Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
File:                     o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft (raw, json)
Hash identifier:          uMPjBN/9SN9Chz8gTdMNYdz2rnhaCAYbcRMqZgglUj0=
Subject key identifier:   BC:C1:62:36:B3:2C:0C:25:85:CB:F7:C7:73:61:2D:0A:BA:73:83:84
Authority key identifier: A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18
Certificate issuer:       /CN=a3a39f1db858b155f25bc343759f5be2b736c818
Certificate serial:       01A0DD981FE6F739934552E0D9E2FF0E0AB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
Manifest number:          13F1
Signing time:             Sat 26 Sep 2026 12:02:09 +0000
Manifest this update:     Sat 26 Sep 2026 12:02:09 +0000
Manifest next update:     Sun 27 Sep 2026 12:02:09 +0000
Files and hashes:         1: o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl (hash: xeIBwlsHGWeltsvJT30W3kW+S3zkCynMmrnGgaZZkTQ=)
                          2: yaGrTSbSlmYQOVjGew5hBKlYIdM.roa (hash: rWTKt9fOtiCkgV4Ne8j7wKikLEyD3vMLTk3Sb/9/e+Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dd:98:1f:e6:f7:39:93:45:52:e0:d9:e2:ff:0e:0a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a39f1db858b155f25bc343759f5be2b736c818
        Validity
            Not Before: Sep 26 12:02:09 2026 GMT
            Not After : Sep 27 12:02:09 2026 GMT
        Subject: CN=bcc16236b32c0c2585cbf7c773612d0aba738384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fa:6b:77:e5:c3:6e:5c:97:91:7d:7d:8c:2c:
                    5c:c7:7b:b9:a5:24:fe:7a:95:10:c7:92:fa:11:c4:
                    da:21:6d:f0:ad:8a:c2:a8:0e:9c:a8:a2:de:46:6a:
                    22:2d:fb:36:99:cf:8e:b9:69:21:ee:a6:ad:32:57:
                    e2:ba:33:26:a4:63:f7:ce:78:47:86:5b:f9:33:46:
                    e6:0f:da:f6:c5:ac:51:34:96:f6:ca:6c:de:a4:55:
                    1a:64:f3:31:10:4e:cc:71:9a:db:83:35:f4:d3:5c:
                    19:0e:5d:e3:89:96:19:c6:66:47:8f:6b:f4:4a:de:
                    c2:46:9a:46:f9:87:34:f8:31:67:91:e7:8b:1f:04:
                    d9:56:d8:7c:a1:74:cb:d6:f0:8c:2c:56:b8:e1:d6:
                    d2:fc:8e:7a:6d:ca:b4:46:f2:10:7d:0f:68:db:c8:
                    6a:3e:1a:40:78:1e:25:ab:fe:8c:36:5f:3c:7c:23:
                    43:1b:67:6f:65:79:1a:36:e2:2a:03:c9:3e:83:eb:
                    44:20:ed:d6:25:14:3d:62:05:7c:9f:04:49:4c:37:
                    b7:88:66:59:04:1d:5e:77:82:ec:0f:fa:2c:39:c1:
                    21:91:09:87:03:85:f9:f8:30:ab:59:cb:29:5f:58:
                    e3:bf:63:87:b0:92:7c:b5:e5:6f:4e:3e:d9:64:96:
                    28:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:C1:62:36:B3:2C:0C:25:85:CB:F7:C7:73:61:2D:0A:BA:73:83:84
            X509v3 Authority Key Identifier:
                keyid:A3:A3:9F:1D:B8:58:B1:55:F2:5B:C3:43:75:9F:5B:E2:B7:36:C8:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8c83ca-2278-4d56-bce8-450d2295ba49/1/o6OfHbhYsVXyW8NDdZ9b4rc2yBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:14:d0:72:a7:2f:ae:51:cc:47:8d:02:fd:77:1b:0a:51:a3:
         1d:2f:a2:a0:da:9f:e7:ee:e3:25:c8:c0:60:a6:ca:a9:4e:8d:
         54:fa:82:41:85:43:68:76:86:07:92:41:7e:66:b0:d6:22:d3:
         36:a1:18:c6:c1:0f:54:19:95:8e:88:da:4b:52:82:f3:26:e7:
         4f:fb:d4:5c:5c:00:58:98:b9:9d:43:24:0c:76:4a:08:44:b6:
         43:5c:d3:f1:2e:49:9a:19:34:c0:9c:8a:3a:6a:24:54:bc:f9:
         9a:c9:6b:cc:45:04:d7:7e:86:18:39:9d:f4:90:3d:ea:9c:27:
         78:2f:63:32:2c:98:10:39:48:f3:fd:fe:b4:df:43:82:eb:81:
         6c:96:c7:ea:82:3d:78:29:d9:93:8c:ec:bf:da:cd:c9:b8:4f:
         db:fd:19:9e:d6:d1:a9:4c:9d:a0:1a:46:e5:14:f2:c7:98:4a:
         37:a2:fa:02:97:99:2c:e7:e2:5d:fc:f5:01:5d:2c:b9:e6:87:
         15:ae:bd:11:d0:dc:48:93:4a:90:85:09:17:f2:d5:79:4a:17:
         cd:9e:2e:b8:3f:f7:fc:75:e9:68:5d:96:95:54:c7:f1:0f:b3:
         6f:5e:9d:e7:89:21:50:fc:03:75:34:62:ae:44:52:49:7b:a1:
         6f:28:62:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 19:07:09 2026 by rpki-client