Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
File:                     rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft (raw, json)
Hash identifier:          LAZVzQtRsbSlKNIbDX1z2iXOyIEU9YqhsaQ0Odc2zE8=
Subject key identifier:   E8:C6:34:B4:47:C6:05:2E:A3:74:DD:55:BF:86:63:2B:14:A4:98:A4
Authority key identifier: AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24
Certificate issuer:       /CN=aca1f4713024804c445403af63fa644b2a935d24
Certificate serial:       01A0CC351BB391438C18E31948885693D22B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
Manifest number:          1A7D
Signing time:             Wed 23 Sep 2026 03:00:27 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:27 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:27 +0000
Files and hashes:         1: 68S_aFNNmgzjbtipHf2_7W5_Bco.roa (hash: RwG1LoqBic8TBPegFSl5zghD2QUKZjWI0f3m/Wa2XvI=)
                          2: 6Tt_JhvDeS8RrZNagAC_Y34YgGM.roa (hash: CW1QJb8vGPMOzkDlQfxVkZeJUZKHQrNhrEN+PPxL4mY=)
                          3: 7_skAVHjgsLF5yurP5Hs70so6lU.roa (hash: GZbj/NvSS8FJycykZ2otNOVLib/kBA0tsDjDJmEYqOw=)
                          4: PqQ80zRW4L7-FL50a-sVEmgKj-Y.roa (hash: hnJ9eAizqcNHYh7QW8vCzEh+yJL2aUxkxjuN+e8GRho=)
                          5: TTfvsK5hd0_GUSO7MSasMs4WeiI.roa (hash: 5fCeSzSrIrlr7y2QP80sfMVoFocJvfEJtnCJtXTc+vY=)
                          6: UBfX_Q_ESiqvVw7XJAwKhDzOiYc.roa (hash: yij0Gcg4VWx0ybKs3NoqtbhVEj3lt3YcAj0EyqPh7VY=)
                          7: eF_Iql01f6Mj_BVm584xV8IssYA.roa (hash: iPi/R187ECcID1empgHZAsvXPyLUYT8zATjgc8Yt7/o=)
                          8: rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl (hash: pAWW/mO+2pJv8pCD6pyQEznG+vWzyeOmtv1MUtRR/Ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 03:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:1b:b3:91:43:8c:18:e3:19:48:88:56:93:d2:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca1f4713024804c445403af63fa644b2a935d24
        Validity
            Not Before: Sep 23 03:00:27 2026 GMT
            Not After : Sep 24 03:00:27 2026 GMT
        Subject: CN=e8c634b447c6052ea374dd55bf86632b14a498a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4e:91:59:8b:31:bb:51:1a:c5:f7:ce:de:62:
                    63:cd:22:ab:1e:3e:b4:96:16:47:1e:a1:a4:09:fc:
                    13:a6:60:b9:f3:82:6c:7c:18:05:75:66:a7:ac:e8:
                    27:69:3e:88:f8:45:d6:65:5c:79:5a:48:01:71:bc:
                    26:cb:d9:dc:33:f7:84:9b:6c:4f:0b:84:32:04:7b:
                    4d:78:aa:d5:44:7e:39:c3:7b:a4:7d:23:c0:a4:ff:
                    ba:82:34:90:93:0f:1e:36:28:1e:cc:da:55:1e:3b:
                    98:8b:59:b7:b3:ff:c4:ab:a7:52:f6:43:63:04:34:
                    18:65:79:7f:d5:4b:0a:db:f9:94:3b:be:4d:83:00:
                    ad:ef:e9:b3:05:a4:de:68:5c:af:e0:56:2d:57:18:
                    a2:c2:bb:21:a0:ab:a3:62:29:4c:a7:51:cf:92:d7:
                    ba:62:06:2a:e7:8a:bc:31:23:f8:f1:93:f9:c6:64:
                    68:89:7c:fe:c0:c4:1b:89:b8:01:dd:96:98:b3:5b:
                    d0:b6:ed:45:a1:ba:0c:bd:65:05:fa:de:51:d7:fb:
                    8f:36:1b:2b:3f:c7:8c:02:3e:a2:3f:25:e4:ab:0b:
                    99:27:7f:15:8f:90:62:39:c8:ac:d6:91:03:2e:24:
                    bc:4e:ba:0c:c7:76:9e:9e:c2:b0:95:de:e6:75:c0:
                    e5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C6:34:B4:47:C6:05:2E:A3:74:DD:55:BF:86:63:2B:14:A4:98:A4
            X509v3 Authority Key Identifier:
                keyid:AC:A1:F4:71:30:24:80:4C:44:54:03:AF:63:FA:64:4B:2A:93:5D:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKH0cTAkgExEVAOvY_pkSyqTXSQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c6d6be-bf4a-43e5-a908-5ca016a10054/1/rKH0cTAkgExEVAOvY_pkSyqTXSQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:e5:36:12:28:3d:59:c7:55:37:39:3b:26:45:2c:e6:fc:7a:
         ae:43:f7:42:81:cb:0e:5e:61:4c:ca:7c:c8:2f:4c:2c:41:97:
         a6:e5:2c:49:db:5a:e8:d2:13:ab:c4:a6:69:cd:f9:8b:a9:d5:
         30:51:92:ea:9b:35:a0:83:d0:d1:d3:49:82:f1:18:cf:e7:07:
         7e:8b:b0:61:1f:12:97:1c:12:8c:48:c4:5d:9e:02:f0:e9:8c:
         5a:bf:88:1e:1a:83:51:16:5e:aa:70:fa:a8:5e:d7:25:37:8f:
         c3:50:94:88:64:8f:90:22:d3:6d:c1:47:d4:90:94:8b:54:fb:
         1e:2a:05:ca:1c:ff:9e:21:3b:2d:3b:be:7d:51:29:dc:01:e3:
         f8:8c:34:07:63:10:7a:c9:d8:d9:00:a1:00:de:94:32:0a:4d:
         4d:5b:8d:86:b9:42:8b:89:a5:78:31:96:a7:e5:75:d2:e8:a4:
         92:2a:92:ca:19:07:7a:78:66:8a:df:08:af:c7:5f:0e:e3:af:
         d1:a3:ac:6d:be:9c:03:82:2e:63:de:9a:d2:ac:2b:5e:44:d9:
         c2:b6:ca:5a:5a:6f:1d:bd:d3:98:bd:a6:c8:6c:0f:de:af:20:
         e5:db:94:43:4d:3c:b2:df:4b:b7:61:4e:0d:92:6a:64:3b:5e:
         47:14:2d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:45:22 2026 by rpki-client