Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
File:                     0ow4hsbvUifCRiJMyJSoSlO89Ro.mft (raw, json)
Hash identifier:          MLsnTR44r23yILLczgwFq1i+qtCzt6ROxDxa7HDzmWQ=
Subject key identifier:   B3:BB:76:86:68:54:4E:41:96:B7:AC:F3:CA:27:B5:E5:F6:74:E5:58
Authority key identifier: D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A
Certificate issuer:       /CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
Certificate serial:       01A0DEE0C3606681B9A0F06799B3C7CF6641
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
Manifest number:          09A9
Signing time:             Sat 26 Sep 2026 18:01:07 +0000
Manifest this update:     Sat 26 Sep 2026 18:01:07 +0000
Manifest next update:     Sun 27 Sep 2026 18:01:07 +0000
Files and hashes:         1: 0ow4hsbvUifCRiJMyJSoSlO89Ro.crl (hash: 8Hsrb8+X5/lTEq+wV986PAR9vs1niIcdjr5V+GxFh+E=)
                          2: BYWS08eTtraOfHT_fVMPk7guHlM.roa (hash: 6Kz4FXMCjQe6WKeTUwsv4um5M7VGGcIVhgjpiTRZk6E=)
                          3: PiwQrJXVrX4qSCMDoPit1fwGxYw.roa (hash: maZooA2YaSXCCk76FIXDQQ5gHOUIoguMUZYt68Zbq38=)
                          4: XlbisSjtE0VEsvYZfBE1a7SwnPo.roa (hash: ywquchTaiRzJ9EyzBmBuS7GF3u7LPVkY7qatrsHV8Nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 18:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:e0:c3:60:66:81:b9:a0:f0:67:99:b3:c7:cf:66:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d28c3886c6ef5227c246224cc894a84a53bcf51a
        Validity
            Not Before: Sep 26 18:01:07 2026 GMT
            Not After : Sep 27 18:01:07 2026 GMT
        Subject: CN=b3bb768668544e4196b7acf3ca27b5e5f674e558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:02:ae:ee:43:4f:38:73:b7:08:00:4b:f8:
                    f5:7e:d1:af:0f:cf:ed:fd:4c:a3:c4:c5:7a:2d:2c:
                    1d:a3:7f:90:6f:1c:42:d5:f8:97:fc:ea:2f:5d:99:
                    51:44:80:84:c9:79:f8:88:73:dd:09:0b:4a:b0:3f:
                    05:32:8e:85:08:10:2c:9d:31:5c:57:c5:18:e0:2b:
                    55:8f:e6:dd:0c:9a:3c:f4:04:a1:f4:8f:ef:5b:cf:
                    08:9b:a7:36:2f:a8:71:d3:a1:00:01:e1:60:6c:d1:
                    99:3a:6c:1f:6e:25:a6:51:7b:cd:74:a4:07:1d:4d:
                    20:5d:66:83:3b:54:32:4d:12:86:37:af:67:b7:f8:
                    aa:90:b6:81:ca:e5:d1:45:ff:c2:45:8e:37:90:cc:
                    4c:a2:9a:88:8b:68:fb:03:b3:19:52:66:38:76:a9:
                    2e:61:f0:11:c8:21:12:8d:48:3a:67:82:c8:35:75:
                    2e:2d:7f:ed:3c:1a:fd:d3:43:0c:8b:c8:70:e2:c6:
                    d8:3a:fd:f1:6e:89:be:2a:84:c8:4d:6b:ce:0c:c7:
                    e5:92:91:16:82:48:b6:ca:dc:c4:76:f8:55:a8:ba:
                    f9:13:b9:04:92:0c:98:fb:be:ca:bc:f2:e8:2a:7a:
                    19:81:3c:3f:b9:d1:ce:ce:ce:16:43:ec:eb:4f:49:
                    48:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BB:76:86:68:54:4E:41:96:B7:AC:F3:CA:27:B5:E5:F6:74:E5:58
            X509v3 Authority Key Identifier:
                keyid:D2:8C:38:86:C6:EF:52:27:C2:46:22:4C:C8:94:A8:4A:53:BC:F5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ow4hsbvUifCRiJMyJSoSlO89Ro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bec19c-5b94-401f-b138-fc421621fe08/1/0ow4hsbvUifCRiJMyJSoSlO89Ro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:41:c0:a0:6c:19:43:c1:b4:a2:f3:15:17:5f:2f:3b:d7:5b:
         11:36:43:3c:29:4c:0a:14:10:d4:05:50:6b:64:4f:1f:68:ee:
         12:fd:c7:e1:fe:54:26:03:80:c5:80:5b:6d:72:e4:6a:ee:b1:
         2d:71:f9:b2:45:fd:0d:59:57:05:8a:a4:5e:bb:1b:d8:b2:1f:
         61:59:40:a4:fb:5a:29:79:6e:4a:a0:c1:3e:8a:11:c3:82:c7:
         68:39:ee:1d:a2:fc:c0:80:13:a3:b0:5e:90:de:f3:ea:4a:99:
         0d:cd:72:7f:50:00:d9:be:cc:e2:93:0d:b6:28:7a:ca:1b:8c:
         d6:90:fc:05:3d:be:a5:02:4b:2e:f6:4b:80:53:29:c0:65:49:
         d6:83:a5:0a:2e:ba:12:07:1e:44:8c:59:8f:5d:ae:97:57:37:
         77:ac:e2:69:3e:7f:e9:1a:66:8f:03:d6:6b:43:b5:63:35:4b:
         8e:5a:86:22:62:c6:00:35:ca:7e:cb:77:3b:6e:71:69:41:9e:
         db:5d:60:21:b8:74:30:dc:32:ea:f6:d3:63:74:4b:a0:55:80:
         0d:86:44:c0:ab:3f:dc:a4:42:2a:f7:d7:f2:4f:ed:92:47:33:
         fc:6d:ad:52:60:c7:bc:3e:a4:86:d1:14:f0:3d:ba:f6:ea:cd:
         f5:71:0d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:17:06 2026 by rpki-client