Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
File:                     X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft (raw, json)
Hash identifier:          8VOsRhl8GpjZ6TEp8Jab6Emro2W553uLXbGfPtTd4j4=
Subject key identifier:   1B:50:F2:E6:83:46:92:1F:97:6C:43:E7:E7:F6:FD:42:6E:CB:8C:7A
Authority key identifier: 5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
Certificate issuer:       /CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Certificate serial:       01A11116F7C9A2EB504BE10DFE3FF37F93CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
Manifest number:          03F9
Signing time:             Tue 06 Oct 2026 12:01:20 +0000
Manifest this update:     Tue 06 Oct 2026 12:01:20 +0000
Manifest next update:     Wed 07 Oct 2026 12:01:20 +0000
Files and hashes:         1: 2aR01OFymFEwZxvW0ul_qajB_MU.roa (hash: uOcW0MztVBXCRsokN174A3EZiiQc7C1Cn12xFKZuxJI=)
                          2: X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl (hash: FVdeInMKMWeuS6W1Px0ye9Yqgx+PrDoYsUqXH1GH+q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 12:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:16:f7:c9:a2:eb:50:4b:e1:0d:fe:3f:f3:7f:93:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
        Validity
            Not Before: Oct  6 12:01:20 2026 GMT
            Not After : Oct  7 12:01:20 2026 GMT
        Subject: CN=1b50f2e68346921f976c43e7e7f6fd426ecb8c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cf:f6:17:64:99:60:9f:46:79:d3:b6:dc:e1:
                    fb:0d:9a:a9:ac:5e:79:eb:d4:fa:83:ed:28:ca:34:
                    fc:ef:08:df:82:bc:ec:1f:b0:bf:62:17:4c:80:6e:
                    bb:5e:47:f9:f9:a8:09:68:e0:18:72:83:1c:63:5a:
                    b2:f1:54:f7:88:19:59:c3:4d:ab:ad:ca:29:67:39:
                    83:c5:87:9f:6e:66:c9:0a:fd:9e:4a:8f:cf:52:d6:
                    d1:b0:5c:2a:d3:35:ef:ab:fc:03:97:cf:0c:87:1a:
                    8f:34:6b:e4:9a:32:b8:cd:cf:70:1b:26:28:df:ea:
                    f1:a3:93:57:31:1d:01:be:58:e5:b4:b5:50:1a:0f:
                    63:3e:2d:7c:b5:07:04:76:1f:6c:c6:e5:03:ea:ca:
                    8a:5a:0e:89:8e:e1:20:97:d7:80:e2:b3:ed:a3:fc:
                    b4:60:9e:04:e6:c4:1c:51:e9:bd:46:d6:97:50:e9:
                    6d:85:ad:0d:ab:3f:a3:19:20:c8:8f:0b:af:b4:b9:
                    27:9e:a5:41:37:b5:fb:b7:f6:5f:1e:7a:fa:3c:c4:
                    36:ed:eb:44:5d:e6:de:34:91:79:6c:a1:6a:15:f3:
                    ea:42:71:c6:16:62:fb:ec:60:f9:72:29:b6:da:4e:
                    d3:33:fb:c0:17:49:50:0a:bd:49:37:1a:d9:60:55:
                    7f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:50:F2:E6:83:46:92:1F:97:6C:43:E7:E7:F6:FD:42:6E:CB:8C:7A
            X509v3 Authority Key Identifier:
                keyid:5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:89:0c:2e:a9:a3:f0:98:d3:1a:b2:90:94:fb:4b:16:e5:18:
         09:22:d5:09:4d:ab:6a:94:59:42:25:11:d8:33:77:3a:0a:7a:
         59:d0:b0:99:3f:77:58:50:9a:d2:4b:8e:66:99:c7:60:f9:f3:
         33:95:c8:02:dc:97:dc:0f:59:6e:10:cd:09:56:e4:e9:3e:59:
         cb:05:5b:13:b6:7a:3d:dc:86:c9:6a:b5:40:4a:aa:20:67:1a:
         f0:33:0e:55:8f:ce:d3:ff:1a:8b:48:f7:80:29:92:22:0e:9f:
         97:84:20:49:dd:e1:f2:a2:2d:26:f5:30:ff:90:8c:02:e0:0b:
         d5:97:ff:50:7c:fa:cd:19:53:c9:4f:62:27:76:fc:ae:d9:e2:
         29:54:d4:97:85:ba:84:0c:05:67:b7:b5:4f:b5:b8:9e:21:ea:
         80:bd:74:83:56:a8:df:73:24:b5:23:6e:85:c8:4a:f8:19:01:
         de:74:13:11:3f:0c:7e:97:14:29:a5:8b:07:77:8f:23:56:dc:
         db:49:16:a5:35:ef:dc:5a:9f:58:4f:89:17:e3:23:3e:70:68:
         1d:2b:e5:3c:6c:1f:b4:98:7e:10:c2:7e:3f:cc:d1:0f:f1:4f:
         87:30:d1:7a:6b:64:52:e1:50:36:25:32:02:b3:05:74:73:d1:
         2c:44:0d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:20:17 2026 by rpki-client