Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft
File:                     Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft (raw, json)
Hash identifier:          vtnCEJYu5H2bB0iRckplZGljxMrnuRF+E0JkDjmDciY=
Subject key identifier:   06:D1:58:CA:ED:30:DA:E1:32:27:84:39:13:F4:40:34:53:F4:A9:54
Authority key identifier: 1E:9E:3C:64:CA:FD:9E:27:53:70:D4:FD:64:99:C3:C5:D7:53:9C:4A
Certificate issuer:       /CN=1e9e3c64cafd9e275370d4fd6499c3c5d7539c4a
Certificate serial:       01A0D314DBBDE81542987FD85600AA3FE31B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft
Manifest number:          08A5
Signing time:             Thu 24 Sep 2026 11:02:34 +0000
Manifest this update:     Thu 24 Sep 2026 11:02:34 +0000
Manifest next update:     Fri 25 Sep 2026 11:02:34 +0000
Files and hashes:         1: 0sEV5H_A0rlI6NfPYuLmfYjvWD0.roa (hash: dZ4FeCTfblqtXelif+IwyAlXmzJNDihc4byltNkJAjA=)
                          2: Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl (hash: rJX2XBlt41asGEua/R4goYXZhjxM45QeGsy9Ae5MTc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:14:db:bd:e8:15:42:98:7f:d8:56:00:aa:3f:e3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e9e3c64cafd9e275370d4fd6499c3c5d7539c4a
        Validity
            Not Before: Sep 24 11:02:34 2026 GMT
            Not After : Sep 25 11:02:34 2026 GMT
        Subject: CN=06d158caed30dae13227843913f4403453f4a954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5d:d0:18:9a:9d:7b:be:5e:55:b8:ea:68:81:
                    0e:de:3b:89:f2:14:9e:f7:30:fc:d6:68:77:17:f2:
                    d7:8e:c6:fe:e3:33:7e:be:23:d5:f6:77:d1:2c:b7:
                    f9:e7:4e:d1:fd:62:1d:c4:4b:a1:ba:35:a5:55:1e:
                    21:3a:8a:ea:23:da:a6:40:52:bc:aa:61:36:ed:2f:
                    86:d3:fe:07:39:17:26:03:b9:c9:4c:55:f7:42:50:
                    f4:29:1e:bd:7a:3f:e2:71:ec:6d:85:6a:30:70:4e:
                    0e:d5:32:c8:be:31:79:7c:08:d7:53:9e:6c:44:12:
                    d1:c7:50:d6:35:0e:6d:20:b1:db:26:0c:1f:df:26:
                    79:ce:d1:27:36:62:eb:e9:f8:24:c4:fc:be:d1:c5:
                    fd:d2:ac:e6:5d:a4:49:2a:b9:1f:66:ba:f3:98:f5:
                    02:ff:38:72:ec:14:10:eb:d9:ee:af:22:b8:69:88:
                    35:23:a6:d5:82:71:3b:92:e1:8f:8e:31:a6:02:d6:
                    58:09:b1:7b:64:63:b9:75:ba:8d:ea:c3:4a:91:76:
                    db:ee:82:13:32:98:01:c6:64:ab:34:f3:c6:10:78:
                    f5:be:a5:74:1b:6b:0e:2a:72:f1:b9:10:55:76:b8:
                    5e:2b:92:23:48:99:38:c6:38:ce:93:87:d3:66:8f:
                    bb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D1:58:CA:ED:30:DA:E1:32:27:84:39:13:F4:40:34:53:F4:A9:54
            X509v3 Authority Key Identifier:
                keyid:1E:9E:3C:64:CA:FD:9E:27:53:70:D4:FD:64:99:C3:C5:D7:53:9C:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp48ZMr9nidTcNT9ZJnDxddTnEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/47898a-7662-4b11-a80d-2aa170992f37/1/Hp48ZMr9nidTcNT9ZJnDxddTnEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:99:43:d2:49:bd:e7:30:b7:02:33:53:9b:7e:cf:6a:d9:3a:
         be:9b:8c:2d:81:b0:d9:5b:30:92:fd:ed:b0:f7:52:cc:05:6d:
         c2:b6:80:51:02:47:87:8a:35:ee:d7:ae:fa:95:08:6c:5f:2a:
         c6:f5:c3:65:f7:11:6b:7c:18:74:ca:b4:0d:e3:1d:4a:e3:d1:
         f4:20:a1:0c:26:91:e2:8e:4d:f7:63:8a:c5:6e:2d:b9:1b:38:
         2c:17:db:70:e6:85:ea:fb:45:08:20:04:5b:51:a4:96:c8:32:
         29:3e:f7:80:0f:52:17:b8:bf:ff:8b:f4:dc:6c:1f:19:3d:d2:
         a2:cf:12:f0:8e:36:9b:8b:28:5c:d9:38:30:b5:21:e2:24:01:
         e8:e2:df:01:20:80:ae:cc:94:06:2e:1d:21:7a:a9:a8:d2:3c:
         20:db:23:da:0b:fe:ab:83:4c:47:91:fd:f7:aa:c3:bd:8c:0d:
         35:7f:41:dd:75:b5:a8:f8:84:85:50:f0:9d:06:ad:77:cd:3b:
         e2:e5:2c:77:ec:c2:23:89:62:30:c8:ba:cc:47:69:a6:66:33:
         fa:00:c7:f9:54:32:43:47:d1:3b:13:d3:8f:c9:a8:6e:ca:77:
         71:17:39:1d:cd:f5:af:5d:d4:6b:6e:43:72:ea:8d:ab:94:1d:
         08:0c:8e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 14:38:16 2026 by rpki-client