Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
File:                     b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json)
Hash identifier:          9kQCojYyN5CiIoFD0FCVyIgM8/7KkIxuiW1fAfSoswQ=
Subject key identifier:   53:6A:62:48:59:8C:1E:C5:C1:3A:99:BD:70:F3:D5:41:AA:52:E1:5E
Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5
Certificate issuer:       /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
Certificate serial:       01A0CEFF7AC9CED4D38BED69A9E877342099
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
Manifest number:          1AB2
Signing time:             Wed 23 Sep 2026 16:00:44 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:44 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:44 +0000
Files and hashes:         1: Dv8Xj573URhelnbmcJLlhmPDGD4.roa (hash: qlnvjr9BaLF0/kBmFp/g12eWnCcKOHwXVrBxaeJlhqI=)
                          2: GokOnLgcwEKBfp_sk2MIuuQ-_TY.roa (hash: zQRRa9NS4gIwYEiBt9K5iRhHmWoyu+BxEByrxS3tpEY=)
                          3: S-2u1gBJMJZerxMcphe152Mw_t4.roa (hash: zY+Kfzo1VDj/zBVAcDyYT3GL5KZN/lStcMsxxkbN2e8=)
                          4: V66mUyeO5X_O6JGUAL_LInwhpW0.roa (hash: WTpJ/+xyEsdWBV9e8DfdpDEOxLLOMxmk9zRPy8of4Nw=)
                          5: WAFGlC69-0ob11MbBQG2gcGKWnk.roa (hash: fs3/LEyDskuqCQv30OKbL6do/sufFAX29xlb3wrGuaA=)
                          6: _H3J1Q0wf1ue0eD6RUkc1ex1fZg.roa (hash: 8E6CjmtD48iYAKj5FVW1NYd7xgq0h72auMlNwc7qpB4=)
                          7: b4JEVE3QPzkNygQLlI0iBGroxU0.roa (hash: GbTRuy5jkEUqjUNqE8oi/B2zDg7qLzkinV68BhIMhV0=)
                          8: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: J21KnISPIjp3VXC94BW8vw00apAVjqEtsr4EgxFkEAI=)
                          9: fX3KuGbBaSgozBC8VJSKif-SJWQ.roa (hash: YvJvbJ8D5DpHd4D9ZPHBQEllNbujWBnvbGsXVYfxrbQ=)
                          10: gBo-R92ImstxPprBT8xyf5PF5ro.roa (hash: ehOcdXMKXxl7qAMxAdqS/EYhNRFgKFvDwqQoTowHqqE=)
                          11: hS05mveN2aMKs32vgPN62OxZyU4.roa (hash: ppIsNge7NuGGbn+pU/a2PkG/ZsHka3x0Ag4o3/gijLY=)
                          12: iLauOm2qK9XnqY9ztUU9moKfnvg.roa (hash: MD/6ZVmSej56cLCXyFeTYzesox6xFljqFiihcyr2blE=)
                          13: mOIM-oZXOhPXcspDNu9QRUce9wI.roa (hash: TX23tkqgD+PXYsu3SvaWNxNHNfg0oQahFUpEkkPiqP0=)
                          14: maoDBiTq7OlnZavgCrqS2PNJzVg.roa (hash: 5lnUQuuOEn9crnGLrQz+sL2Asrk/3K0SqWLzxdWxHuc=)
                          15: rKU1mC3UrxRCEsXb-l25oaEBhJw.roa (hash: 4jepadulIWtRtacZBukRLsOXuyzRr5YeactatRKpnlE=)
                          16: wCrdreEenBFJr40kfhAiXxXP4VE.roa (hash: 1w9FYdnTnijOy22xqaq4vC9r9i/Zq/2AJnQG0P3/L0g=)
                          17: yX_yhv_jUUfVVPMPnlpzUI5cFxs.roa (hash: bg6ibEfMDVCBPduOQFB/gGWqEjD+qw8SCbixEdu1S7Q=)
