Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
File:                     0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft (raw, json)
Hash identifier:          qXNcBPyW6thUZeBKCpgFXd2njQtyDaw7QSBYIerUUlM=
Subject key identifier:   C3:AB:1F:DE:F9:A5:74:51:5E:F1:82:ED:81:BB:78:0B:AC:2B:EE:E1
Authority key identifier: D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F
Certificate issuer:       /CN=d283616f1362c25d82ec2a70c4b9750565b1197f
Certificate serial:       01A0F1FA50C04FEEF38D84813BF151365570
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
Manifest number:          17B4
Signing time:             Wed 30 Sep 2026 11:01:48 +0000
Manifest this update:     Wed 30 Sep 2026 11:01:48 +0000
Manifest next update:     Thu 01 Oct 2026 11:01:48 +0000
Files and hashes:         1: 0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl (hash: pJUWilE2LvrzDcfgenrA3uUXLoYVdHNVTN+14d/Rp3w=)
                          2: a6NDP_sdQRIyavB-C2u1iT6I1vI.roa (hash: 45VvDyynPZqMh80rBZVmGivQ3m/ZKBBtliCy4kfcaYA=)
                          3: bMBeJP4kSoTWFEKBQ7ire7C9GmM.roa (hash: DgOfwTafwxtmSdbTDyercNseVLl1yi6nAKrwiwQ4Ggo=)
                          4: s-r4X6WFzZl_DjwTvg6rx1Dd8H0.roa (hash: jWgwdzxUJDbOjXM/9fnH2+wJvWnEGw4EF7mGjO4+epM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:fa:50:c0:4f:ee:f3:8d:84:81:3b:f1:51:36:55:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d283616f1362c25d82ec2a70c4b9750565b1197f
        Validity
            Not Before: Sep 30 11:01:48 2026 GMT
            Not After : Oct  1 11:01:48 2026 GMT
        Subject: CN=c3ab1fdef9a574515ef182ed81bb780bac2beee1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:81:02:b4:b9:bb:d4:7f:bd:5e:19:b3:c6:f7:
                    4d:ad:a5:d2:a3:c0:a5:72:b2:9a:37:aa:1f:9a:0c:
                    7b:f9:ed:3b:3a:0a:4c:6e:8e:0d:ac:4b:5e:9b:bd:
                    ed:91:4c:77:6c:55:37:a0:43:f1:ec:a3:78:46:21:
                    ba:48:39:1b:07:19:57:53:ea:73:ab:df:a5:39:66:
                    57:54:24:83:51:c5:e1:4f:0d:64:b2:a4:15:da:2b:
                    74:3b:73:e9:86:c1:28:99:14:c1:4d:18:ed:92:ff:
                    60:fc:31:1e:eb:97:f6:4a:81:1f:88:51:0c:32:3a:
                    c3:ae:56:45:fa:34:22:ac:2e:b4:89:ae:09:04:8d:
                    5d:c8:59:20:bb:1d:4c:ca:99:02:c6:77:1f:92:00:
                    56:62:a1:4b:d3:52:54:9e:17:8b:cb:82:33:74:6c:
                    e2:c6:d8:6c:8c:30:7c:a7:75:df:d9:95:2a:25:44:
                    eb:77:07:0f:91:d2:3a:47:3b:d3:88:78:db:c0:f1:
                    93:6f:d7:66:85:76:ba:00:52:f1:db:b3:5b:7b:23:
                    3c:8d:11:2d:11:e7:d0:a2:b6:ba:7c:32:ea:35:3c:
                    fd:9c:75:36:ae:a3:0b:bb:97:0f:3d:8b:39:c5:2d:
                    b9:6e:93:b8:fd:00:09:b4:ae:76:83:5b:ca:1b:06:
                    f8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:AB:1F:DE:F9:A5:74:51:5E:F1:82:ED:81:BB:78:0B:AC:2B:EE:E1
            X509v3 Authority Key Identifier:
                keyid:D2:83:61:6F:13:62:C2:5D:82:EC:2A:70:C4:B9:75:05:65:B1:19:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0oNhbxNiwl2C7CpwxLl1BWWxGX8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/2fbccc-64b6-4f66-8969-a6d27c431818/1/0oNhbxNiwl2C7CpwxLl1BWWxGX8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e2:73:a7:be:57:1f:94:73:ae:9e:08:27:fa:2e:ea:31:78:
         ee:aa:60:52:1d:fe:b8:9b:26:a1:59:c4:1a:39:3a:9b:87:f5:
         6d:fe:69:e9:12:59:ec:85:55:d4:40:a7:c9:77:55:9d:5d:05:
         e4:df:ac:88:76:80:2e:2a:b2:6f:55:ce:29:90:b9:01:69:5e:
         54:6f:01:f2:66:b5:e8:9e:61:4d:8e:b5:b2:e0:a3:00:2f:cd:
         fe:f2:71:41:06:4f:52:b1:ca:51:e1:9c:c9:28:96:46:f9:ab:
         1c:7b:c2:8f:9c:bf:07:3f:43:c3:bc:e0:bd:ed:ac:69:82:c0:
         8c:4e:28:0f:04:fb:6a:0e:1c:a0:b5:a6:b1:ef:06:2c:e6:4f:
         d4:b7:c4:d6:c3:35:6f:43:f3:e6:35:17:6c:09:a2:7f:3b:3f:
         08:02:b1:5b:ea:72:48:93:78:e0:59:b0:f4:ec:81:c9:3a:df:
         c7:f6:25:51:7e:57:50:6d:59:18:85:76:14:97:f8:2c:8a:4f:
         e6:f5:ab:5f:81:34:05:c3:47:7a:c1:48:eb:6d:0b:83:05:d5:
         00:00:7c:f5:d7:dd:42:09:be:d0:21:89:db:8d:f5:8a:e0:0f:
         7b:8b:2c:42:15:f1:67:64:f6:32:29:ed:69:cb:a5:89:34:ca:
         61:65:87:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 17:41:42 2026 by rpki-client