Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
File:                     I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json)
Hash identifier:          WUrUFNqRlucDx01Uhl0C7OrD9MYbjk87jHCBAh0rkp4=
Subject key identifier:   7E:DE:1D:91:EF:E7:12:77:DF:93:C8:D9:C8:D6:F3:98:CC:79:69:CA
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Certificate issuer:       /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial:       01A04160579C264F432A15673BFC13DFF400
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
Manifest number:          17A0
Signing time:             Thu 27 Aug 2026 04:00:27 +0000
Manifest this update:     Thu 27 Aug 2026 04:00:27 +0000
Manifest next update:     Fri 28 Aug 2026 04:00:27 +0000
Files and hashes:         1: CspYMbhfGFpbF6Pkg6ctQR8K4iQ.roa (hash: 0FcBJfCuXOGiWgVPB5eCGffcUI8H49onLQWNPyf+flY=)
                          2: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: 1S/MgWWbjY4/S+Y8oHdhEJ+SHuiuou56cccPhOocYhQ=)
                          3: OEUQTsVKrLP-lQTQ6AZOPlYIssY.roa (hash: y4n6H8QWfTANHQ4V6doqPirRmfV8G8F5c8X9riuhcaE=)
                          4: Q11uKj3FZslGnPxLmnv1hIW3b48.roa (hash: czmZUe0UuJfveUL66FQWbR/8EoerZBPm+456KZ7ESgU=)
                          5: YtN3VF_wZB4fcdo7woDlARv1C5I.roa (hash: MpfOEhoJEHu9hksfn9WwEkvzGa+ANTBg0mkIw15vEE8=)
                          6: kprspPA2Qu5boxnWzJ_lU9Ab0AE.roa (hash: gEFYkhBGdlaWlWOzwy8lZShF5geJiJozavQlsbuA1Tk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 28 Aug 2026 04:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:41:60:57:9c:26:4f:43:2a:15:67:3b:fc:13:df:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
        Validity
            Not Before: Aug 27 04:00:27 2026 GMT
            Not After : Aug 28 04:00:27 2026 GMT
        Subject: CN=7ede1d91efe71277df93c8d9c8d6f398cc7969ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:96:88:20:86:95:8b:f2:ca:05:98:0e:49:68:
                    11:e4:1e:0c:fb:13:6d:3e:51:d6:a9:e6:83:92:9a:
                    15:60:be:cf:3e:1d:65:83:61:cc:d4:0e:00:6c:bf:
                    9b:68:21:e6:12:56:fe:5b:7f:d6:c7:5b:b8:7c:e4:
                    14:e3:3c:28:66:39:06:19:0e:64:e1:c8:43:7d:9e:
                    f1:c0:21:e9:63:4d:17:a3:16:c7:c7:56:ef:32:b4:
                    2c:5a:27:b9:b7:68:6c:0f:ce:76:21:f6:29:ec:06:
                    95:99:ea:b5:26:75:6d:a3:b0:0e:39:a4:6e:97:3f:
                    2f:92:31:3d:20:d7:2a:aa:c6:93:4f:67:ba:bb:fa:
                    1d:37:1f:69:1c:68:d1:c9:9e:37:c2:b0:30:1d:21:
                    cd:5f:4b:9d:a1:fc:ea:5f:df:69:00:38:38:c5:61:
                    30:6b:87:ad:ab:ce:45:1a:b3:4e:b5:7b:af:8a:01:
                    50:29:1f:e4:d1:65:8a:aa:ff:1c:91:2f:1b:ae:46:
                    39:60:6e:53:4c:fe:fa:00:c6:33:3e:61:ed:76:78:
                    e7:9a:41:fd:d2:67:4d:f3:c7:a2:fd:a1:d5:40:86:
                    c6:5d:d0:01:64:15:30:0c:a9:96:98:ea:7b:6b:c3:
                    25:72:f3:55:00:3f:6d:05:b9:5b:4a:2e:7a:18:ce:
                    50:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DE:1D:91:EF:E7:12:77:DF:93:C8:D9:C8:D6:F3:98:CC:79:69:CA
            X509v3 Authority Key Identifier:
                keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:bc:12:7c:ee:36:b2:a9:73:aa:a8:63:f4:94:d7:d2:dc:bc:
         86:db:b4:f3:3a:da:26:64:ad:df:ca:86:e5:42:45:f3:fe:37:
         42:ec:d2:5c:0e:33:21:4f:63:92:2c:77:1b:28:b1:31:27:ff:
         64:6f:7a:e3:a2:82:a0:e7:4c:65:7e:39:d8:f5:6e:93:ec:2d:
         28:86:1c:c3:a4:d4:91:c3:4f:d3:a3:5e:c4:3c:ef:5a:8c:0e:
         93:7c:e0:ab:f3:70:8d:87:7d:fb:eb:9c:fa:55:c6:20:e2:cc:
         6d:b9:0f:96:65:da:84:89:f8:14:66:2c:35:5d:f4:2a:79:f5:
         a9:6e:56:ab:d0:d2:d6:c5:28:6d:2a:20:4c:af:97:21:14:88:
         43:e7:db:03:c3:38:77:7c:d3:da:4b:8f:f5:e7:36:60:23:e2:
         a9:4f:a0:36:09:f4:ca:c7:27:28:1f:75:61:7c:68:ef:e1:78:
         c6:9e:5e:77:90:c7:47:6e:7b:ac:84:d6:16:c1:b4:a5:0e:43:
         04:7f:d4:3c:f3:a2:95:c8:23:c0:d4:c3:0c:ba:77:85:e8:6c:
         67:2c:c3:ba:c0:2a:6a:41:01:44:14:34:7d:e9:09:a1:ca:db:
         28:a0:f4:87:00:39:4c:3a:0b:a3:76:89:ae:bb:95:bf:5b:58:
         1e:31:82:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:28:39 2026 by rpki-client