Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
File:                     RotoFBeWypXkxy9L-mlqzqUIOvM.mft (raw, json)
Hash identifier:          rEVD89398g/l/ZrCSfWTfMz+EFJOdNYEk3Rt6G8cjMA=
Subject key identifier:   7E:EC:49:6E:50:90:51:75:BC:7D:96:99:FE:2C:2A:85:C7:83:C3:A5
Authority key identifier: 46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3
Certificate issuer:       /CN=468b68141796ca95e4c72f4bfa696acea5083af3
Certificate serial:       01A0EC2E6481E2F26F9E7F076AA2619CD957
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
Manifest number:          0D97
Signing time:             Tue 29 Sep 2026 08:00:58 +0000
Manifest this update:     Tue 29 Sep 2026 08:00:58 +0000
Manifest next update:     Wed 30 Sep 2026 08:00:58 +0000
Files and hashes:         1: 8GdtZSFoX1vaGkCpGmBlFouEiVo.roa (hash: O6P4xNLVg+cJ7e2yv3WOenrZOTPYwO68uBRfw1gd8JE=)
                          2: RotoFBeWypXkxy9L-mlqzqUIOvM.crl (hash: vW5465+vBdOgLB8k47wRkru0WUL3UIToauIojjh2qQ8=)
                          3: Ul4e9Mh9DtQbW0bFXtJWj8pCCUg.roa (hash: QgVe3zyOWZmLsqhPjT0zFXeKP6/Au91Grh/gUobRiJU=)
                          4: p--yuSN0LP1aF8MInaw0a0h4bcM.roa (hash: sDylj029lXRNRGXbiEohj568oZj6iTxdiqBb3mUem68=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:2e:64:81:e2:f2:6f:9e:7f:07:6a:a2:61:9c:d9:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=468b68141796ca95e4c72f4bfa696acea5083af3
        Validity
            Not Before: Sep 29 08:00:58 2026 GMT
            Not After : Sep 30 08:00:58 2026 GMT
        Subject: CN=7eec496e50905175bc7d9699fe2c2a85c783c3a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:76:1b:bb:17:85:4e:ce:b5:9d:ee:5d:34:6e:
                    26:6d:4f:39:0a:d0:35:5e:b5:41:52:c7:05:8f:cd:
                    6b:e9:05:a9:76:fe:9b:ac:e9:8c:41:eb:50:a6:11:
                    51:80:c3:21:bd:20:76:19:ee:1b:cf:87:af:49:c7:
                    cf:82:a0:4a:a3:25:2b:42:9c:d3:ad:49:ab:43:57:
                    e9:36:ba:75:7a:a7:f3:ac:ad:97:bd:98:ba:e6:13:
                    27:ae:3d:3a:60:a6:a3:fc:cf:5f:68:8c:1c:ca:9f:
                    b7:f1:03:a2:f5:29:83:db:e0:c1:3d:f0:e0:2f:f9:
                    c7:ae:e8:b3:39:30:ab:22:df:69:95:5f:fb:98:24:
                    cb:bd:26:b9:5e:1f:40:82:82:93:e3:64:f0:1f:80:
                    1a:c0:25:fe:a6:9a:5f:42:00:bf:e2:8c:67:df:58:
                    eb:bb:82:ff:f6:b8:a9:6e:d3:a4:13:3a:43:5a:21:
                    a0:db:bb:ef:f9:35:65:fb:0a:5f:28:65:54:b8:5e:
                    51:45:e5:b5:e1:c2:91:9a:d0:22:2a:2e:83:be:24:
                    cd:66:ef:6e:c6:e0:60:6d:3c:73:eb:c3:55:94:aa:
                    bd:82:52:10:58:c4:d0:64:61:91:a0:1f:83:e6:69:
                    7a:56:74:25:de:da:97:9a:6f:b6:4c:bc:68:67:88:
                    57:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:EC:49:6E:50:90:51:75:BC:7D:96:99:FE:2C:2A:85:C7:83:C3:A5
            X509v3 Authority Key Identifier:
                keyid:46:8B:68:14:17:96:CA:95:E4:C7:2F:4B:FA:69:6A:CE:A5:08:3A:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotoFBeWypXkxy9L-mlqzqUIOvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/598e8b-a63f-425e-b4f7-452d6d3826f7/1/RotoFBeWypXkxy9L-mlqzqUIOvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:f9:5d:61:de:f5:78:16:04:96:50:0a:06:3c:bc:f1:90:42:
         ff:8b:db:be:dd:bb:11:31:cb:d6:26:87:b1:aa:a3:aa:28:fd:
         22:12:31:a7:f2:22:dc:aa:4c:c5:aa:7a:a4:48:c8:b9:b0:b5:
         48:66:4e:86:00:8f:c5:ca:4f:61:54:b1:7c:19:01:db:db:50:
         07:e4:25:0e:80:e2:ca:3a:30:78:47:10:b9:fb:db:f8:9d:e1:
         4a:b5:90:f7:66:70:94:fe:3a:fe:c2:15:7a:80:e3:c2:52:7f:
         dc:8e:3d:f0:bc:04:51:21:48:92:2e:05:aa:cc:3d:7d:62:bc:
         b9:04:13:e5:fd:1d:4f:26:ed:81:9c:7f:7f:0d:8c:a2:eb:c9:
         62:3b:2d:96:84:d8:49:48:1b:86:ad:10:c6:fe:af:bb:24:2f:
         38:87:f0:e5:76:7e:cd:87:a0:6c:ad:1c:58:51:80:e4:15:d8:
         de:7a:8a:90:cb:58:0e:60:f1:36:46:eb:2c:f3:dd:3c:88:71:
         17:5f:d3:5d:df:ff:75:83:00:ee:26:fd:f3:4e:7a:51:79:c6:
         db:83:f1:7d:ec:98:3f:50:c0:1a:74:a0:88:68:3e:85:1d:4f:
         6c:1a:5c:60:c3:c6:6c:ae:4f:de:2d:3c:4a:fd:73:7f:40:93:
         55:87:9f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:19:23 2026 by rpki-client