Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
File:                     OS9u5u40bDGRK3Yw2rFM5TxODJk.mft (raw, json)
Hash identifier:          BfoeB2LQ+WtqdJeIoHdtdMgBa4LrVOGJVQWBB1VKTSk=
Subject key identifier:   01:4B:E8:92:EA:84:1F:99:83:14:0A:FF:3D:D5:01:6F:AD:C8:2B:DD
Authority key identifier: 39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99
Certificate issuer:       /CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
Certificate serial:       01A0DCBB616D9F500A2AAA8AAD3FFD1E300C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
Manifest number:          07B2
Signing time:             Sat 26 Sep 2026 08:01:02 +0000
Manifest this update:     Sat 26 Sep 2026 08:01:02 +0000
Manifest next update:     Sun 27 Sep 2026 08:01:02 +0000
Files and hashes:         1: 9vRNZYAcu3J7q-V6fjaL6Y7WwNQ.roa (hash: nfJKDLiIVXsW1v9mjsY5wcJJrVmcYRjgNt39o1ubTs4=)
                          2: OS9u5u40bDGRK3Yw2rFM5TxODJk.crl (hash: G3Pr+vkKw6g8bxnMmJD5ewq+nR1rOBtN+rcwtzB6Ymg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:bb:61:6d:9f:50:0a:2a:aa:8a:ad:3f:fd:1e:30:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=392f6ee6ee346c31912b7630dab14ce53c4e0c99
        Validity
            Not Before: Sep 26 08:01:02 2026 GMT
            Not After : Sep 27 08:01:02 2026 GMT
        Subject: CN=014be892ea841f9983140aff3dd5016fadc82bdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4e:8f:59:50:d1:dc:78:39:fb:60:e6:6a:d2:
                    de:1c:6d:a1:b8:10:34:d9:18:c5:d4:fc:10:92:9c:
                    b9:bf:e2:e5:5f:13:31:65:19:24:9e:62:3b:27:b0:
                    0a:49:73:fe:ef:2d:a3:61:86:de:94:25:68:11:50:
                    52:d6:55:0b:28:cf:80:22:ca:44:48:98:29:42:6c:
                    19:75:af:4f:48:4a:03:5f:32:7f:91:49:b9:8a:0e:
                    fa:f1:11:4b:ee:e4:3c:b9:a9:54:f3:2d:b3:72:ef:
                    c1:61:67:00:bb:d9:f8:e1:dc:d0:42:30:a3:fe:de:
                    37:d0:37:fa:48:d6:dc:d5:a8:1d:33:92:d4:90:84:
                    77:bd:73:66:08:16:66:3a:0a:54:56:20:e1:0f:3e:
                    d2:14:cd:41:d6:82:11:17:e3:5d:a2:93:81:01:14:
                    42:fe:9e:9a:02:c1:3b:86:a5:92:7c:3d:2b:95:41:
                    1c:72:81:e5:dc:ec:c8:11:05:43:81:21:b3:95:8e:
                    8e:38:28:06:5f:21:b6:4d:38:b8:8c:db:d7:4f:32:
                    3f:ab:71:07:df:ce:a4:15:a2:8f:9a:0b:7e:12:3a:
                    46:20:5e:95:79:22:35:fa:04:a5:8c:5c:d5:af:63:
                    6d:c3:10:2c:45:ae:31:56:1d:3f:40:a6:41:36:a3:
                    07:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4B:E8:92:EA:84:1F:99:83:14:0A:FF:3D:D5:01:6F:AD:C8:2B:DD
            X509v3 Authority Key Identifier:
                keyid:39:2F:6E:E6:EE:34:6C:31:91:2B:76:30:DA:B1:4C:E5:3C:4E:0C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OS9u5u40bDGRK3Yw2rFM5TxODJk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/45d97e-40fe-47e0-b2e6-8a72a1b6af85/1/OS9u5u40bDGRK3Yw2rFM5TxODJk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:92:ff:c3:7d:f1:0a:32:c8:f6:d4:af:22:5b:db:41:9d:65:
         82:d7:92:6e:d0:43:d0:71:6f:9a:c6:36:a4:e9:99:21:14:4f:
         40:ab:f0:4f:0f:1d:21:55:53:ef:53:e4:e7:0b:95:34:5d:d1:
         dd:92:4a:80:01:d5:9a:23:f2:ba:9f:31:6f:b4:bf:b5:ef:38:
         6e:e4:a9:70:8c:eb:43:52:71:c5:5b:e5:47:0e:f4:c6:21:49:
         62:12:24:16:52:a6:1b:a8:ff:d3:1f:c5:06:7c:f8:c4:55:df:
         e3:53:21:7c:74:97:d8:c7:29:a0:c1:39:7b:10:88:df:ac:74:
         35:94:79:98:f9:66:67:89:a4:c9:5e:65:ff:64:5f:e3:64:fb:
         b2:ea:7a:ef:ce:2e:4d:7d:de:0c:eb:3b:ac:54:c3:47:fd:9b:
         e0:1a:3d:fc:92:5e:73:c3:4c:bd:09:37:0f:ce:a2:9c:dc:1d:
         31:55:7b:72:65:e9:3f:0c:d2:27:21:ff:4c:0b:5e:ea:9f:5f:
         e2:39:ff:1b:04:ba:f5:af:1d:bb:a3:2c:88:8d:23:a6:85:c0:
         4e:97:08:92:c0:70:d1:cd:ac:15:47:2e:99:31:f2:d2:e7:76:
         ba:93:b9:8f:13:14:9d:ae:a5:ea:82:2d:d1:27:ed:8e:82:f7:
         4a:b7:95:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:31:28 2026 by rpki-client