Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
File:                     mUT4EqDgAsOOhOR2KL26A4WYCQs.mft (raw, json)
Hash identifier:          Vtkk0FeCoPCDGPak1/awNfQjn1254e83fTyodMSkA38=
Subject key identifier:   C5:AA:A0:54:13:9D:FE:28:68:06:DD:72:6A:6D:30:66:39:E2:40:8B
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Certificate issuer:       /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial:       01A0DFF33C008DB7EA0B3CE58A88D4C301ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
Manifest number:          1001
Signing time:             Sat 26 Sep 2026 23:00:54 +0000
Manifest this update:     Sat 26 Sep 2026 23:00:54 +0000
Manifest next update:     Sun 27 Sep 2026 23:00:54 +0000
Files and hashes:         1: RTCwtH7ZWIYWogG8SzF47UbA26A.roa (hash: cp0ZS5qVAjMrv/xO5fzJ4jhrguG1YkL8kQ9RzgIwSl4=)
                          2: T2785FZtezCL_6MGZVNWjJWLkV4.roa (hash: vLx5BTbQ5gwqNSQW0r0QpCkolwPmMCxbInfB7uOoJt8=)
                          3: mUT4EqDgAsOOhOR2KL26A4WYCQs.crl (hash: XW2FOtZ9B5juuFcS8Do8GFbLvgVD6F+1XI3ZLrHY0UY=)
                          4: tIO_Frmyb630hOFMV5X9t-LFjlM.roa (hash: A+6xfI16vy2Eu1vSrt6AeJ63kgJErM2gSoHCauuaBDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:f3:3c:00:8d:b7:ea:0b:3c:e5:8a:88:d4:c3:01:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
        Validity
            Not Before: Sep 26 23:00:54 2026 GMT
            Not After : Sep 27 23:00:54 2026 GMT
        Subject: CN=c5aaa054139dfe286806dd726a6d306639e2408b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:53:28:ad:78:e3:d0:ca:24:8b:07:01:05:
                    6e:05:b1:50:3b:4a:ae:38:f5:e7:b0:d6:04:97:13:
                    0b:8d:a4:b0:dc:5d:d9:42:bb:71:0a:39:18:eb:47:
                    cb:44:f8:4d:bb:ae:e8:c1:5f:ae:b4:77:06:1f:c5:
                    19:d1:21:8d:26:6b:aa:b5:41:47:79:ff:ff:a5:20:
                    f2:44:04:00:a8:c5:c1:44:f5:1b:ea:7d:24:bd:a6:
                    00:4a:a0:cb:c2:cf:0c:f3:11:43:4a:64:ee:ff:9a:
                    cc:3c:23:05:7c:bc:60:9a:af:3e:3e:4b:35:be:40:
                    05:ab:83:39:a5:71:89:c2:33:82:f6:fd:06:6b:11:
                    c7:12:f2:90:49:86:d0:4b:91:29:44:e8:8d:4d:16:
                    01:ad:58:3a:38:fc:de:79:69:20:ca:2c:fb:34:bf:
                    8a:93:ef:3b:28:03:63:2a:bf:6f:67:b3:74:0c:29:
                    35:e5:e2:ee:a7:68:b7:27:10:95:fb:c9:e3:78:05:
                    90:c4:ab:28:8b:00:35:5e:65:10:17:c2:08:e3:96:
                    d1:fd:fb:12:78:f3:32:e3:76:53:ce:98:da:79:cf:
                    83:e8:df:90:b2:e6:10:63:67:a7:c6:07:75:2e:9a:
                    72:24:a2:87:ac:ca:6c:9e:45:1b:00:e1:70:bd:c5:
                    41:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AA:A0:54:13:9D:FE:28:68:06:DD:72:6A:6D:30:66:39:E2:40:8B
            X509v3 Authority Key Identifier:
                keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:93:e0:c6:ab:0a:81:39:1d:8c:3b:30:26:c8:36:bb:19:b0:
         03:2b:ee:41:65:b5:9d:2d:79:06:6e:b0:e7:a3:84:7c:b8:87:
         c3:cf:d4:10:b0:a5:99:34:96:19:00:cb:c9:b3:c7:43:88:86:
         9a:b5:58:6a:9b:ec:3e:36:2f:91:db:db:81:07:e1:d7:1e:32:
         e7:e1:2a:3b:11:58:35:79:f3:bd:6c:2e:9a:81:62:99:4a:a2:
         01:d7:ff:e6:f3:51:89:7f:86:54:29:51:5c:48:c4:10:a9:e5:
         14:e7:cd:36:06:94:fc:7e:b5:cc:22:66:9a:0e:6f:10:f1:12:
         ca:7a:3d:25:23:0f:fc:69:7e:1f:d2:87:fe:71:22:6f:d6:f9:
         a4:a8:9e:25:97:f7:d3:da:b4:a0:a0:20:f0:f4:a5:96:f5:53:
         04:16:86:4e:b6:a8:3b:b9:51:53:61:97:c1:ee:c3:2d:74:d6:
         4b:b0:ea:dc:99:a5:c6:d4:58:3e:f4:3e:b0:75:a1:cd:dc:36:
         0b:be:de:76:a5:ec:f3:1e:0b:47:67:1d:e3:30:4f:6c:6d:1f:
         56:fe:4f:c1:a9:b4:61:64:85:3a:44:f3:f6:78:7b:43:d6:94:
         54:48:69:28:c9:5d:df:03:d4:28:52:97:52:03:84:2a:b2:2d:
         67:18:bb:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 09:47:00 2026 by rpki-client