Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
File:                     IMXuAtLgWGHdkG_gazhE8E03jHM.mft (raw, json)
Hash identifier:          a5YAyG3OE8gwP5oUdJ5H46PpAn6phasgSxsgN2fNQ5A=
Subject key identifier:   77:AF:6E:21:61:BC:1A:B6:4B:53:ED:CA:59:1F:44:4E:E7:EC:C1:ED
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Certificate issuer:       /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial:       01A089E75F0A5ADEE2FB4FBAED580B0393E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
Manifest number:          0912
Signing time:             Thu 10 Sep 2026 06:00:36 +0000
Manifest this update:     Thu 10 Sep 2026 06:00:36 +0000
Manifest next update:     Fri 11 Sep 2026 06:00:36 +0000
Files and hashes:         1: 8Ljz3seCOU0SNV0gsb7nbyE1us8.roa (hash: 5mxn00L/BkHAVIffiKEwefaUdNGKUinwbPLnGWN/DNs=)
                          2: HTNIDhfSROtaHMuo_vWuWis3hqY.roa (hash: RQQdIjVdjQlrkYAZGuleXhNiBkw7L08DLK2ngoHAF8E=)
                          3: IMXuAtLgWGHdkG_gazhE8E03jHM.crl (hash: oXHrDDJp0Rk8CSYyhk3qwoHDv2kTVrXGIdNuTXw7nTw=)
                          4: LnCR0arWZWYp2eBdFpI9H-Lvr3Y.roa (hash: Bfa23AAQWStpV7GkB8TThtChQsiaP0XNU0Hs970PLeI=)
                          5: OMB5Jk9mgdmm1VNa_o3p8h7PRuU.roa (hash: prRMihbXIXK3A+UL2foFns/7v1HOYLiNh02wiqqOfKo=)
                          6: QWEGxPaeYQn0uBOxZiupBOKlr0U.roa (hash: GLwyZ+wAbuSreUejAWX/k5Bcy9X7pS8PLxayzPw9L8s=)
                          7: fBVDV8nwXQdpQ_rHZ7agKc1r0QY.roa (hash: MVq6Psg4hS5MltjuluEalJmzG7hJZP0WRHHEPcHhyK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:e7:5f:0a:5a:de:e2:fb:4f:ba:ed:58:0b:03:93:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
        Validity
            Not Before: Sep 10 06:00:36 2026 GMT
            Not After : Sep 11 06:00:36 2026 GMT
        Subject: CN=77af6e2161bc1ab64b53edca591f444ee7ecc1ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:af:17:6f:32:b7:b5:d6:f5:37:2e:35:40:a6:
                    2f:ec:1f:66:89:26:68:1f:3e:54:4a:f0:4e:0d:8a:
                    6d:4e:c9:4c:10:b1:a7:a4:18:4d:04:b4:a5:00:c0:
                    76:68:3a:ef:46:ce:fa:2e:9a:0f:9c:61:2f:61:43:
                    b0:34:a4:55:c1:61:bd:1a:11:63:96:ca:27:20:b1:
                    f3:c7:35:72:49:f4:9b:9a:ca:c5:ea:86:1e:ba:6e:
                    9a:bf:4b:e5:17:fa:f5:c1:e8:a7:fe:42:3e:9f:45:
                    b9:de:95:47:37:b5:84:2e:b3:8b:cf:f8:08:dd:18:
                    5c:f3:68:75:6f:d0:e0:7f:e1:80:6d:49:d0:bc:7e:
                    e8:bb:15:51:11:06:09:e2:51:06:4a:23:61:5e:0d:
                    82:79:d4:10:b6:45:0c:9f:0a:c0:a8:48:81:7d:e3:
                    a8:52:b1:c2:56:d8:79:0b:01:fe:d6:1b:66:15:f9:
                    9f:c4:25:ac:7e:d4:24:16:3a:01:1b:23:40:1a:9c:
                    fa:ff:f6:16:17:c0:df:41:9f:ed:40:b1:fa:88:70:
                    c9:74:85:e8:83:c8:48:9b:fd:85:61:fe:16:d8:23:
                    47:3e:49:ab:d3:b8:39:a9:f3:27:82:45:45:da:c4:
                    92:43:b1:11:da:68:64:f7:7d:6f:64:c0:91:0d:ca:
                    84:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AF:6E:21:61:BC:1A:B6:4B:53:ED:CA:59:1F:44:4E:E7:EC:C1:ED
            X509v3 Authority Key Identifier:
                keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:2f:f5:68:4c:de:b7:c9:1c:4a:90:25:88:76:8b:af:9b:af:
         f7:f6:e7:dc:d9:c4:ae:e0:7e:f4:ee:48:a9:bc:85:e9:19:bf:
         04:6e:0d:04:0c:cd:28:ea:e6:b6:b3:92:2c:5b:13:22:c1:96:
         ce:89:a9:24:c2:f8:e5:1c:cc:00:ba:9e:27:ea:49:9b:9b:39:
         d9:f7:af:59:cb:5d:82:26:09:7d:46:a3:f9:17:16:4b:66:00:
         00:74:6e:34:99:08:17:e9:fd:f2:65:8d:09:4a:f8:fc:d5:a1:
         f6:34:5d:5c:69:ba:f4:cd:89:42:72:5a:3e:fa:74:8f:e3:4b:
         fa:a9:91:27:d3:01:c8:a5:f2:0b:7c:15:5d:b1:ac:ed:99:ef:
         b0:ae:a3:1d:a1:cb:84:f4:b3:cb:5d:0b:e8:74:d3:11:68:12:
         35:8c:a5:11:82:1e:ae:de:64:8e:14:e7:02:3b:24:83:5e:7b:
         a1:94:21:9a:8d:51:b9:40:bf:e0:8c:59:90:b3:02:2b:2f:9f:
         27:b4:45:c6:87:51:e1:d4:fe:ad:7c:34:89:ff:96:38:3f:3d:
         26:32:06:8a:d4:d7:fc:be:fe:2a:c9:cb:b8:ee:6d:3e:65:2b:
         b7:22:92:9d:f8:34:5c:2a:a9:2d:6a:a9:5e:69:5d:bd:62:90:
         d4:e7:3d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:21:46 2026 by rpki-client