                          18: zyjvREkWFF6X7pbwt-H3M-ZqZks.roa (hash: HtAgtb461giJt36H40FvVS9Xbx1kevgnUEyHwD9fYBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:7a:c9:ce:d4:d3:8b:ed:69:a9:e8:77:34:20:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5
        Validity
            Not Before: Sep 23 16:00:44 2026 GMT
            Not After : Sep 24 16:00:44 2026 GMT
        Subject: CN=536a6248598c1ec5c13a99bd70f3d541aa52e15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:45:8b:3d:2f:38:e1:e8:a1:e9:84:d2:c7:6b:
                    66:93:2c:f3:80:a2:27:4f:6f:a3:93:22:fc:12:e3:
                    fc:51:76:e3:e3:c6:5e:91:75:6e:b6:4c:fe:79:2b:
                    fc:03:a7:7a:5f:69:0c:45:22:69:f7:b7:64:7c:b0:
                    b1:24:45:f4:9a:02:a8:b2:5c:12:3f:0e:28:e0:f2:
                    3e:ed:be:0b:a2:c3:54:03:d2:04:75:e1:83:8e:5b:
                    5d:ac:a6:7f:37:8f:cb:6a:73:b5:ab:91:02:02:4b:
                    c5:d5:8a:01:20:d8:8f:32:c7:4e:15:1a:27:28:1c:
                    c3:f4:dc:ac:57:0c:f6:d4:de:86:cd:3a:6b:7f:7d:
                    12:e8:85:b0:64:eb:c2:b4:4f:31:ac:55:0c:10:d7:
                    6f:47:cd:a2:44:f9:ca:b7:18:41:27:f3:d9:49:50:
                    57:7f:f5:dc:26:21:1d:e5:0d:fc:31:dd:3d:d8:61:
                    f5:db:f4:69:c9:bc:64:95:35:e0:39:ae:97:0e:70:
                    c4:d8:63:3a:ab:eb:c4:8d:3a:9b:06:1d:27:ab:7e:
                    3d:c0:30:12:93:66:98:c7:5f:d4:59:c7:3a:0a:8a:
                    11:eb:69:78:20:6f:f1:8e:2d:c4:16:67:c9:ef:31:
                    7e:8f:93:f7:66:e1:95:82:4f:a6:0a:a9:83:96:44:
                    fe:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6A:62:48:59:8C:1E:C5:C1:3A:99:BD:70:F3:D5:41:AA:52:E1:5E
            X509v3 Authority Key Identifier:
                keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:19:57:d1:58:96:a7:19:8e:a4:65:ad:37:5b:d7:13:a0:92:
         1b:7a:c3:95:7c:66:dc:87:68:ab:c3:1a:60:49:6e:3f:03:b6:
         d4:20:b1:15:06:1d:ae:27:32:2e:a5:fb:68:fb:69:4d:de:1e:
         33:50:6c:e5:03:98:af:38:ba:f2:27:e3:4f:75:a8:9f:f2:c5:
         59:e2:6f:95:fa:68:2b:32:2f:56:75:25:6c:41:b7:bd:91:68:
         d5:5d:68:c2:27:6d:76:53:5c:fa:47:6f:8f:1b:e8:b3:8a:27:
         b4:83:ca:a9:b1:36:32:be:1b:de:53:95:c7:93:8f:b5:3c:00:
         21:2c:c3:ae:bc:cd:9c:00:da:a2:27:1c:49:38:0d:fa:c7:50:
         40:be:2b:87:63:e0:43:c0:1a:1a:79:5f:e2:34:93:04:20:9c:
         ff:71:ea:ee:11:e3:81:d8:be:90:a1:f9:1d:e9:40:8d:36:8b:
         8c:3f:f9:ca:af:fc:28:30:01:60:92:2f:2f:bd:d0:4d:4b:da:
         89:80:32:2b:b7:ca:7c:66:7b:57:81:4f:70:d7:ec:a3:e6:04:
         1d:f8:7d:a3:ff:d5:2d:a1:c1:89:5d:79:aa:c7:e3:e8:08:f9:
         76:19:7a:6b:9a:38:ab:e9:32:7c:af:31:5b:e4:96:be:cf:e4:
         ea:d7:54:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:18:57 2026 by rpki-client