Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File:                     24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier:          1VI26az/azCbGz8L8YLtEtORyeDx0TmQBH9xBbEcHv8=
Subject key identifier:   66:E2:29:9D:4A:BC:C6:37:3D:F1:15:27:68:5F:CF:3D:71:9E:14:FB
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer:       /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial:       01A06E70728E19800B879FA220A490EB7D4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number:          1133
Signing time:             Fri 04 Sep 2026 22:00:58 +0000
Manifest this update:     Fri 04 Sep 2026 22:00:58 +0000
Manifest next update:     Sat 05 Sep 2026 22:00:58 +0000
Files and hashes:         1: 0-WmLbEH77lOVqvVQ2YUnN7Nex4.roa (hash: K4clzCUFSq6IN3lmLQlxqL/RcAzKs5Apy7zTYqaaAwc=)
                          2: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: 8CB23IDY/evTmsLLODKPpUCY5oq1DKHr5TXdSgRl7Y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 20:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:70:72:8e:19:80:0b:87:9f:a2:20:a4:90:eb:7d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
        Validity
            Not Before: Sep  4 22:00:58 2026 GMT
            Not After : Sep  5 22:00:58 2026 GMT
        Subject: CN=66e2299d4abcc6373df11527685fcf3d719e14fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:da:43:8c:2c:bd:45:98:0c:3f:eb:77:03:0a:
                    36:12:c9:ca:9e:d4:94:8a:4f:2c:7b:88:a1:4d:14:
                    cc:8d:32:9a:90:52:64:56:8c:06:44:ad:9f:fd:82:
                    d5:11:68:85:df:91:ed:50:ef:36:0b:08:cb:79:b8:
                    bf:6b:6c:2b:28:e8:a6:4a:f1:f3:6e:d9:a5:06:14:
                    0f:29:45:ff:29:c9:48:eb:8c:79:48:06:f1:7b:8a:
                    eb:eb:fb:f2:48:10:ff:ff:ad:bd:35:f1:aa:37:f7:
                    d0:5c:33:b9:06:4d:d1:0c:87:68:6a:f2:1c:ca:be:
                    31:8f:b0:f0:cd:48:ff:66:ee:48:81:a5:76:e2:fa:
                    b2:73:5e:6e:3e:e4:64:76:4b:5f:98:e5:93:8d:d7:
                    78:9a:89:f8:d3:d9:5c:a5:9e:b9:4c:f5:a9:64:93:
                    c6:56:ee:c2:d7:6b:40:c8:05:fb:df:bb:23:9d:71:
                    b0:b8:d0:9b:d0:e5:a6:b5:5c:d2:91:9b:a4:8c:1f:
                    2c:04:be:85:b7:de:4a:28:9f:c3:5e:75:30:37:d2:
                    d6:41:2f:34:24:65:8b:e7:d8:bb:a6:2b:09:42:a1:
                    7b:f6:a3:33:b8:5e:ee:d6:68:af:99:76:ed:44:2f:
                    71:cd:38:57:35:f8:c8:99:0e:fa:2c:d9:d4:4d:77:
                    40:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E2:29:9D:4A:BC:C6:37:3D:F1:15:27:68:5F:CF:3D:71:9E:14:FB
            X509v3 Authority Key Identifier:
                keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:0c:7a:12:a0:aa:93:82:dc:6c:24:cd:3c:9e:67:15:d1:e0:
         16:db:f5:37:03:d7:ec:4a:29:17:53:3b:37:72:64:0c:7a:8d:
         90:2f:d1:1d:da:c3:2a:ed:34:51:34:37:66:6d:bb:7c:8e:34:
         5d:bd:a5:54:48:11:4f:7e:fc:2c:66:c8:24:21:0b:a6:bc:ac:
         68:2f:7d:2b:d7:31:ca:0d:0d:f7:2d:80:c1:54:e5:60:9c:3d:
         a0:31:c3:7e:d1:d4:12:02:4b:75:f9:77:09:be:d5:54:9f:e8:
         23:fb:ba:d7:95:3c:c9:cf:6e:fa:8a:29:6b:04:a5:dd:97:0c:
         57:8c:71:a6:1f:e2:55:3e:5f:84:1c:ee:ba:11:4d:7a:6b:86:
         0f:50:cc:26:47:10:a8:4e:16:ea:66:23:07:96:90:fa:74:1d:
         91:d2:5f:bd:7f:ff:aa:58:3a:35:94:d1:bf:5b:fa:c1:a0:2c:
         c3:07:a0:77:fb:cd:2c:fd:5f:2f:83:4d:aa:d0:04:7e:24:4a:
         e8:cd:3a:c3:da:da:4b:80:f7:14:99:84:ad:2f:67:b2:ca:d0:
         12:19:2d:b2:d3:71:cc:f4:f2:22:ac:52:87:40:5d:ad:bd:0f:
         0e:19:b6:fb:c2:91:77:8c:83:8d:cb:82:cf:ed:8a:86:bb:03:
         db:29:af:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:26:36 2026 by rpki-client