d7:
         51:8a:a6:67:90:03:c9:65:a1:d8:b4:4e:a3:28:00:28:68:c3:
         8c:b8:a9:36:33:18:c5:06:61:0d:2a:ae:f0:b2:3b:7c:00:e0:
         a4:8a:2f:90:fe:4d:09:0d:e8:3b:14:ad:02:8f:53:2e:75:dc:
         48:90:5f:4a:86:03:0e:0e:35:f8:5c:62:3b:b3:67:c6:aa:67:
         a7:3d:75:6c:23:0e:f9:c0:ca:e3:e2:65:2c:d2:eb:1d:eb:a8:
         25:da:c5:10:c6:cc:97:39:0b:08:58:1e:0b:cf:12:a5:75:1a:
         ac:b0:52:13:12:24:09:6f:57:61:4d:dd:9f:9b:6d:2a:50:94:
         1e:02:3e:be:46:f5:a5:67:8b:fe:81:20:fb:f0:aa:71:df:37:
         1b:be:7a:0b:68:fb:21:a5:33:49:25:6d:4f:06:df:c6:93:47:
         b1:c5:b7:c0:07:1a:63:3e:cd:30:4e:ee:3d:a0:a9:1c:01:44:
         0a:c5:d4:a6:25:dc:51:67:0d:77:59:80:03:54:d8:f9:54:48:
         96:09:08:fe:b9:e4:5e:22:2a:a3:3e:67:52:f6:77:bb:07:df:
         c4:36:28:bb:75:d1:a2:95:d1:82:82:61:17:46:73:18:f1:de:
         09:e9:3d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:21:11 2026 by rpki-client