Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
File:                     H8SSerGUrhI3_eLTvvaQOIk_DcU.mft (raw, json)
Hash identifier:          VllLs4je7vkmtcE6QUWRhUsMAdZ1HDlVBsJ9cCFS26U=
Subject key identifier:   06:3F:61:B5:24:11:D1:58:F2:5F:B9:BD:EB:F5:A6:7F:91:DF:D9:32
Authority key identifier: 1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5
Certificate issuer:       /CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
Certificate serial:       01A0D5DE35B7402C4E2C1BAF7F939A9024F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
Manifest number:          14F8
Signing time:             Fri 25 Sep 2026 00:01:44 +0000
Manifest this update:     Fri 25 Sep 2026 00:01:44 +0000
Manifest next update:     Sat 26 Sep 2026 00:01:44 +0000
Files and hashes:         1: 2sAFd_2T-QSzjwb2W27Kt8rE6fU.roa (hash: dj9SKHwvFkDv++RY82DTGyA13Fg+Qhu+MtqHoiJGTCM=)
                          2: BKvtDw_ImhwxFNI1ekkbNYkUXwk.roa (hash: /VZVAuv74zBcHkw4LlrMbR/O9CrhLBCzyGy9tiiwFV8=)
                          3: H8SSerGUrhI3_eLTvvaQOIk_DcU.crl (hash: 2KPHZVKZMrhzpgo/F/HrOVFTan+yIOSzeI1FlQrF8CI=)
                          4: L-HaZX9usmOHR6Pjk5otTPA1E78.roa (hash: /WFLFbwadanJe6aEYwFifcAD7b8Cq5KJxqbQIlZqM3E=)
                          5: UNn5xwOI4pjWBM6seGSkeIWT0Nc.roa (hash: t97vMIzTWrcDPs3sy3oo5iwIaLusws7qeRkc875GNOM=)
                          6: ftINbgTGX7o6dou2oYKs0I7El3k.roa (hash: jNNcSKLkF+5io94CcEYFYhsKdZJ9Jwyes5nzKJmJiP8=)
                          7: iyhjc5phndkfHPAS-mJffX2oKQ8.roa (hash: An3uftXXHdR16RwQ6iTIEtnf1eCcuaLyKpysOrsvtMU=)
                          8: rCmOJaiPm10i_Ntu2MdzaI9ze6U.roa (hash: swhB5WKc0D5wVrqnsiWG0FRIgd/l0/nxiZL6cviDAgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:de:35:b7:40:2c:4e:2c:1b:af:7f:93:9a:90:24:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fc4927ab194ae1237fde2d3bef69038893f0dc5
        Validity
            Not Before: Sep 25 00:01:44 2026 GMT
            Not After : Sep 26 00:01:44 2026 GMT
        Subject: CN=063f61b52411d158f25fb9bdebf5a67f91dfd932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:06:d0:df:67:63:74:e5:35:1e:7d:8d:a8:
                    fd:60:d4:1a:57:8e:83:98:87:c8:f5:3a:7c:7d:69:
                    4d:46:f5:c9:67:67:06:11:4c:d4:95:b8:3b:06:f6:
                    12:78:95:8e:3b:dd:b7:f6:d3:45:e0:01:0f:ff:77:
                    b1:bf:6c:4a:d8:9d:f7:c5:dd:41:e5:25:c6:2e:83:
                    46:c3:64:d0:7a:e9:ea:df:96:08:c7:1e:cd:8d:7d:
                    38:da:8b:f2:27:1e:1f:56:52:33:61:f2:26:52:53:
                    97:24:76:34:3f:48:45:d5:df:c4:7a:30:5d:b1:d3:
                    28:9e:cc:ae:2b:7c:c2:fe:54:8d:6e:95:17:a4:35:
                    db:08:5c:ce:7d:69:68:cf:bb:12:21:0d:2e:b8:b1:
                    cc:11:4c:6d:4a:a4:97:dd:bf:d5:2e:22:3d:34:e4:
                    f7:f9:3f:70:8c:06:75:d5:62:c0:00:0f:fc:b7:eb:
                    b5:a5:c0:5e:d1:e8:23:1f:3d:1e:c8:44:a5:a1:b3:
                    06:ad:71:c2:cc:d9:ed:39:5c:b9:46:83:d1:81:8b:
                    24:fe:31:44:14:11:87:9a:a5:3f:bd:22:04:78:e8:
                    78:bd:cd:72:ee:54:36:78:a7:e1:35:a0:5b:0c:2a:
                    7a:06:a8:3a:70:c0:11:5e:00:21:1b:d5:56:7a:f8:
                    c1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:3F:61:B5:24:11:D1:58:F2:5F:B9:BD:EB:F5:A6:7F:91:DF:D9:32
            X509v3 Authority Key Identifier:
                keyid:1F:C4:92:7A:B1:94:AE:12:37:FD:E2:D3:BE:F6:90:38:89:3F:0D:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8SSerGUrhI3_eLTvvaQOIk_DcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/943d5d-560c-4314-af82-8b8a01bd7414/1/H8SSerGUrhI3_eLTvvaQOIk_DcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:93:20:87:9d:fc:2d:ca:7e:04:65:ab:b0:49:2e:67:9c:b9:
         c0:b9:15:33:c7:2c:27:97:2d:89:de:d9:58:a7:6e:85:6f:ad:
         19:f1:00:8a:94:c2:0b:c8:f9:4e:29:1e:88:a7:61:ef:15:ec:
         c4:70:00:0f:cb:3a:0c:5d:ba:f2:e1:93:2e:8e:64:36:1c:6d:
         f3:db:58:bd:3d:b6:fb:d3:a1:2e:77:b3:dc:4d:a0:ad:b4:55:
         bc:90:bb:e7:ad:75:f8:78:76:f6:6f:4e:3f:40:03:50:37:e4:
         06:56:9b:d3:f8:0d:20:08:68:d9:d4:54:2e:50:84:26:1b:04:
         2a:4e:c3:12:a8:68:7d:5b:88:60:08:b3:19:8b:68:11:0c:33:
         54:e5:62:47:bc:e0:01:0b:c1:22:81:e2:6e:b9:c2:ac:57:4b:
         0b:46:b5:a6:54:14:4e:c1:1e:74:05:b7:7a:74:07:6b:e3:9f:
         c9:f1:11:d3:bd:e3:0b:d0:cf:ad:e1:17:ae:0b:94:d3:19:52:
         77:9a:dc:a4:a6:78:1e:25:68:8a:8f:89:df:fe:d5:f0:7a:74:
         54:dd:dc:30:37:ba:15:ce:5f:83:60:17:24:a3:78:e3:f2:c2:
         f2:2a:48:8c:1f:c8:f3:c2:c2:85:d6:32:e6:4a:9f:d1:14:d4:
         09:f0:b4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:30:42 2026 by rpki-client