Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File:                     20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier:          lHmr2MmXzcj6N5dVrxOypxXWBG1hEPTVeb4sTK1zvkA=
Subject key identifier:   B7:85:BB:D1:ED:63:85:FE:93:11:B2:A4:95:94:DF:5C:33:73:7D:82
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer:       /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial:       01A09EEED459A94734D1BFF879A19E6DDA91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number:          1608
Signing time:             Mon 14 Sep 2026 08:00:47 +0000
Manifest this update:     Mon 14 Sep 2026 08:00:47 +0000
Manifest next update:     Tue 15 Sep 2026 08:00:47 +0000
Files and hashes:         1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: Qdm4vNDcz7tVLuyVIcAdd6WrmeEXZFkE1lIMeR9ek2k=)
                          2: G8RD2uK8jegsTsE-7XQ_nINovw8.roa (hash: bbRv59/fFxUF7NCQBw4VIduLszpjkq+XNByjPQilIdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 15 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:9e:ee:d4:59:a9:47:34:d1:bf:f8:79:a1:9e:6d:da:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
        Validity
            Not Before: Sep 14 08:00:47 2026 GMT
            Not After : Sep 15 08:00:47 2026 GMT
        Subject: CN=b785bbd1ed6385fe9311b2a49594df5c33737d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:e7:ab:80:1f:4f:41:24:12:b7:b5:1c:68:
                    68:a8:46:a6:bd:fe:b7:15:bd:6d:e7:3b:59:70:b1:
                    b8:65:25:87:1e:a6:2f:7b:ff:99:6a:ad:de:ac:d5:
                    d2:e0:48:a1:8f:fe:60:02:2c:82:2c:e2:64:21:77:
                    8b:e9:fb:ff:59:14:7e:7a:74:30:ac:f1:d1:f2:db:
                    e9:dc:aa:ec:0c:50:0d:94:d5:ab:54:de:ba:15:ad:
                    47:91:cc:a6:d3:2c:12:f6:1b:c5:fa:0d:81:2a:66:
                    94:d4:21:d6:28:16:50:d5:b6:cb:f3:20:77:b1:54:
                    ab:8f:de:fe:d0:39:8f:08:c8:a6:c9:10:27:1c:78:
                    f4:10:1d:85:3b:ea:23:b2:f9:78:22:a5:da:d3:3a:
                    ed:a7:42:f9:0d:bd:5d:83:06:ae:94:20:23:e0:ed:
                    47:df:bb:7a:7f:a2:e4:ce:fe:c4:14:23:29:57:68:
                    ee:b2:c1:99:5c:5f:a8:f2:2b:e8:32:23:a5:c6:76:
                    26:54:2f:d6:4d:ec:45:1f:d5:97:18:71:97:93:33:
                    11:b3:f3:5f:cd:b0:7f:3a:19:9a:f1:36:97:f7:e4:
                    12:76:62:48:1e:c0:7a:67:19:3c:3a:90:13:ca:bb:
                    cf:e9:0c:80:9e:92:ab:2b:d8:91:9a:d4:fe:c7:af:
                    c0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:85:BB:D1:ED:63:85:FE:93:11:B2:A4:95:94:DF:5C:33:73:7D:82
            X509v3 Authority Key Identifier:
                keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:61:52:b3:00:ad:a0:94:14:55:a7:e8:ad:ca:91:2a:07:da:
         10:52:59:52:57:61:b3:1d:75:11:5c:c5:01:98:d4:da:c6:f6:
         bb:c6:f5:69:89:9c:19:ff:fe:42:95:30:d2:02:19:a3:98:7f:
         b6:a1:45:a5:20:82:38:70:03:c3:90:65:61:67:78:f4:db:de:
         53:08:21:6b:86:52:b9:b4:25:9b:8e:f4:9a:80:30:10:b5:f2:
         8a:1b:4c:6c:0c:e9:8e:5f:b9:8a:5d:01:45:eb:7a:f4:e0:54:
         dd:0c:7e:fe:2b:18:e7:b5:47:3a:db:cc:b9:0d:94:bb:54:17:
         98:6e:a3:ba:fc:de:1e:26:a7:70:67:c1:e4:a0:70:28:30:a7:
         aa:ce:f1:79:31:72:14:df:94:4f:41:46:4b:df:46:02:fe:05:
         db:aa:91:a7:76:90:2a:84:af:7a:1b:98:e3:4c:9b:06:f0:b0:
         cd:6c:e0:0f:f4:50:b3:a0:08:03:a7:38:fd:53:23:9c:23:4f:
         06:a3:77:a0:92:a8:f1:b6:44:8c:48:7d:59:dc:f1:3b:0f:f1:
         d3:dc:ee:e7:e6:7b:2d:55:50:a3:20:4c:ec:5a:5d:80:33:71:
         a5:e9:f2:b0:75:41:78:df:54:3c:5d:b8:20:ba:c3:7b:fa:22:
         a4:b8:7b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 12:11:29 2026 by rpki-client