Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft
File:                     T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft (raw, json)
Hash identifier:          PoTrHBogcfv4L8LQMLhVp9BlD6EwBA9jpKbWagAVh9Y=
Subject key identifier:   0E:9C:AA:33:4D:5F:C1:FD:15:BE:78:79:05:80:A6:40:B2:B3:2F:F8
Authority key identifier: 4F:4B:2A:AB:1D:67:F6:D4:C0:58:39:2B:91:37:BD:03:22:8F:7D:2A
Certificate issuer:       /CN=4f4b2aab1d67f6d4c058392b9137bd03228f7d2a
Certificate serial:       019E1C100FC2863CDA301C7FE16B6D9DDAC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft
Manifest number:          09
Signing time:             Tue 12 May 2026 12:01:15 +0000
Manifest this update:     Tue 12 May 2026 12:01:15 +0000
Manifest next update:     Wed 13 May 2026 12:01:15 +0000
Files and hashes:         1: T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl (hash: L6zDX9uXU1A2n17TQRG0V8RXuZYlHdl8LdV0Ga2JiNQ=)
                          2: Yw4KeJZQd4fDI6XgNROc612klZ8.roa (hash: ksqJ6JeWEi7OT1uotIS0TGh2mFny8Jt60myfEmkHw/w=)
                          3: uU9s_hgnyGbwJP-PZge6doa0Dj0.roa (hash: IozYYJrZLQXcxcMBB1MOmIfAjaC0gRCqNhs5hWCQTC4=)
                          4: wZtpSjAJt4SmvvP0YnSsE7TQrWE.roa (hash: 5MBdGENxe3OadAvEH+VeBbaYBKVIJ8gWBwpRTn1w1GM=)
                          5: yclqX8OxwLUeoLNmUdSazDYDII4.roa (hash: Rr2Lk5K8PcJhPAAwTj/NBcChacy1opQ3AXffZPPG+hQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 12:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:10:0f:c2:86:3c:da:30:1c:7f:e1:6b:6d:9d:da:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4b2aab1d67f6d4c058392b9137bd03228f7d2a
        Validity
            Not Before: May 12 12:01:15 2026 GMT
            Not After : May 13 12:01:15 2026 GMT
        Subject: CN=0e9caa334d5fc1fd15be78790580a640b2b32ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4d:fd:d2:fc:6e:1f:67:9c:97:bf:cb:11:1d:
                    5d:19:59:fa:e8:60:fa:98:63:5f:b9:12:7e:84:99:
                    84:df:b7:fc:11:be:f1:96:fe:af:34:2c:9e:42:84:
                    20:fb:7a:a6:2d:35:bf:b0:52:38:99:aa:c6:de:9e:
                    c6:09:31:3a:bb:6f:33:3e:db:d9:30:99:85:78:ac:
                    c1:b4:07:88:3b:04:a7:57:aa:e6:b8:61:bc:3c:b9:
                    62:01:18:58:ec:84:90:f1:bf:e1:64:54:21:78:f5:
                    77:d9:ef:1c:ac:95:b3:65:7a:55:0b:51:bf:b6:ec:
                    66:d7:e4:a3:30:8e:33:eb:64:63:50:dd:ce:ae:0c:
                    8b:ac:6c:48:29:88:37:e2:a2:c1:6f:8c:1e:9f:47:
                    dc:84:4a:44:a1:ca:af:36:9a:ac:80:99:62:5c:64:
                    fb:26:5a:62:70:8a:d9:fe:13:ba:23:11:6b:aa:fa:
                    70:b4:f3:ef:f2:56:1c:47:13:5d:d2:9c:59:38:ed:
                    a6:ae:7a:37:31:36:e4:e9:53:c7:15:c5:ca:1d:fa:
                    0c:4b:02:ba:eb:f1:59:6b:74:44:8c:4e:db:4d:2e:
                    a0:d0:c5:21:53:a2:7e:68:77:80:0a:d9:26:39:5e:
                    0f:bd:04:03:0f:ed:43:2f:74:96:64:ff:48:63:96:
                    3b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:9C:AA:33:4D:5F:C1:FD:15:BE:78:79:05:80:A6:40:B2:B3:2F:F8
            X509v3 Authority Key Identifier:
                keyid:4F:4B:2A:AB:1D:67:F6:D4:C0:58:39:2B:91:37:BD:03:22:8F:7D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:67:ce:2a:e6:65:5c:fe:eb:ee:c9:42:69:74:db:d3:cc:19:
         19:14:1d:6d:61:b3:7f:4c:a6:a0:5d:ac:4f:94:77:91:e9:0e:
         5c:88:ca:95:8d:aa:99:04:b0:93:ed:0a:1a:7f:cf:02:6f:66:
         cf:23:a3:cd:41:5b:e1:49:de:e2:1f:9c:52:51:e7:78:29:a3:
         43:05:22:70:0f:a8:3d:d1:4f:92:93:b7:be:e0:47:2d:c5:a3:
         ff:bd:ae:a3:17:c3:b6:37:b8:e8:34:83:2a:24:68:9b:93:5f:
         ca:df:13:5a:0f:f1:e3:e6:ef:9c:4c:b3:c9:68:20:5d:6f:e7:
         2d:9d:c9:6c:46:aa:66:6e:80:d5:93:71:07:76:3a:f6:f8:aa:
         ec:a1:68:74:dc:a7:ef:cc:dc:dd:06:5a:54:a5:3d:ca:68:1a:
         28:a9:8c:40:6c:5e:84:0e:05:b8:46:01:d2:a3:ee:f7:fa:b2:
         5d:d7:78:29:53:cd:0e:60:7b:ea:c2:5e:20:b1:4f:fb:fd:7e:
         08:e4:d0:37:ad:c4:25:a0:0f:ab:3d:c0:9f:ed:80:9e:62:89:
         bc:a1:1a:10:78:7a:eb:93:2c:f0:88:a8:0f:3f:a9:06:c4:2c:
         f4:88:1c:26:b4:1e:a3:e1:ac:ff:3e:f2:ab:4a:66:d1:30:1a:
         2d:8a:2c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:15 2026 by rpki-client