Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
File:                     Xo0HtF99gxJMn4wPrAO-wCRos34.mft (raw, json)
Hash identifier:          6z6z3Z9w9Y3Ec0GEQz1PMqqqg3/0j0vzq4zWu9doxqM=
Subject key identifier:   BF:A1:44:5D:5B:48:02:0A:15:41:C9:8F:87:F1:25:AA:41:A0:9D:E2
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Certificate issuer:       /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial:       01A0D0EDB8EA7130862764FA5FE4319B3860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
Manifest number:          1A8A
Signing time:             Thu 24 Sep 2026 01:00:35 +0000
Manifest this update:     Thu 24 Sep 2026 01:00:35 +0000
Manifest next update:     Fri 25 Sep 2026 01:00:35 +0000
Files and hashes:         1: 5Hw5SCG7_OPw7F7WvcmHt1ubypc.roa (hash: SMRdVTfHclZq4V+gvOodEyeG5zAH5sDMph36bqmt3rk=)
                          2: AtV2hA3YXGqznUtgR3uB6bOY8lI.roa (hash: E9jIH1WdWmHG5Hqaca5c+6ilzJbhu15ZC+JxJ/GcG+0=)
                          3: STKH0GmYkagldfyopz-70YJ69EQ.roa (hash: h88I+byL++CNYEweLeezPhZiJJxRIwysZUnB4MEC57E=)
                          4: WQ55TI7O_Y3_x9hkYSvF2UvokSE.roa (hash: TZOmAdpezSY7WR8DK0sxR8J5sP9pIOwu7JtZmeFi+dA=)
                          5: Xo0HtF99gxJMn4wPrAO-wCRos34.crl (hash: Qmm0bB/J/+7axG3lwhpPzJmH+3OAm1BIp+/mXyoyBsc=)
                          6: gvzfKPjwNxS-AsBIh7ZgA5tTa0Q.roa (hash: j8wlfHeXoBqn/3pP04ScQRvLSMC6Ag5BftKcYosNfBM=)
                          7: hgl809tjaX7Gbv4DItgm3ScJV_4.roa (hash: 1spmr6hLWhe0MEAFi9Vr2mFMBf7qQUqSQroJeyohJqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ed:b8:ea:71:30:86:27:64:fa:5f:e4:31:9b:38:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
        Validity
            Not Before: Sep 24 01:00:35 2026 GMT
            Not After : Sep 25 01:00:35 2026 GMT
        Subject: CN=bfa1445d5b48020a1541c98f87f125aa41a09de2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f7:14:99:6a:2b:6f:8a:76:cd:92:ec:03:54:
                    9c:ed:dd:36:38:56:b8:ed:ae:51:fd:c6:e5:dd:aa:
                    17:0d:98:a2:45:2c:c5:03:4a:0d:45:76:ae:9c:a4:
                    71:b8:c7:20:53:ab:ff:d2:b8:0b:50:0c:e1:f8:0b:
                    78:d1:c6:16:5a:8a:d6:89:06:6a:fe:a9:3f:4a:dc:
                    15:fa:57:39:c9:8d:11:76:85:4e:91:eb:9f:a5:90:
                    b1:f8:03:d0:bd:e3:ca:ea:f2:59:ad:a2:18:29:10:
                    66:2a:af:57:8c:ef:63:61:69:49:94:4b:81:7f:f2:
                    d5:cf:87:c0:b0:d8:92:b5:80:4c:eb:92:5c:0d:2d:
                    44:20:e0:85:d8:2f:6a:c4:60:d6:62:7a:b1:9c:e0:
                    2c:49:c4:e5:16:5e:e3:11:f2:58:95:91:a5:07:86:
                    0f:44:9a:9d:74:b7:08:f5:10:56:27:eb:09:c3:24:
                    60:d4:dd:1c:3c:95:cf:dd:fa:3c:01:82:bf:b6:e6:
                    e7:49:9f:03:45:03:dd:11:14:8c:37:9e:05:06:e5:
                    45:33:04:b6:d1:12:c8:7e:ac:15:35:92:76:ce:6a:
                    7e:0c:76:97:f3:9a:cd:ac:2b:01:b8:19:ad:f5:f9:
                    75:2a:19:f3:ea:26:6f:a8:f7:1c:91:4a:aa:e9:e0:
                    5c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:A1:44:5D:5B:48:02:0A:15:41:C9:8F:87:F1:25:AA:41:A0:9D:E2
            X509v3 Authority Key Identifier:
                keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:da:0b:a7:53:4f:15:df:87:9b:43:e3:95:d7:47:1c:f7:e3:
         02:64:77:6d:c1:94:2d:52:6e:fa:f7:96:38:8f:73:58:9e:15:
         4b:02:2d:23:a0:91:7b:bc:1b:38:ec:3f:0d:c6:ee:51:28:1b:
         75:bf:6c:58:2f:ac:7e:ff:07:75:1f:68:c3:a0:a6:24:53:b0:
         ed:ef:c8:f0:23:b7:16:69:7a:e1:f2:69:4a:40:06:48:90:b7:
         3e:ed:40:02:23:7c:1f:9a:96:a7:51:1a:af:80:a9:cb:2d:18:
         79:6b:e8:26:02:b3:57:87:b4:95:9a:e0:3f:41:8a:2c:6e:7b:
         bc:59:e9:20:3d:7d:7a:86:a8:cb:62:fe:7d:c2:a5:c8:db:b1:
         dc:f8:80:9e:e1:d6:04:44:ff:9b:18:bb:66:10:30:90:27:cf:
         21:02:43:57:38:af:aa:18:d5:32:e0:81:f0:40:81:e8:f2:48:
         f3:2b:31:83:ef:40:f0:3c:07:07:42:7f:b0:1f:88:60:32:5d:
         0d:9a:40:5a:f4:9a:47:76:39:de:48:82:49:7c:f1:81:b6:91:
         43:97:77:f5:61:aa:91:56:b8:5f:1d:ea:c1:01:4e:de:79:d8:
         36:22:51:5d:7f:08:60:c4:c3:78:58:ef:b0:bd:58:40:9c:1b:
         90:c1:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:12:52 2026 by rpki-client