Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
File:                     0PhWqIToYidB9eFo7Hqno95vK8M.mft (raw, json)
Hash identifier:          uuA1NjxQEHtqzITtVwR+ruv1Vw74KETJx1O6Z10XhHo=
Subject key identifier:   84:4D:B8:E3:4A:11:8F:78:AA:1E:9E:F0:AB:04:4E:A9:33:20:73:77
Authority key identifier: D0:F8:56:A8:84:E8:62:27:41:F5:E1:68:EC:7A:A7:A3:DE:6F:2B:C3
Certificate issuer:       /CN=d0f856a884e8622741f5e168ec7aa7a3de6f2bc3
Certificate serial:       01A0CB59B3471DD862DD661CA5E2B74B6304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PhWqIToYidB9eFo7Hqno95vK8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
Manifest number:          012B
Signing time:             Tue 22 Sep 2026 23:00:48 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:48 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:48 +0000
Files and hashes:         1: 0PhWqIToYidB9eFo7Hqno95vK8M.crl (hash: UMNxksskHdkTY6cC8wEdu8dOiTkNWLlQlDCqLJrzZfU=)
                          2: 5uwlb6VAMyxIYrxx11L4WCDtq5Q.roa (hash: zVxnrr7NCdH/hFMNNgmxYObL0zm+TgiecARXZu0CtnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PhWqIToYidB9eFo7Hqno95vK8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:b3:47:1d:d8:62:dd:66:1c:a5:e2:b7:4b:63:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f856a884e8622741f5e168ec7aa7a3de6f2bc3
        Validity
            Not Before: Sep 22 23:00:48 2026 GMT
            Not After : Sep 23 23:00:48 2026 GMT
        Subject: CN=844db8e34a118f78aa1e9ef0ab044ea933207377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d6:95:67:00:51:b6:63:d8:20:4e:d4:9d:99:
                    d1:67:1d:2b:7b:bd:e0:58:8f:ae:2d:77:9f:37:b7:
                    d1:b1:b1:be:0a:90:0b:cc:23:38:bc:21:40:ca:a1:
                    c4:8b:3e:45:52:94:a3:cc:ee:a8:6e:0c:19:98:b3:
                    e8:f1:d4:34:af:5b:e5:c5:f4:b5:ef:2e:8a:16:a7:
                    5f:11:44:a7:9a:df:7b:ca:68:d9:56:22:13:d6:9e:
                    e8:9f:9c:16:17:92:a6:5d:36:88:73:b3:8d:a8:e9:
                    ee:d6:bd:ce:c1:55:01:51:84:3b:98:51:f2:99:5d:
                    d6:77:ea:68:c7:24:29:03:60:6c:20:70:d8:07:f8:
                    b5:49:45:55:81:4b:b5:a3:cf:14:04:ec:04:39:57:
                    e7:aa:55:18:fa:3b:62:b5:c8:cf:d0:ae:d7:02:1f:
                    fd:80:14:32:7c:61:c6:21:0c:f4:ae:5a:8a:15:61:
                    fd:c2:d9:41:60:18:61:8f:ee:37:61:78:be:d0:74:
                    0e:48:8b:c3:e1:8a:5a:e7:49:37:ac:a1:dc:16:82:
                    87:89:76:16:a6:fe:44:1d:7a:6b:fb:cc:ab:74:20:
                    47:0c:c3:16:36:0b:eb:28:a1:ba:7e:aa:c6:b7:9f:
                    9f:88:6f:a6:e5:27:9a:0f:31:01:2d:58:72:14:b5:
                    e2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4D:B8:E3:4A:11:8F:78:AA:1E:9E:F0:AB:04:4E:A9:33:20:73:77
            X509v3 Authority Key Identifier:
                keyid:D0:F8:56:A8:84:E8:62:27:41:F5:E1:68:EC:7A:A7:A3:DE:6F:2B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PhWqIToYidB9eFo7Hqno95vK8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ce4e9a-7fc0-41f3-b80e-4f6b16ec33a7/1/0PhWqIToYidB9eFo7Hqno95vK8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:32:2d:7f:3d:15:b9:84:a0:9b:23:6d:37:06:6e:a2:d2:3d:
         6b:89:29:26:bf:9f:83:ef:e5:25:5b:7a:e1:95:05:0e:77:29:
         ad:c9:6c:6a:e5:31:8b:aa:ed:e9:9b:5b:98:98:bf:97:ca:0a:
         40:84:a1:cc:45:ef:42:e1:f7:7b:91:da:80:8b:2c:65:c6:0f:
         fd:ba:64:89:7e:2f:02:3b:69:73:87:52:47:51:e4:dd:01:aa:
         9d:c6:94:9a:83:e3:fb:bf:fe:69:be:45:26:b4:38:6f:38:37:
         1c:d1:21:72:d8:90:7a:0a:17:da:c9:45:54:57:ef:51:dd:5e:
         29:86:e4:ef:5b:ab:0c:1f:3e:77:e1:2c:d9:68:77:eb:8f:26:
         7c:6a:1c:49:bf:15:c8:e3:1c:a9:ec:ed:97:f2:71:83:e6:9f:
         57:66:b9:8f:8b:9b:5a:c1:b0:75:cb:04:36:00:fa:2a:ef:9d:
         ef:2d:54:c6:82:8a:4b:ed:22:94:d5:d2:90:cf:90:88:63:ac:
         c2:00:a2:b9:7e:3a:35:c3:30:64:97:cb:b2:bb:09:89:6f:b3:
         01:a3:cb:b6:c9:89:9d:cd:bd:e4:76:4a:95:75:1d:c5:52:13:
         e7:5d:43:80:63:3b:5f:4f:48:b5:1b:2f:e8:a6:15:19:3c:1a:
         5f:cc:1a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:06:41 2026 by rpki-client