Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
File:                     9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft (raw, json)
Hash identifier:          wrTiyhPGSQHhSWMPFCqdzY49X2BWE05dhFSJcLza7rg=
Subject key identifier:   24:AD:CB:6C:0C:27:CB:33:BB:F2:04:8D:88:EE:3B:FB:BE:E5:98:7E
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Certificate issuer:       /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial:       01A08B67EC3E2310FCEDE39AA343E8B46893
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
Manifest number:          1A75
Signing time:             Thu 10 Sep 2026 13:00:38 +0000
Manifest this update:     Thu 10 Sep 2026 13:00:38 +0000
Manifest next update:     Fri 11 Sep 2026 13:00:38 +0000
Files and hashes:         1: 9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl (hash: 1DF+ord3Xd7JjpCy+BvwNC0907XOF4TTlikAKe5X4Kc=)
                          2: C3Hj7ROPeIpwRmBzpRFfxI_qvb0.roa (hash: vveg8RifsnaImkmfopb5PhQkcmujHs/iYhIU7WeY+b0=)
                          3: GP_DUV0faWuK0jHjXr1g_eRLzwA.roa (hash: IUdACoDW0rE/n6kZcocEWVzhGKES4IEE0jvO7MJrLYo=)
                          4: P-rRYVXCTixpE8G0uFs42zL11uM.roa (hash: gGvo9uFElsBmxmc2f57ugvUF8fRFbGjjhlaZ3XTHPxM=)
                          5: TZb0pwqKAULgiO7MxUXFvu2eCDY.roa (hash: xx3QLAhALsGor/waOfuSlLQuXwnX4zFtt11tExzIAAg=)
                          6: pnoNDnBxEfC2Y0eOSu3ZLvoJ8bE.roa (hash: fiAhIReHkKJDspHClaY6l1S5vNnjpZ4eQPqh1G/RGnQ=)
                          7: qhW018nLYKkbveq_JNyETo7B_Ow.roa (hash: 03M+6gjp2KbZhQBCv2SYcsFpAN+DiQPSPmjd2q66jUU=)
                          8: ys3yCdHJ9a3MjZY25yxTfQSZph0.roa (hash: KFDraXJKQVMV1BXHcMi/qwrvrU0UgboWj1cSJoeNNfk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:67:ec:3e:23:10:fc:ed:e3:9a:a3:43:e8:b4:68:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
        Validity
            Not Before: Sep 10 13:00:38 2026 GMT
            Not After : Sep 11 13:00:38 2026 GMT
        Subject: CN=24adcb6c0c27cb33bbf2048d88ee3bfbbee5987e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e6:0c:76:bf:6b:ef:f5:20:fc:e9:f6:e7:7d:
                    4f:32:fd:70:19:26:d0:bd:24:d1:83:ce:6e:8e:a7:
                    b0:fc:ae:7c:2d:29:2d:bc:ea:0b:ed:34:4d:1c:3b:
                    7a:0e:ca:bc:63:6c:b7:a7:7c:58:3b:99:a5:94:b9:
                    4c:94:14:11:c2:8f:8d:bd:b9:20:ad:61:cf:d0:95:
                    2d:99:3d:6c:e8:34:32:8c:fa:ab:cd:2e:38:9e:19:
                    4b:05:2e:9d:60:8e:69:db:b0:b6:78:b8:36:f5:8b:
                    c6:87:aa:01:61:2e:a3:64:13:16:c3:2b:75:d5:c1:
                    30:df:54:9f:b7:10:b4:9f:80:d5:b4:3c:03:40:55:
                    7f:e3:c1:aa:05:cd:07:bc:3b:b3:fe:d0:c8:4c:45:
                    05:28:a0:f4:9c:d2:28:0b:ec:f7:15:07:11:9b:be:
                    85:94:ff:55:f3:a9:fa:39:7a:30:ae:77:16:8b:e6:
                    f9:0c:b7:57:8c:f0:eb:a9:55:c3:e8:87:35:3e:0b:
                    7b:b3:ec:b8:30:6f:8b:02:69:58:e3:f2:41:7e:32:
                    5e:61:8e:a2:1c:79:cc:1d:fe:e5:f7:a9:aa:34:1a:
                    bd:4f:61:27:79:d6:03:e8:99:50:ed:bf:3f:31:d6:
                    4b:43:16:eb:13:ec:26:b3:68:fe:66:fe:a2:dc:50:
                    b8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:AD:CB:6C:0C:27:CB:33:BB:F2:04:8D:88:EE:3B:FB:BE:E5:98:7E
            X509v3 Authority Key Identifier:
                keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:bb:ee:6a:92:c4:17:32:a0:d2:54:96:80:57:4a:1a:43:59:
         31:ec:a7:c4:f2:9d:52:15:f0:a1:9a:b8:c6:e4:d5:d7:3f:1c:
         fd:5c:65:08:e8:a4:9f:1b:c7:b3:1b:e7:1e:66:11:e9:b0:96:
         b4:54:64:a3:27:c0:66:8a:83:96:d3:4f:b1:dc:e4:b1:71:f2:
         57:66:cd:1c:dc:38:11:53:93:34:44:ee:31:a4:a6:90:2e:90:
         35:b1:2b:54:a7:de:a3:4d:27:ea:bf:8c:56:23:3e:bb:71:99:
         fd:76:97:0f:a9:dc:b1:69:a4:a6:50:0d:7d:36:54:0d:e7:75:
         cf:6f:45:e5:44:0e:00:78:e3:67:e9:ef:be:df:5e:cb:d8:27:
         f0:44:6c:ff:0e:43:0e:9d:2f:f1:fb:23:fa:f5:27:ef:7c:93:
         a0:95:e1:62:5b:61:92:85:d1:c1:05:68:fc:2e:dd:2b:a3:e8:
         1f:c7:ac:0e:27:66:1b:34:17:75:85:87:e5:7c:f2:12:71:49:
         5d:56:a3:8a:94:13:ba:ef:c9:e0:af:da:b6:3d:b1:88:d8:5a:
         82:de:36:6c:c0:74:5b:a7:15:2d:97:6f:7d:bc:08:bc:c4:e1:
         d9:44:ac:8d:53:02:a9:f0:2d:94:92:61:f9:18:b8:21:05:89:
         4d:e7:86:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:03 2026 by rpki-client