Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File:                     8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier:          avl0nrNoOB3HaX+B20YFKo1HMCo9fzLpc4ixz8xXsbw=
Subject key identifier:   41:CB:5C:39:6E:14:C4:8C:CD:ED:E3:3F:28:6E:1C:D2:0B:B3:BC:AD
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer:       /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial:       01A0ED78C6E48A9B6DEF4E1F5EBB5EE2F461
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number:          1172
Signing time:             Tue 29 Sep 2026 14:01:50 +0000
Manifest this update:     Tue 29 Sep 2026 14:01:50 +0000
Manifest next update:     Wed 30 Sep 2026 14:01:50 +0000
Files and hashes:         1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: xHRiGrw31d1rMS6NYPfmqmfmhrUl6zApELFthvfJz8o=)
                          2: cnrJlx8I7NXdM3vCOpIC2LhJ_Y8.roa (hash: PEnciQKvDww0pGR7AqTRA4YTGpE9TeNFX/n52nV6jQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ed:78:c6:e4:8a:9b:6d:ef:4e:1f:5e:bb:5e:e2:f4:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
        Validity
            Not Before: Sep 29 14:01:50 2026 GMT
            Not After : Sep 30 14:01:50 2026 GMT
        Subject: CN=41cb5c396e14c48ccdede33f286e1cd20bb3bcad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:51:c6:ed:f3:08:86:29:fe:b5:0e:43:66:5d:
                    88:53:2c:10:48:28:7b:63:eb:d8:4d:71:d4:eb:6e:
                    d3:73:91:08:00:a8:92:b1:cd:13:9b:14:63:16:b0:
                    9e:4a:a4:c7:63:f3:b8:7a:1e:d1:08:61:14:28:bd:
                    08:fd:09:6b:97:7a:1e:e4:fd:d1:cf:ed:8c:ed:3d:
                    a3:d8:48:d5:c8:1a:76:d4:54:cf:ba:86:24:e6:cc:
                    e7:c9:2e:3c:8a:fd:34:a1:ae:20:e8:15:30:db:c1:
                    d4:c3:05:26:2f:ed:07:38:fc:df:bb:d9:b9:9e:f6:
                    c4:f5:b0:19:27:0d:eb:1a:17:15:94:20:8d:35:c1:
                    99:a4:e0:70:00:5b:12:49:fc:6d:3e:26:6f:f1:57:
                    d9:55:79:86:22:32:a6:f6:64:04:ce:7e:49:87:e7:
                    af:a0:67:6e:71:04:1d:da:ae:a5:a0:eb:71:b4:33:
                    fa:55:b7:62:78:a6:4a:ef:d4:3b:96:b1:19:27:91:
                    ae:15:d6:89:da:f2:d2:cb:bd:17:8c:69:99:5d:14:
                    03:f1:a5:20:6f:25:07:e6:6d:5e:73:5c:11:39:ef:
                    df:05:cc:f9:1d:90:b3:7b:ae:ad:16:72:cd:0b:bf:
                    8b:5a:26:37:28:72:e8:d4:0a:46:a3:a4:a5:65:63:
                    84:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CB:5C:39:6E:14:C4:8C:CD:ED:E3:3F:28:6E:1C:D2:0B:B3:BC:AD
            X509v3 Authority Key Identifier:
                keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:bd:56:14:a8:b6:b3:1f:c6:96:d6:88:be:29:7a:6e:0d:0f:
         1b:32:d2:a0:16:cd:cc:de:be:48:3b:ae:75:8d:79:b7:16:a9:
         72:f3:24:ed:50:ba:78:8a:de:c7:5f:4b:a2:68:ff:3c:48:f8:
         91:a5:97:85:2e:16:7d:ae:3b:d0:85:45:01:5e:74:66:07:0a:
         83:d6:fb:5f:8a:10:30:65:1e:a1:d2:bf:1f:12:c8:a5:51:44:
         42:d3:a8:d8:b5:a0:b5:b7:20:84:fb:d4:f0:82:a8:32:e7:2b:
         57:0b:c9:60:ba:7b:b1:04:1d:24:7b:05:0b:40:c1:76:c0:eb:
         ed:15:5e:ed:8e:be:bf:2c:05:a2:ff:77:be:6b:6d:f8:f9:c0:
         d9:4c:5b:07:17:a0:31:fd:bb:e6:5c:00:fb:b0:4a:6f:60:8e:
         68:bd:12:be:dd:bc:e3:d3:04:5c:b0:f8:24:ec:d0:db:e2:45:
         43:41:56:1f:11:da:1b:5e:da:96:4b:ef:6f:45:4e:88:14:74:
         f9:22:3f:f7:9b:01:72:ec:f0:68:67:0c:f5:0d:87:1c:20:24:
         46:78:26:c5:5c:44:d4:c1:44:f1:1c:fa:1b:0f:66:04:71:02:
         2a:ed:4a:68:0f:b7:21:b0:2d:c3:ec:30:a0:1f:fb:74:0e:b2:
         20:20:81:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:38:11 2026 by rpki-client