Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
File:                     kY9WbI_5USpXSMwUifCTXCXYxKs.mft (raw, json)
Hash identifier:          OgN39DCIsl+asyW61hZfmvJh1/vWSKdDqrN4rxKerWg=
Subject key identifier:   2B:02:EE:7A:34:CD:42:25:0E:78:BD:B5:D5:31:F1:71:25:81:0E:0F
Authority key identifier: 91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB
Certificate issuer:       /CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
Certificate serial:       01A08979CDDF5C9D104B0628517E9A940B59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
Manifest number:          04D6
Signing time:             Thu 10 Sep 2026 04:00:55 +0000
Manifest this update:     Thu 10 Sep 2026 04:00:55 +0000
Manifest next update:     Fri 11 Sep 2026 04:00:55 +0000
Files and hashes:         1: 2gUkVkvBn7Q1vmsW6vZYesIru3E.roa (hash: 3mugJDdnEmraVaKho4WrwncKKVb68YhcTwc6RXDfj/k=)
                          2: kY9WbI_5USpXSMwUifCTXCXYxKs.crl (hash: +Fc0/+1MJhmSeBhJiF6h3ywrFF9v6XZN+kvRhIeJUMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:79:cd:df:5c:9d:10:4b:06:28:51:7e:9a:94:0b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=918f566c8ff9512a5748cc1489f0935c25d8c4ab
        Validity
            Not Before: Sep 10 04:00:55 2026 GMT
            Not After : Sep 11 04:00:55 2026 GMT
        Subject: CN=2b02ee7a34cd42250e78bdb5d531f17125810e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8d:39:56:d2:3c:ed:b1:38:e0:0b:50:e1:bf:
                    0d:30:43:f9:2c:a2:39:18:da:67:00:3e:64:e2:2d:
                    19:23:85:ce:c6:91:d7:87:60:e6:68:fd:b8:46:47:
                    69:28:fc:03:00:24:5c:9b:6b:38:aa:6d:28:fb:88:
                    f1:2f:72:c3:df:b9:2d:94:6b:93:b6:aa:5a:19:31:
                    3a:61:3e:0e:88:ee:d2:c4:a7:09:4c:df:1f:58:54:
                    84:ac:a1:01:f7:99:a8:ad:6b:54:97:cb:a9:28:bb:
                    ba:ae:4a:33:80:98:71:f8:c0:8b:ed:eb:74:fa:ea:
                    f6:7c:6e:a8:79:9f:15:ac:90:62:2f:3b:c8:f6:a8:
                    1b:ea:3f:48:17:a5:5b:9c:77:0b:e9:b7:fd:73:95:
                    0c:d9:63:14:06:10:50:7a:42:c9:ae:28:aa:af:c5:
                    ed:37:d6:c6:cf:be:40:2b:4b:b2:b6:03:76:ab:e2:
                    0e:f2:80:54:bd:68:d3:e6:bc:74:73:c9:af:56:18:
                    6e:38:05:60:a3:15:06:c9:eb:81:43:b3:90:36:92:
                    68:af:cd:d8:51:cc:db:dc:9a:39:1d:c0:44:2a:bf:
                    cc:39:7a:bb:6b:66:f8:dd:9c:ad:9d:79:bb:36:79:
                    96:b0:18:ac:3b:a4:a4:26:3c:9d:3b:6e:43:ff:10:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:02:EE:7A:34:CD:42:25:0E:78:BD:B5:D5:31:F1:71:25:81:0E:0F
            X509v3 Authority Key Identifier:
                keyid:91:8F:56:6C:8F:F9:51:2A:57:48:CC:14:89:F0:93:5C:25:D8:C4:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kY9WbI_5USpXSMwUifCTXCXYxKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5a58cc-f9fe-49e6-bb8a-a5f11bc35f31/1/kY9WbI_5USpXSMwUifCTXCXYxKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:9b:f8:57:5c:e7:84:97:70:7a:15:37:1c:33:5c:be:00:39:
         14:25:33:9a:b3:8c:99:8e:82:21:e8:50:d5:62:bb:7d:2c:f4:
         63:5d:d6:85:d1:7b:29:09:cf:d6:27:ee:37:82:39:29:b7:4a:
         37:e9:b8:81:46:05:4d:f9:73:b9:12:8d:f0:8d:11:86:bb:6b:
         a2:98:b9:cb:ea:ac:3a:4c:97:6d:48:f0:6b:57:03:8d:84:42:
         bb:87:97:c6:3f:f2:eb:fb:0c:ac:f4:df:c4:49:50:14:04:99:
         a3:71:07:79:c9:19:b9:47:28:b3:d2:c9:24:73:7f:19:9f:b7:
         09:9f:4b:cd:a0:c6:84:0f:ae:75:d2:fe:aa:d4:7a:20:6f:44:
         a6:5d:a5:4f:49:ad:7a:a0:8c:0e:13:b4:3f:af:ea:41:c5:01:
         75:7c:b1:fa:46:2f:c7:d9:47:6d:9a:86:9f:18:01:43:8d:79:
         7d:14:b3:7e:46:01:c0:4e:07:92:75:92:9b:97:45:70:d7:c5:
         6e:d8:ba:57:9e:f6:70:ca:c1:a7:01:9f:28:fa:fb:37:60:53:
         14:d5:9b:47:8c:05:7b:a6:ab:04:e1:68:9a:0b:d1:4b:f6:a0:
         13:a9:c4:0c:bf:70:c8:52:2b:23:f6:06:b7:ed:3a:ea:96:f2:
         03:6d:15:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:32:35 2026 by rpki-client