Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
File:                     IJPjg7LMUtXsow_rEml1k8nHiKA.mft (raw, json)
Hash identifier:          wCks80cI431aX8sAT3DAIdx6NaFg2zjLqdoAzOKNqBM=
Subject key identifier:   4F:9F:5D:F8:34:AE:66:D1:ED:DE:9B:30:28:7C:6B:D8:1A:E6:8E:17
Authority key identifier: 20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0
Certificate issuer:       /CN=2093e383b2cc52d5eca30feb12697593c9c788a0
Certificate serial:       01A089B1022C27102D85E441A8D8AF1700A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
Manifest number:          1A47
Signing time:             Thu 10 Sep 2026 05:01:13 +0000
Manifest this update:     Thu 10 Sep 2026 05:01:13 +0000
Manifest next update:     Fri 11 Sep 2026 05:01:13 +0000
Files and hashes:         1: IJPjg7LMUtXsow_rEml1k8nHiKA.crl (hash: PQsG2teZEHegBwFGYRTPAIXxyOIDtkEt8ypQT8hheHQ=)
                          2: UhcVOrWI94PD7J8NZ396e7oTXmQ.roa (hash: le2/ey5cYL9OHx+rHl459Ml2HcRFUdgLBFJPfGYggHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 05:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:b1:02:2c:27:10:2d:85:e4:41:a8:d8:af:17:00:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2093e383b2cc52d5eca30feb12697593c9c788a0
        Validity
            Not Before: Sep 10 05:01:13 2026 GMT
            Not After : Sep 11 05:01:13 2026 GMT
        Subject: CN=4f9f5df834ae66d1edde9b30287c6bd81ae68e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:77:1e:08:73:a9:41:4f:18:3c:eb:6b:55:
                    b0:5d:69:43:c9:aa:e7:40:15:ca:3f:55:b5:9f:8c:
                    cc:b5:2e:91:61:d5:5c:1b:bf:03:c5:00:c6:e4:b2:
                    9b:a7:7e:d4:a5:2b:a8:5a:c2:52:b0:55:d0:6e:9c:
                    39:61:cd:47:6e:e7:0f:99:c8:05:9c:aa:a0:83:96:
                    98:00:97:11:b8:ff:15:43:3a:48:c6:41:c4:67:43:
                    b0:00:86:25:c8:46:60:6a:38:6f:a0:81:a6:a7:62:
                    cd:f8:01:dd:48:f9:5d:a9:87:f9:9e:e2:5d:7e:57:
                    0c:d1:b0:d0:3a:2d:6c:49:c3:2a:53:04:7b:61:3d:
                    b6:ae:97:d0:31:f2:b8:8b:74:17:89:0a:2f:43:a6:
                    30:67:0d:f7:a8:45:64:42:9a:3f:bd:8a:e2:28:d5:
                    59:e4:62:79:87:70:55:b6:30:4c:99:e2:0a:a3:4d:
                    e3:df:de:f4:f7:0f:21:06:8d:86:ff:70:08:62:aa:
                    ca:86:41:c0:36:dc:4e:bd:e5:fb:a4:71:75:4f:b7:
                    ac:25:27:eb:f2:ed:8d:67:d1:17:19:1d:18:21:26:
                    cb:9e:3c:0d:1f:0a:fa:7e:02:48:60:68:40:1b:be:
                    a5:aa:9e:9c:28:68:ee:d9:11:fc:7e:3b:42:78:4c:
                    5f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:9F:5D:F8:34:AE:66:D1:ED:DE:9B:30:28:7C:6B:D8:1A:E6:8E:17
            X509v3 Authority Key Identifier:
                keyid:20:93:E3:83:B2:CC:52:D5:EC:A3:0F:EB:12:69:75:93:C9:C7:88:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJPjg7LMUtXsow_rEml1k8nHiKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/973136-09ab-4c83-8f3c-04534ebce35e/1/IJPjg7LMUtXsow_rEml1k8nHiKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ea:e7:a8:69:60:d4:93:6b:ee:de:f5:32:c2:81:9d:d6:6a:
         84:e0:2a:2a:cf:a5:91:ef:c1:3d:54:73:ec:cb:69:f7:0e:e7:
         90:76:c1:87:d2:3f:8a:82:48:88:78:6e:a7:cd:1b:12:9c:5d:
         17:a1:a7:57:63:14:26:34:d1:f6:49:2b:7b:b4:aa:80:1a:fc:
         3d:fa:17:9f:37:b2:be:9c:8a:6c:35:8a:a3:e3:64:3f:82:e9:
         22:40:b3:fb:72:97:3d:7c:1b:6c:6f:f2:35:4d:3b:29:a7:44:
         e6:bf:29:89:b0:31:75:a0:a2:30:26:9a:b9:cd:5e:f6:bc:54:
         c2:dd:fc:a9:f7:f1:fe:c1:e7:af:1d:bc:93:44:e7:c9:35:3c:
         13:3f:bc:27:0d:35:60:1b:a1:34:b2:98:ce:f3:69:f4:08:85:
         53:0f:03:d1:55:02:56:93:1c:3f:fc:dc:f6:3f:46:66:83:67:
         32:01:86:23:21:32:90:15:ad:7e:a7:a2:e2:64:c2:37:87:b5:
         88:6f:29:01:5d:a1:49:54:0d:ad:22:13:f0:f6:6a:81:6f:89:
         a2:c7:7b:77:c5:e8:2f:00:a2:13:aa:66:7c:ff:49:e1:e9:8c:
         fd:ba:77:bf:b7:9a:98:2e:52:e3:71:ab:99:68:7a:24:bd:f2:
         13:79:d5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:32:09 2026 by rpki-client