Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
File:                     mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json)
Hash identifier:          P9+A7uXiCRRADdfWs8nbEoFOeJJXSmeH0+nA8oY0QsY=
Subject key identifier:   D1:FF:4B:C4:1D:EB:E0:21:54:B3:96:9C:D4:CB:6B:A4:31:83:90:8C
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Certificate issuer:       /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial:       01A08C7BE14A02A64B544245D977063198B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
Manifest number:          1A70
Signing time:             Thu 10 Sep 2026 18:02:03 +0000
Manifest this update:     Thu 10 Sep 2026 18:02:03 +0000
Manifest next update:     Fri 11 Sep 2026 18:02:03 +0000
Files and hashes:         1: 0D14gN2WiBa54cFbuKlrQUOrf8M.roa (hash: 2wB51bMRZ+T+HK/B9Edc9OpYAvR825v+i0duj5mr6/E=)
                          2: 8alVrjrWY968nNzLuKlTYJqWO5s.roa (hash: n3cPQVf1JqZIIBHl4vdLfSmHsel7C5NhWsG2ov9U0fE=)
                          3: AfDFx5CztN26DfCfFCFVeLtbfYk.roa (hash: 6hydPd19IUZH5tUXaWmgrdl0J31zdN4Hkjua9Sst5JQ=)
                          4: Fe9Xj78mLtBv56f9jO8i3r-s8qM.roa (hash: wNTnsyJdnh8/6vp2voiL35CQyX5QiogzfMfKCFUPFDM=)
                          5: Go3pOTuap2_fsOG2Cy2Y4VT2pN0.roa (hash: 0oyx4eIX+vmWlDNgh2kGWbDg44/BIpYISvXYVe/lRmI=)
                          6: OsaS-W05X64hVseLWVJ98CCH4bg.roa (hash: ZOdWLGxsnjVKDfjbUq3CekoJyLOWeoL5aqMKIGP91V8=)
                          7: ZGek-6HBksI7UR516vE0gk5R-L4.roa (hash: t0Obkj8sK06HaBNs4kmLvSB4hxDxnIEARfCn1Ni3RSc=)
                          8: axdSVqIzRJIZuL4bUaXgsCZR0GA.roa (hash: o1y1RiYLt8sTd8RRJ89cjZcmfxt/0UhXCW4mXlZ2wPw=)
                          9: cY5-1Q-gCudDvvsjntcM9LHNJ5E.roa (hash: 3JUexyB8UKFK23yZaQJY7snnPpz1rOPKcvmbdq5kUeg=)
                          10: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: X7ouhg31sJ7B71dOzg/9AwxRrq1juZYKmMPSe6lj2rg=)
                          11: nWdXzo03Nv5euYjJfrUQ8HTtaRI.roa (hash: 4zzXn53ZU7R+himiAEAxl3zTsYnZiM207WqrGti69uY=)
                          12: pJv_j_K2EgBCPVKk6BgeU9sHfR0.roa (hash: FZmisnstiTUOgcPXpHL2ZJ5p2aJPRBsk+SIz8t4Ftlc=)
                          13: rQ8ohk71V4ClseY7wRU6uUdfWw0.roa (hash: +Un59zWJ5v19ef4G1vmVABla4G6FDYt+TwXokRhf32c=)
                          14: t6LGbWPehA5-4bGA_0I8d0ATs2A.roa (hash: VJvhwVfSb8eKnL2DGvlH1c5C6AHV73YvtD/x841o6yw=)
                          15: xpxQq-XYLTeZi1RJOWi2RhOZm6M.roa (hash: stugu/O0ZbeQlykuDSWoq5P19xqk7ytCQZZAgWlL1aI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 18:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7b:e1:4a:02:a6:4b:54:42:45:d9:77:06:31:98:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
        Validity
            Not Before: Sep 10 18:02:03 2026 GMT
            Not After : Sep 11 18:02:03 2026 GMT
        Subject: CN=d1ff4bc41debe02154b3969cd4cb6ba43183908c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:19:97:e1:96:9c:85:5a:8c:65:cc:79:a7:75:
                    50:41:d5:0c:32:6e:1f:b1:08:05:a8:3f:ca:68:42:
                    4f:83:ee:75:35:d4:37:24:de:a0:f4:02:0a:9b:a2:
                    69:28:15:b3:77:82:14:08:82:62:42:24:c0:91:5e:
                    8b:a5:4c:8d:d5:51:23:e0:cb:db:e0:1b:ba:eb:c5:
                    61:ed:0a:81:7b:88:cd:69:41:cf:4e:4b:21:c1:e1:
                    1f:d1:b2:de:f8:68:cc:dc:54:92:66:dc:c4:05:d8:
                    de:ff:b7:5d:4f:44:25:a1:28:50:85:55:88:83:f7:
                    bb:e0:6a:04:2c:61:dd:63:87:4e:d3:1c:af:54:29:
                    94:21:a6:6d:eb:df:dc:62:7e:4e:1f:00:d6:90:49:
                    ff:1b:43:65:03:36:c7:1c:75:78:f7:6c:62:eb:65:
                    ce:c5:73:89:54:e0:bf:d6:b0:db:50:83:0e:8f:51:
                    92:09:87:1b:60:f9:74:bb:d5:69:92:11:05:59:37:
                    95:c4:64:a9:67:77:51:28:bf:54:8d:63:39:c5:66:
                    80:5e:3b:f0:19:07:2d:7e:97:6f:4f:81:3a:28:38:
                    66:be:74:57:4a:f4:83:99:93:d3:f9:fa:1a:79:8f:
                    5d:c5:8d:d8:bb:fe:ee:ee:6e:9e:a5:36:7e:04:5d:
                    00:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:FF:4B:C4:1D:EB:E0:21:54:B3:96:9C:D4:CB:6B:A4:31:83:90:8C
            X509v3 Authority Key Identifier:
                keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:7c:61:19:00:af:cb:95:23:e9:41:3e:78:28:ca:32:a5:34:
         6a:39:22:13:90:f3:5e:a0:47:0c:ed:ee:b2:b3:7d:15:e2:f1:
         05:d8:27:9b:c9:83:f5:54:06:13:46:05:e1:55:34:b7:f4:a9:
         aa:42:cb:bb:5e:fa:2c:c2:71:f1:ca:5f:87:67:75:3d:c7:96:
         c9:4c:cf:e3:97:07:68:c9:57:b4:61:63:bd:0d:4d:ee:2a:56:
         56:34:d0:86:1a:bd:4d:23:ae:7e:cd:a0:84:1a:9f:bb:15:aa:
         39:44:15:9c:5e:38:54:f5:33:5d:da:8a:bf:5a:53:2f:0a:e0:
         d0:80:76:0e:fa:36:1a:8d:08:32:c5:6f:48:6b:4a:4e:ae:3d:
         c9:26:2e:a8:43:14:3a:1e:93:0e:b9:24:62:64:3f:e8:a5:03:
         a3:a6:33:be:8f:2f:21:e3:a7:34:21:14:7d:9c:88:13:e6:13:
         ea:01:ac:a1:1b:55:7d:e8:0d:32:e4:4f:8e:87:f6:34:d8:3f:
         41:69:32:03:24:0a:db:31:a7:e2:3f:63:68:66:d4:d0:4a:ae:
         4c:67:f1:e0:61:e9:e5:ce:b3:78:43:cf:d4:77:7c:e5:70:a4:
         cd:95:57:a1:1d:10:32:b3:03:c1:3f:2b:9d:3d:ad:5b:1b:06:
         64:a7:ec:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:51:42 2026 by rpki-client