Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
File:                     idpg8EnfujS-S06EGLn_SSElxEk.mft (raw, json)
Hash identifier:          OQG5EQywqUKg8eOUHkzI3jzWwwl+792Y+pDCLiKeESg=
Subject key identifier:   15:A9:11:B9:DB:85:04:59:49:FC:DA:02:E9:5F:7B:AA:98:FF:87:DD
Authority key identifier: 89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49
Certificate issuer:       /CN=89da60f049dfba34be4b4e8418b9ff492125c449
Certificate serial:       01A0A2CC2AF5E826180F29AF040D5B11E98E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
Manifest number:          1A85
Signing time:             Tue 15 Sep 2026 02:01:24 +0000
Manifest this update:     Tue 15 Sep 2026 02:01:24 +0000
Manifest next update:     Wed 16 Sep 2026 02:01:24 +0000
Files and hashes:         1: 1qEKqAJdH_5JUlUOsEMtQdOuv-Q.roa (hash: OkbONL4Kv2cLwbDetNkEjbv+0531gLH+WXA/3kqlV9c=)
                          2: 9SsHjlBtd69QJ3ndqo-1KhdedKw.roa (hash: qiOm4Fr0eZzz2bsbkMUTFYSa9lmGOwKDeaQIOpLMzdY=)
                          3: JVABJxvLxkj1mSPSAUuE7d0cXpc.roa (hash: 1hA/cynNPGLtZN3nQtWNzvj3MUG4llVicN6VIwab6HU=)
                          4: gX9Z7p1Ob66YosJCGXnZh4miO-s.roa (hash: elm/BD7Osd0BcHbQbq55e8rpGxN0X0LtIG/FC4qO27s=)
                          5: idpg8EnfujS-S06EGLn_SSElxEk.crl (hash: sO65MHnmOyhun2mBkBVOGedjTz/t4ND6azdkKBGpWtA=)
                          6: pDrr_bf7Ghe4a7lfLdGTUedQJ4s.roa (hash: hckgwXDzkDTS3YgN/PyJxO9PpMuWCR3QafiNrBSQrgA=)
                          7: sFz5mtE3Mde8lSIcx7T2y7lO-zw.roa (hash: NxGgl9GbDugZBPBW0o4P8z6yiV+CD/pDM33YvrxHjSY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 02:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a2:cc:2a:f5:e8:26:18:0f:29:af:04:0d:5b:11:e9:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89da60f049dfba34be4b4e8418b9ff492125c449
        Validity
            Not Before: Sep 15 02:01:24 2026 GMT
            Not After : Sep 16 02:01:24 2026 GMT
        Subject: CN=15a911b9db85045949fcda02e95f7baa98ff87dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:df:6f:9d:ea:32:18:87:7e:99:32:b9:c1:
                    ed:d5:3f:be:75:70:e6:7c:0d:45:e7:2e:e8:62:84:
                    9a:dd:82:6a:72:ec:ed:55:02:23:b1:77:f3:26:55:
                    86:4e:d9:ad:b9:f8:3d:0b:b5:44:67:a2:24:b9:46:
                    ff:51:63:dc:1c:08:59:aa:c6:6f:26:a4:b2:25:08:
                    33:d7:3e:e1:1f:d9:a3:1b:a5:2a:6c:11:f4:56:c3:
                    a4:52:f8:29:99:13:88:34:33:ae:9f:11:28:06:15:
                    62:8d:68:49:d4:12:8b:ca:28:a4:ae:df:0b:ad:40:
                    d9:c7:a2:7d:f1:88:5c:81:c2:a9:a3:08:76:5e:8c:
                    29:df:f0:4a:47:0b:3a:7d:bb:8a:1c:e4:9b:79:a4:
                    d2:a7:4f:44:b4:1e:47:90:37:f5:20:04:51:1e:1b:
                    e9:d6:2c:fe:64:22:0f:3b:c5:c8:57:d1:14:c2:ad:
                    f5:61:5a:99:a9:40:6b:2e:46:bc:d1:c1:81:14:33:
                    b5:c8:7c:29:5f:3d:64:bc:a2:94:2b:a7:2e:9f:ac:
                    af:d1:c3:a3:95:ae:88:93:31:0a:9b:f1:cf:34:9d:
                    ec:53:46:6d:7d:8e:4a:e1:16:4c:9b:42:e8:f9:ca:
                    93:97:17:e4:cf:14:9e:63:9a:67:31:02:cb:9e:da:
                    c1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A9:11:B9:DB:85:04:59:49:FC:DA:02:E9:5F:7B:AA:98:FF:87:DD
            X509v3 Authority Key Identifier:
                keyid:89:DA:60:F0:49:DF:BA:34:BE:4B:4E:84:18:B9:FF:49:21:25:C4:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idpg8EnfujS-S06EGLn_SSElxEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de477f-0785-4026-83be-69890c829e33/1/idpg8EnfujS-S06EGLn_SSElxEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:27:ef:14:12:62:2c:ed:ab:a1:0a:de:9f:4f:29:6e:5e:55:
         8b:ed:f1:35:c1:bc:63:eb:dc:fa:46:89:e3:dd:0f:51:d7:73:
         61:8b:57:4d:de:2f:ce:28:18:ed:89:e6:4d:20:98:23:e8:80:
         6e:f4:ea:66:89:b9:d3:7b:37:a5:dd:3b:0a:f2:f4:89:d3:1a:
         af:00:97:ac:1b:fb:a5:03:5b:c2:46:ac:0e:fd:e8:27:7e:9d:
         55:a6:d2:36:8c:a5:01:29:a7:e8:4f:60:43:2f:e2:48:e4:e5:
         ab:be:5b:04:89:85:88:89:46:2c:c3:77:d7:31:db:58:21:8d:
         07:fe:12:64:99:1a:bd:c3:e7:34:6b:97:52:6c:97:ca:6f:85:
         df:e8:ad:72:5f:dc:00:cc:3b:97:d9:22:93:9b:7b:ed:c4:05:
         5c:7d:ee:d4:37:0d:66:0f:59:43:c3:97:d9:41:9d:94:35:c9:
         07:2f:4c:6d:fa:3f:cf:49:4d:63:84:7a:5e:70:5a:fa:cd:37:
         df:e3:ee:cc:9f:a5:d4:9f:76:33:c8:37:a6:00:bf:4d:31:bb:
         d0:93:b9:d3:1f:c2:5f:38:ad:5b:fb:a5:49:53:55:1e:4e:52:
         71:39:50:7a:b5:a7:65:a2:96:8f:79:36:0d:11:b3:6e:6a:e7:
         b0:a2:a4:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 15 10:50:24 2026 by rpki-client