Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
File:                     PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft (raw, json)
Hash identifier:          n4BC0V+q5plXWJXLUbq013JY2vvbG8pCXZOPcyvm1Fk=
Subject key identifier:   72:C9:E0:A3:48:3D:25:D6:0F:36:33:1A:DC:AF:19:CC:18:59:E6:31
Authority key identifier: 3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35
Certificate issuer:       /CN=3cc94ff479778651a605121f1ffe678196328f35
Certificate serial:       01A08D1F887D20A319DC7DD99E1E8CDBE888
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
Manifest number:          1A4A
Signing time:             Thu 10 Sep 2026 21:00:48 +0000
Manifest this update:     Thu 10 Sep 2026 21:00:48 +0000
Manifest next update:     Fri 11 Sep 2026 21:00:48 +0000
Files and hashes:         1: 5ApvAMni12n_Tl97hQfErFu1d6c.roa (hash: CMR/4LXkDxQdsem1khNHlRD0gmxgV2kLwB9hrxJKQb0=)
                          2: PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl (hash: JDsBHdxGcuQySmXlE3u/IlLuuBzZUTQxvRtwik81eQg=)
                          3: XuBRU-qTaIe3iIMhEcyOCN_o1WE.roa (hash: aMfF2+emhhqGrwHfGQBas1ojIcyc28sSmp2XmBjy3No=)
                          4: kq8a46tLEeqaFqiTieRfOg3LWKo.roa (hash: qYlRFmIgG79GEajldFvoiEkS/VYV56G5bugYQU8ZN5o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 21:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:1f:88:7d:20:a3:19:dc:7d:d9:9e:1e:8c:db:e8:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cc94ff479778651a605121f1ffe678196328f35
        Validity
            Not Before: Sep 10 21:00:48 2026 GMT
            Not After : Sep 11 21:00:48 2026 GMT
        Subject: CN=72c9e0a3483d25d60f36331adcaf19cc1859e631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:07:12:b8:71:63:ca:c8:2f:4c:23:32:18:9a:
                    20:08:35:83:a2:d5:e4:e5:42:90:25:96:a1:9c:31:
                    4d:fe:08:ac:e9:88:f8:a7:bc:db:9e:29:2b:00:9e:
                    a6:c9:3b:9d:13:01:2c:3e:4b:c4:74:16:52:28:40:
                    b0:32:4f:a1:45:fd:5e:71:18:8e:20:fc:cd:f1:a1:
                    5a:7e:85:1d:79:e7:a1:5c:13:13:65:e7:6b:47:2e:
                    5c:ba:19:66:c4:27:15:42:04:cd:87:99:3b:0f:0b:
                    6d:1d:41:93:db:4f:b8:0d:2e:d3:d8:5e:36:8d:32:
                    d5:20:50:3a:40:22:ee:f6:44:d5:80:76:f7:d8:ed:
                    2f:95:95:b1:3f:64:d6:13:a4:6b:53:49:f8:68:87:
                    6c:53:79:0f:4e:27:af:3f:d1:1f:7c:f3:b0:a2:31:
                    ca:d2:6e:20:b5:97:4e:b8:e8:90:5a:6a:b9:5f:cb:
                    19:08:d9:31:26:d4:f1:87:ac:6d:a8:17:ce:ab:53:
                    44:b1:55:45:61:97:a2:78:8d:17:e0:81:e3:55:25:
                    08:56:b7:7a:93:a5:d2:2e:24:07:6e:8c:48:3c:93:
                    56:a8:32:0d:88:9b:56:f0:f1:d2:6f:09:21:85:a2:
                    fd:1d:5c:eb:c2:ea:1e:0c:26:a4:d2:0a:08:81:e4:
                    d7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C9:E0:A3:48:3D:25:D6:0F:36:33:1A:DC:AF:19:CC:18:59:E6:31
            X509v3 Authority Key Identifier:
                keyid:3C:C9:4F:F4:79:77:86:51:A6:05:12:1F:1F:FE:67:81:96:32:8F:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1e63b6-3956-4d12-b19f-5bef6420a028/1/PMlP9Hl3hlGmBRIfH_5ngZYyjzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ad:15:e2:f7:5e:84:de:5f:0f:df:bc:2d:9e:cd:6a:cd:79:
         ec:3a:c7:48:2c:76:49:9a:58:05:e4:e8:89:f9:ae:de:a1:cc:
         32:1b:e5:c1:04:cc:f9:37:2b:4f:c1:be:19:4d:2e:a4:23:62:
         91:cf:6c:91:07:69:75:be:c6:ec:3a:76:3a:9a:5f:e5:a8:84:
         c5:ba:cb:d6:23:a3:d6:5b:ea:2d:70:83:0a:e2:85:ad:48:95:
         bb:5e:f1:f3:7f:65:39:d6:90:7b:1c:9e:df:c9:57:00:3e:96:
         c1:2e:d4:f0:99:2d:bc:07:c9:c8:a0:b0:fc:e8:ba:05:88:40:
         56:39:4d:e1:f6:08:dc:41:5a:a6:ee:49:ae:a6:fd:97:b6:cd:
         ee:98:3b:23:ab:3e:49:32:ba:bb:76:a7:7c:8f:ce:16:26:54:
         07:09:eb:8f:0a:13:a7:3b:61:40:65:76:a7:26:06:e6:20:29:
         49:eb:ec:70:20:e0:ce:bf:93:64:54:90:d3:34:bb:9b:55:ff:
         ee:ea:c1:cb:c6:85:aa:fa:a3:a1:f9:81:34:cb:5d:89:dc:4b:
         a7:05:28:81:48:af:8f:60:a2:e2:59:77:51:ab:0b:a3:df:2a:
         bf:d6:b4:e4:61:38:74:13:9a:22:e4:c6:9d:06:7a:96:c9:7a:
         d3:2c:18:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:31:53 2026 by rpki-client