Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
File:                     0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft (raw, json)
Hash identifier:          5AiDZcnTaEAz1Ak5ymixwtBc3pSwWJvZU++Gxv4o3qY=
Subject key identifier:   EE:82:D0:6A:17:CF:24:DF:F9:D8:E8:F0:40:58:D8:D2:78:86:A2:2B
Authority key identifier: D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
Certificate issuer:       /CN=d2c17db099bd419eba552a37704deeed3b2e303b
Certificate serial:       01A0D192C462A8D2681688E35C701470B1ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
Manifest number:          0859
Signing time:             Thu 24 Sep 2026 04:00:51 +0000
Manifest this update:     Thu 24 Sep 2026 04:00:51 +0000
Manifest next update:     Fri 25 Sep 2026 04:00:51 +0000
Files and hashes:         1: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl (hash: aBEUa1io2Jj2tbrVqn1Mygvc2mcFOkBv/opYiVfnb6M=)
                          2: 1-MrxZrcPXM7BvaVdVabElQiwAhg.roa (hash: 5Yrq+V+8IPQZLxO9mgzwmCCXtczV+ZsgweXRxHjq37Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:c4:62:a8:d2:68:16:88:e3:5c:70:14:70:b1:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c17db099bd419eba552a37704deeed3b2e303b
        Validity
            Not Before: Sep 24 04:00:51 2026 GMT
            Not After : Sep 25 04:00:51 2026 GMT
        Subject: CN=ee82d06a17cf24dff9d8e8f04058d8d27886a22b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:58:be:8c:98:6d:89:43:d4:26:8b:65:23:20:
                    14:ae:77:08:70:25:b8:2b:02:f7:81:44:be:b9:dc:
                    c2:c1:bb:dd:46:36:2e:15:12:da:bd:41:a2:d4:07:
                    a2:90:f0:cf:ab:9e:2b:e9:67:db:41:eb:a1:37:ed:
                    4b:da:08:41:b7:f8:5d:59:e8:29:bb:85:58:9b:76:
                    55:0c:b7:59:d4:5c:d8:b7:14:b6:6c:50:48:2e:05:
                    d1:0a:80:17:52:7f:cf:a1:21:f9:f8:5a:f3:33:6b:
                    46:27:92:78:47:27:f4:c6:4f:93:1a:11:93:1d:e8:
                    59:be:fe:58:00:20:50:3c:0e:94:66:07:87:94:b5:
                    4f:05:62:a6:be:76:31:37:72:af:d8:d9:e6:fe:28:
                    bb:38:4e:b5:49:78:bd:9e:32:d7:b5:d1:0a:7d:a9:
                    eb:dc:57:39:ba:3f:37:1b:b7:05:80:3b:0c:75:b8:
                    05:85:fd:67:77:66:3c:46:0d:29:3d:ee:19:9a:36:
                    5a:26:a2:05:bd:27:c5:a7:a9:d5:1c:0d:f6:8b:b5:
                    fc:36:c4:f2:67:57:07:9a:68:e3:a8:70:dd:41:c7:
                    08:7e:36:60:3a:86:18:6e:74:b6:18:88:e8:98:fe:
                    a6:0d:a9:5f:c7:1c:db:db:a7:63:62:05:cb:4e:ae:
                    31:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:82:D0:6A:17:CF:24:DF:F9:D8:E8:F0:40:58:D8:D2:78:86:A2:2B
            X509v3 Authority Key Identifier:
                keyid:D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:09:a8:34:0a:98:26:89:b0:9e:56:91:b0:fc:a6:39:1c:64:
         37:ec:49:b8:1c:fd:ce:c0:24:24:26:ac:31:3c:66:df:df:ad:
         8b:25:c4:d5:4d:81:57:0b:6a:c4:ce:32:a9:df:d1:5f:80:90:
         ea:c7:60:c1:c6:a3:bf:43:b7:f0:14:40:33:f4:1d:2c:5c:01:
         18:b6:f9:aa:f3:56:7b:76:27:0f:68:16:70:08:65:2c:42:36:
         33:83:e7:21:8b:a0:d4:9c:0f:db:b5:cf:d6:22:91:57:57:36:
         03:55:e8:b0:76:96:3f:75:5b:d6:17:d4:49:86:67:d9:35:fe:
         14:eb:7e:07:c2:a3:ed:20:fa:da:12:03:d1:c9:e3:c4:87:ca:
         cd:ff:9e:3f:2b:ea:18:26:20:ac:8c:b0:ca:28:7f:bf:45:e6:
         88:fb:21:6f:97:37:2e:ff:88:e8:8f:95:64:0e:b8:e3:d2:8b:
         2f:1c:19:dc:47:59:42:f7:38:42:18:c9:bd:09:c4:36:7d:1b:
         2e:02:72:87:77:ff:95:3e:45:88:6e:b3:fa:0d:67:3d:8e:2c:
         c9:b6:c7:99:9a:70:3f:bb:51:fe:25:0d:04:de:1e:01:de:77:
         7a:d8:07:89:fe:37:b4:80:88:1c:51:6b:0e:9c:30:da:92:7b:
         e9:ca:9a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:24:32 2026 by rpki-client