Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
File:                     2783kJzhe6U62QqGMjd6XZOHQ-U.mft (raw, json)
Hash identifier:          hof3SrMtnOI5pbgMb/25rV2ynoyYlazoo8lUfbuE01k=
Subject key identifier:   3B:61:76:8F:58:FB:41:CD:30:9A:1D:F2:F9:23:99:9D:2F:A7:F2:D1
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Certificate issuer:       /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial:       01A08D8D16F59598588722CB8581D2D4DCC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
Manifest number:          101F
Signing time:             Thu 10 Sep 2026 23:00:28 +0000
Manifest this update:     Thu 10 Sep 2026 23:00:28 +0000
Manifest next update:     Fri 11 Sep 2026 23:00:28 +0000
Files and hashes:         1: 2783kJzhe6U62QqGMjd6XZOHQ-U.crl (hash: cY3WKUVIaKbzLgPCWiLKVjb85IoYQlUfh6p6tcKnrso=)
                          2: TTwK20SxDSqzIyzV0QGO0SmjawA.roa (hash: x2Tzuet+mqmVtk1cFs2lJv6NLw6VZlQyasN9WGmhONs=)
                          3: XnoeLIkYNpYQWVse-yX5iRjTc1s.roa (hash: ptKlPyES08hICN66dmlPtZNxNra0j4is1IcwHdPzbr4=)
                          4: lEbAfouHoMhTrs36FwPLKCH2I7w.roa (hash: ccDJaCoETUQjCTdcoNlWxXPIM6P7uFIKkfsOSoduMMA=)
                          5: xu7t96CgIHN3hwNmggXTcfk-UpA.roa (hash: iRBThFuWjKJSamtnuVG+6/kq+wDEj0e0hvd45FkbUb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:8d:16:f5:95:98:58:87:22:cb:85:81:d2:d4:dc:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
        Validity
            Not Before: Sep 10 23:00:28 2026 GMT
            Not After : Sep 11 23:00:28 2026 GMT
        Subject: CN=3b61768f58fb41cd309a1df2f923999d2fa7f2d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:08:83:54:c7:17:4a:2c:29:c5:9b:78:ad:
                    be:2b:53:31:46:36:86:15:94:33:85:83:1a:77:35:
                    46:e5:69:45:74:dc:63:eb:cf:d3:3d:8a:ee:0e:a5:
                    f8:6a:04:39:79:83:05:ff:39:c2:4a:a3:1d:95:57:
                    6e:c7:fb:2b:f6:82:ca:67:12:f2:3c:ab:c8:29:0b:
                    ff:34:7f:c7:33:42:f1:db:fa:1f:22:2f:68:3b:e2:
                    35:f5:04:6a:e2:d5:b3:4b:55:2b:bd:98:15:08:a4:
                    d5:b9:b1:17:93:77:8e:b1:b0:c9:09:45:c5:90:ec:
                    0c:8d:90:6c:b8:0a:b7:78:58:3b:7a:df:e2:15:e9:
                    b2:f3:96:87:e1:56:ab:be:2a:bc:8a:75:40:64:a1:
                    6c:f1:43:df:4d:15:07:eb:ab:73:03:24:22:67:08:
                    47:59:f3:bc:b6:39:e6:c5:5d:9f:a6:3a:fb:6e:24:
                    0b:48:57:84:0d:39:cf:69:4c:b8:de:b7:dd:67:5f:
                    2a:03:d9:56:81:da:85:24:8d:e6:7c:7c:94:a4:a4:
                    ec:fe:56:6d:1b:25:62:f5:20:f1:96:0a:1f:f7:da:
                    18:de:c7:a9:62:a4:b2:0b:65:a3:db:61:df:27:a7:
                    c8:63:8b:4f:93:75:97:5c:50:0f:62:bf:cb:8a:32:
                    96:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:61:76:8F:58:FB:41:CD:30:9A:1D:F2:F9:23:99:9D:2F:A7:F2:D1
            X509v3 Authority Key Identifier:
                keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:6c:23:29:9a:66:65:7f:3f:d2:39:00:29:b7:cf:0c:76:fa:
         ee:25:ab:33:9a:72:56:d2:8b:20:b5:0c:be:8f:7d:50:80:81:
         c1:79:40:c0:7c:c1:4d:82:35:ff:b4:74:e6:52:5e:b7:cc:d6:
         4e:bf:6a:16:87:af:41:66:aa:75:f0:b7:30:05:3b:52:55:35:
         6c:c0:69:ae:67:0e:0e:1e:66:fe:90:52:63:21:4f:9e:df:96:
         98:36:b2:13:0c:b6:a8:77:33:38:84:c3:dc:47:3a:0c:88:98:
         62:db:c8:eb:c4:22:7a:bb:70:83:83:10:f0:9b:42:95:ab:6b:
         ec:50:c2:bf:80:59:56:4f:b7:7a:85:16:8d:27:88:3c:f2:d6:
         01:53:18:1a:a0:e5:4c:b7:92:46:f5:af:b8:25:de:c3:e7:af:
         23:d9:00:63:6d:fb:33:f0:65:8c:2c:4f:a0:4a:66:3c:89:42:
         e8:b7:12:f1:43:c8:c7:2f:90:14:69:4c:25:7a:40:17:0d:61:
         0b:b7:d8:15:db:be:f2:5a:9e:a0:da:81:57:c8:a7:03:c1:5a:
         0c:fc:4e:e7:ea:f4:bb:94:55:39:2a:c7:47:6b:aa:b1:02:53:
         98:93:b5:5d:a2:61:c5:9e:15:e6:3e:4f:71:3f:fc:22:d1:4d:
         56:8c:0d:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:28:34 2026 by rpki-client