Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File:                     1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier:          bGAA9aqqCSyDiuQ9KJHBoatStK2yVQRN8EwYLoNBiwc=
Subject key identifier:   C3:95:72:50:36:F9:9A:5C:BF:75:CF:D9:83:FE:C5:ED:04:17:37:A8
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer:       /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial:       01A0DF1889D878A4454B68D0DBD8CA55582B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number:          1115
Signing time:             Sat 26 Sep 2026 19:02:02 +0000
Manifest this update:     Sat 26 Sep 2026 19:02:02 +0000
Manifest next update:     Sun 27 Sep 2026 19:02:02 +0000
Files and hashes:         1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: cP8U//Lt9kTuauxOD3g36rc3CHIwquR6H4A6RkbzybI=)
                          2: cm7yc5ocW07wElUQnj8sV7yvJ1E.roa (hash: sgiYRfXKAqpRMQa7LkE6X1z2YPcOejwF3EEFNRme46s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:02:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:18:89:d8:78:a4:45:4b:68:d0:db:d8:ca:55:58:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
        Validity
            Not Before: Sep 26 19:02:02 2026 GMT
            Not After : Sep 27 19:02:02 2026 GMT
        Subject: CN=c395725036f99a5cbf75cfd983fec5ed041737a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:23:2d:51:b2:28:d9:43:ef:d1:2d:42:64:
                    86:58:51:33:21:00:3a:2b:56:a5:55:76:6e:e3:ed:
                    5e:07:77:c5:78:4b:be:a2:7a:4e:4a:4d:89:be:3c:
                    df:4e:d8:94:9e:db:23:7a:ba:84:a2:f1:8a:bd:7d:
                    c9:bc:c7:1b:c1:52:a7:d0:25:1f:04:b9:c4:c1:7b:
                    08:a4:50:bb:94:56:4b:ae:70:b2:c7:38:5a:03:3f:
                    b3:fc:89:58:d5:a2:cd:04:27:fd:c9:c8:55:1a:c6:
                    ca:4c:26:00:8a:d6:03:92:90:42:fa:8c:dd:7b:28:
                    bb:6c:55:54:23:20:48:fe:7b:98:c0:60:c4:bc:0b:
                    c7:b8:7e:59:2e:d6:e0:f9:d5:53:35:ad:ae:45:c0:
                    ce:73:6e:34:a9:65:54:08:e5:cb:85:66:57:e2:69:
                    dc:67:d2:81:23:b5:2a:af:36:be:1a:e2:1c:54:21:
                    c9:68:a7:98:97:11:a5:46:cb:9e:df:9a:85:22:0e:
                    34:b7:d5:8b:e2:a8:45:8d:8e:bb:27:d8:7a:46:80:
                    a3:8b:db:78:ab:c0:c9:ed:f7:75:d4:2d:60:ac:8d:
                    c0:6f:56:d2:ea:ab:1a:3f:99:92:a6:14:79:77:f6:
                    15:53:3f:ed:ce:23:c4:ed:81:33:0d:39:bf:97:d2:
                    b8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:95:72:50:36:F9:9A:5C:BF:75:CF:D9:83:FE:C5:ED:04:17:37:A8
            X509v3 Authority Key Identifier:
                keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:13:1d:6c:2c:73:09:53:3e:e0:2a:58:28:b5:ed:d4:7b:08:
         d2:ee:62:ec:00:fb:04:db:e8:75:90:4e:1a:83:55:52:ec:26:
         1c:39:50:3b:5f:79:42:4f:f1:47:e2:89:91:3e:37:cb:af:8f:
         ec:ce:07:67:c3:82:e8:e3:2a:a5:a8:12:5c:a4:a8:13:f4:8f:
         ac:2f:10:05:f8:a6:df:33:6b:6c:48:4a:0a:f3:aa:b9:3d:3c:
         41:c5:5b:0c:4a:5c:75:8b:e4:40:e9:4d:0a:02:43:ce:cf:10:
         44:07:c6:bf:42:c5:a0:ed:e8:51:cf:dd:8f:8a:6d:4d:83:e9:
         aa:6d:09:d9:22:bf:87:77:0c:4b:f7:f4:e3:d3:ac:9c:b2:71:
         e4:1e:65:51:01:b6:be:6c:f1:87:20:a6:ac:f7:06:75:f6:d5:
         6c:0d:ba:bf:5a:73:4e:02:34:d0:24:47:24:c1:30:94:61:a9:
         f8:65:af:7e:22:54:ae:9a:87:9e:07:1b:88:0a:7d:be:ff:fc:
         24:97:f5:79:e0:8f:48:9d:35:06:5e:70:f6:91:f9:32:03:4a:
         bd:8f:ff:94:01:af:5d:2f:43:f8:95:a7:3a:e0:c4:1f:fe:20:
         76:73:06:6c:f2:5d:49:65:fe:fc:f3:ce:b3:7f:f7:c4:84:59:
         a2:6b:94:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 01:20:01 2026 by rpki-client