Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.mft
File:                     jO8UbYXAmqWWh_1jFbEyccHCkq0.mft (raw, json)
Hash identifier:          HH95CRg8gnHngpRjAGARXAyhVKl9VCBSWHdGv30D6+U=
Subject key identifier:   2E:C4:3F:0F:C4:ED:50:4D:6A:F8:A6:9F:B7:25:7A:1E:3E:96:A6:ED
Authority key identifier: 8C:EF:14:6D:85:C0:9A:A5:96:87:FD:63:15:B1:32:71:C1:C2:92:AD
Certificate issuer:       /CN=8cef146d85c09aa59687fd6315b13271c1c292ad
Certificate serial:       01A0D426B7D37AFA14ECAF53AAB5E741D195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jO8UbYXAmqWWh_1jFbEyccHCkq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.mft
Manifest number:          0199
Signing time:             Thu 24 Sep 2026 16:01:42 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:42 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:42 +0000
Files and hashes:         1: HgmkuPKwqjol9mbHZ8ataf1SvcE.roa (hash: gyDBFFZDQxXXn08l/MiA7FrLtA8MM9zX3POriEuaaw8=)
                          2: NDR8IcYiHHFDZR2N02qsDnVz_5s.roa (hash: udGhDxp8Z7og3TPXgaz6gKEp46t0p+oHHXAxRR3YkTo=)
                          3: Nb8A-vgy3w6OmSHNpfdTE4Sq0lc.roa (hash: i/BzMuMNpx2QMA0UsLDLIIFwuC9xx8eEb11QlO+afMY=)
                          4: jO8UbYXAmqWWh_1jFbEyccHCkq0.crl (hash: zw7gKUf+OydswMl/S9af44PWkejXN2cyUpoDyDFGeDw=)
                          5: qTJDb5bZcI57GfkMCiidBBuCxcM.roa (hash: hotESPxS+NRDdQrT1wDQOkWWo9YVaPiGSYJ82rAj5o4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jO8UbYXAmqWWh_1jFbEyccHCkq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:b7:d3:7a:fa:14:ec:af:53:aa:b5:e7:41:d1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cef146d85c09aa59687fd6315b13271c1c292ad
        Validity
            Not Before: Sep 24 16:01:42 2026 GMT
            Not After : Sep 25 16:01:42 2026 GMT
        Subject: CN=2ec43f0fc4ed504d6af8a69fb7257a1e3e96a6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8e:9b:10:e3:5f:45:89:b4:e0:97:d5:08:6c:
                    09:6f:63:e7:c4:24:4b:0f:64:5c:4c:39:d7:d2:48:
                    4e:5e:4a:32:b8:f0:df:c0:ae:3f:f7:77:23:e1:34:
                    aa:c7:f9:a9:7c:5c:51:35:b8:17:02:33:c3:1a:ac:
                    81:df:fe:9d:f4:56:14:d2:54:d2:bc:31:e4:a7:23:
                    16:64:19:05:2f:0d:1d:15:f9:44:c1:64:ce:b5:91:
                    84:95:8b:e4:98:c6:b6:73:1f:5e:a3:b6:39:93:01:
                    4c:88:0e:9a:03:ec:59:ac:f3:d2:c1:7a:da:2c:7f:
                    57:cc:3a:30:f1:8b:9d:e9:23:39:32:d5:2a:47:1e:
                    c4:34:ea:a4:bc:18:c4:97:aa:22:ae:21:88:e4:90:
                    1f:90:14:89:76:cf:ae:9a:98:83:8b:ee:d2:d9:1a:
                    5f:fd:b6:79:2e:19:ab:a5:4c:fe:ed:cf:14:85:68:
                    55:e9:a6:21:c1:32:dc:d1:39:a7:ff:64:cc:b7:37:
                    18:82:d6:1e:0c:c0:4e:3c:b4:74:62:50:2b:22:74:
                    97:3a:ca:1b:5e:fc:2f:de:e9:c2:59:71:17:22:02:
                    b4:37:9a:ae:89:b7:2f:9b:8e:0e:42:8e:27:fe:5a:
                    40:cf:14:47:5e:3f:0b:eb:ab:88:3c:4e:b0:b1:0e:
                    c1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C4:3F:0F:C4:ED:50:4D:6A:F8:A6:9F:B7:25:7A:1E:3E:96:A6:ED
            X509v3 Authority Key Identifier:
                keyid:8C:EF:14:6D:85:C0:9A:A5:96:87:FD:63:15:B1:32:71:C1:C2:92:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jO8UbYXAmqWWh_1jFbEyccHCkq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/a3d2ee-174c-48c3-bd26-7fa9d94024f0/1/jO8UbYXAmqWWh_1jFbEyccHCkq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d2:95:b2:7f:e4:9f:a9:c6:45:c8:78:06:99:76:b1:ee:85:
         d7:40:02:fd:26:4e:cd:8e:62:18:f7:2c:f8:27:bf:1d:51:da:
         7e:1a:a8:08:8d:f2:b5:ce:a9:00:c3:eb:6b:b1:b0:56:72:82:
         e4:90:f2:cb:a2:66:86:49:25:fe:4f:42:61:b9:b7:aa:30:e8:
         e8:c6:04:11:5d:d4:f1:83:3e:25:f7:54:c8:24:95:78:bf:a0:
         eb:32:5f:b4:27:ab:e8:8f:1f:72:5e:25:60:84:36:b0:f1:c6:
         e5:80:1e:85:2a:a3:04:d9:49:42:81:e7:a4:e9:cb:61:be:4c:
         ed:0c:54:87:37:45:e0:f0:b8:26:5b:f0:6d:ae:ce:5f:4f:d9:
         e1:91:62:03:f4:d3:df:eb:01:32:09:d4:5c:57:f2:81:94:d6:
         89:d0:bd:97:06:f2:13:ca:1a:a4:c8:3d:f2:a5:02:47:ae:1d:
         40:e5:c5:b9:a4:53:49:db:bc:e9:42:a0:f4:1c:47:10:97:6c:
         3c:81:b9:3a:ee:34:1e:c9:12:2f:1c:65:9e:e5:93:e3:88:f3:
         39:2c:78:fb:a8:f3:d2:c1:87:1c:a2:0a:06:25:0d:e2:ba:77:
         4b:0b:ac:92:6f:28:24:d0:91:83:16:58:f0:4c:55:dc:e6:7a:
         a6:91:f5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:44:40 2026 by rpki-client