Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
File:                     tYaoZDYz6YdBEai881GKCQXyhgk.mft (raw, json)
Hash identifier:          MD5XGLmBUvHmCM9MctjZq4d+4w/VOhcpksFPfHXaNBk=
Subject key identifier:   AA:E0:40:7F:76:A6:1F:7D:C6:21:B3:8F:DD:3E:B4:B7:57:08:4A:60
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Certificate issuer:       /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial:       01A08AC37093797A2DF5190A7FE03DB9A33D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
Manifest number:          15F1
Signing time:             Thu 10 Sep 2026 10:00:59 +0000
Manifest this update:     Thu 10 Sep 2026 10:00:59 +0000
Manifest next update:     Fri 11 Sep 2026 10:00:59 +0000
Files and hashes:         1: R_zL9EhetPG627p64jnL_1AQk_k.roa (hash: /ASm15I9YtFuL/r1IrLrMNiCv/23kZabo3hMsyygvPM=)
                          2: Zx2Ej29t4Sy3ugAdSAEr8wgh-eI.roa (hash: 6qePl3E6/9bWQI3GzNjE+NBTWrA6JE82fp1zkkf+j8o=)
                          3: gPytstS2H2DCx0G35K4nAVksneE.roa (hash: I34ZNFgqBn6ft829pIhUL9qJ7ZwAtJssKpKV0YYtJmI=)
                          4: hL4U-26oJ-d8CY7a6r3Udux4pFM.roa (hash: 8nT0Nid1k0WCSq4dufjGbFyrf1TbKzMQQr3veAEfmRs=)
                          5: jJ74mpm8B1pyvT1MNhCtSe0cxRk.roa (hash: OKs2X6l4NJ7txPZTz3RUzDrNyB2I3km6f/sNQFkFGUQ=)
                          6: tYaoZDYz6YdBEai881GKCQXyhgk.crl (hash: r9kzvJajWh8hJyAHMkfBw7EC1IB/kh1Vtb5BiLtUQqU=)
                          7: v_CzW-gEtbdZtpCnpKHVty7BP7s.roa (hash: FK1HiNTHGuvdh1/S7hYfIVoOC1e1CT6RxRS6KDmNYRQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 10:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:c3:70:93:79:7a:2d:f5:19:0a:7f:e0:3d:b9:a3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
        Validity
            Not Before: Sep 10 10:00:59 2026 GMT
            Not After : Sep 11 10:00:59 2026 GMT
        Subject: CN=aae0407f76a61f7dc621b38fdd3eb4b757084a60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cc:64:ca:a4:fb:35:d7:55:b1:e9:c9:df:1d:
                    88:84:eb:77:b0:83:cf:24:a1:73:7e:b5:95:ce:26:
                    8c:a2:2f:af:22:02:45:85:76:41:e1:61:75:3a:36:
                    bc:f0:cd:e2:cb:34:26:a9:30:aa:98:4d:ca:f1:a0:
                    ac:30:68:f8:e5:62:09:22:a6:b7:d1:19:dd:9f:86:
                    2e:04:9b:f0:1c:d9:4a:af:8e:7a:bc:22:5b:29:bf:
                    3a:45:06:79:79:fe:a8:97:a2:77:79:8b:1b:e5:16:
                    cf:fc:9c:d9:54:e3:d5:4f:e2:94:2b:41:14:5b:75:
                    34:8d:08:44:c5:78:6e:da:5f:4f:ff:15:90:f6:2b:
                    fd:19:c3:f0:e8:d9:81:d2:0b:69:16:60:c1:09:c6:
                    31:06:35:60:52:91:0d:17:5f:0d:74:a9:fd:57:61:
                    3b:75:ea:42:7e:9c:49:8f:4f:c0:e2:b1:58:2c:69:
                    35:34:03:79:35:db:db:1d:37:3e:56:42:dc:ea:8b:
                    d7:dc:73:59:cb:d6:48:19:e3:e5:d2:0b:b7:c0:76:
                    17:2e:15:bd:be:57:b6:7c:62:c3:58:e4:9e:8f:d5:
                    ad:23:7a:ce:95:f3:90:5c:37:b7:53:dd:60:9c:ec:
                    b6:ac:c1:9e:04:0e:2b:34:43:5f:ed:cf:80:00:d0:
                    6c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E0:40:7F:76:A6:1F:7D:C6:21:B3:8F:DD:3E:B4:B7:57:08:4A:60
            X509v3 Authority Key Identifier:
                keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c1:de:d3:87:19:58:53:15:6f:8f:f3:85:77:8e:40:10:7f:
         92:22:4b:2a:62:1d:05:3d:d3:e8:42:9f:41:c4:fa:5f:21:aa:
         39:91:60:14:dd:a1:d6:b5:27:c1:65:66:5a:79:54:d8:bd:bd:
         22:4b:28:7a:cf:7f:28:11:b0:a8:2c:8c:f1:b2:54:76:f9:10:
         01:8f:6c:18:22:29:f5:de:57:5d:74:49:99:96:95:50:3d:01:
         6a:cf:60:50:38:f3:49:07:3a:00:0c:34:ff:ad:84:b9:19:e9:
         aa:61:4a:f4:e0:d6:30:32:f6:2d:cd:67:e0:8a:26:9f:89:81:
         b5:94:c6:02:11:bd:d2:8f:f4:19:d5:57:98:5a:85:1b:7d:4d:
         90:c2:6b:b0:b8:d0:5b:54:b3:1a:fd:11:1c:60:d4:10:a5:bc:
         4c:78:b2:6e:66:72:e6:c6:df:32:59:ae:66:a7:a3:da:41:77:
         52:23:28:f1:95:24:bc:e2:4f:2d:ec:00:10:f1:45:57:b8:c0:
         ba:13:56:fd:50:6f:f5:9d:80:1d:fa:8b:ff:3b:39:39:38:f7:
         5f:01:2c:66:14:f7:d1:42:14:21:9e:58:51:49:5b:f7:64:db:
         f6:13:26:a3:7f:35:8a:c7:f1:9e:48:ed:82:e1:76:a5:ed:54:
         8e:62:09:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:25:20 2026 by rpki-client