Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
File:                     oYFk2ZYaFtLv93P1Angh6dK9N0A.mft (raw, json)
Hash identifier:          GUpoZlUxcnT05uf5lKZdKX9nOWvTyH07ylJ/Slq4VZc=
Subject key identifier:   8B:3C:80:09:E7:56:48:7C:54:5E:69:B4:A1:97:62:A4:AF:B7:B0:53
Authority key identifier: A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40
Certificate issuer:       /CN=a18164d9961a16d2eff773f5027821e9d2bd3740
Certificate serial:       01A0DB3B38F3FD2640AF62E37EF388111DD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
Manifest number:          0C8C
Signing time:             Sat 26 Sep 2026 01:01:26 +0000
Manifest this update:     Sat 26 Sep 2026 01:01:26 +0000
Manifest next update:     Sun 27 Sep 2026 01:01:26 +0000
Files and hashes:         1: 8Xy3JsOZp8agZio6JEl9loRjlFY.asa (hash: TlktL9oV1UI2Vlhdx1LCfEJgVLcoU4hMjN/LcKxuLUg=)
                          2: GrPbowD1xhzEQt0mGonYCE0CqTQ.asa (hash: DOZHKT4cbMp9ZejcaCrBqRpFGvg17kAFTmcg90xNqwM=)
                          3: oYFk2ZYaFtLv93P1Angh6dK9N0A.crl (hash: dVgeBO6qT4/f8MQGqd6Jex4xbZa29n6opavrJNuZqr0=)
                          4: t98OBQe0WNUYSBCzWPOvMNNdCCU.roa (hash: T3bx2AzYlPYawd2JV44/SVYg6RGUmJnlWF/n7EwddAA=)
                          5: us1GSIhm55Kw0WlTx_Qmja-c9Vg.roa (hash: 2udVHZgWrsMsX5HZqlWRXTTnXgRNJReWWU+1z/MPcVA=)
                          6: vbW9HDnSvJmxsqC-cV5z-907X4o.roa (hash: RVRq1+9gitJwQNotHLkJdZpm6YORt32/tbHB/qnAsaE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:3b:38:f3:fd:26:40:af:62:e3:7e:f3:88:11:1d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a18164d9961a16d2eff773f5027821e9d2bd3740
        Validity
            Not Before: Sep 26 01:01:26 2026 GMT
            Not After : Sep 27 01:01:26 2026 GMT
        Subject: CN=8b3c8009e756487c545e69b4a19762a4afb7b053
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3f:5e:ef:8d:98:ef:59:3f:70:9c:06:ac:6f:
                    62:a6:c0:e5:b4:c1:76:6a:d1:fe:50:6e:e7:e5:1e:
                    f1:0b:2b:a9:7e:f1:1e:72:c2:70:58:dd:b3:b5:45:
                    d8:11:d4:d3:38:6f:9b:03:12:f8:77:97:8f:f5:0c:
                    fd:11:d3:8b:da:3b:2b:1b:2a:15:1c:c1:e7:ca:21:
                    a0:36:24:1d:76:ab:ec:99:c3:5e:33:53:cf:7c:72:
                    f6:d8:79:e8:f7:bd:9b:4e:fd:23:8c:29:f5:8f:90:
                    ec:10:c1:be:f2:1f:b6:78:e8:48:db:50:96:28:e7:
                    9c:42:73:e6:cc:c9:ee:48:ac:54:ab:3d:90:57:09:
                    74:55:e2:9f:7f:5e:5d:f7:d9:c8:7c:90:e2:bf:f5:
                    99:17:57:0b:63:f8:c1:85:56:d3:f9:f9:84:5d:bd:
                    20:71:8e:82:38:cf:b4:a1:81:f0:d2:ba:89:a0:38:
                    74:b7:f0:3b:45:49:f5:a7:c9:cf:c3:bc:0f:3b:9a:
                    6a:05:bc:20:20:d7:4f:da:58:3f:45:7e:3a:78:0a:
                    5c:8f:90:df:f5:e4:06:4f:3d:c1:6c:c4:bc:84:47:
                    a3:87:28:58:9f:ea:24:81:ae:8f:1d:20:68:3e:ca:
                    cb:93:7b:ec:dd:03:c1:d4:cf:11:32:6a:2e:09:3d:
                    0c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3C:80:09:E7:56:48:7C:54:5E:69:B4:A1:97:62:A4:AF:B7:B0:53
            X509v3 Authority Key Identifier:
                keyid:A1:81:64:D9:96:1A:16:D2:EF:F7:73:F5:02:78:21:E9:D2:BD:37:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oYFk2ZYaFtLv93P1Angh6dK9N0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b8ed2d-3545-4599-97e5-1523803fadaf/1/oYFk2ZYaFtLv93P1Angh6dK9N0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:57:02:f7:32:d9:eb:60:1f:18:2f:6e:7a:b2:91:6b:70:1f:
         24:c0:ef:b7:51:e2:98:b8:7a:36:a9:a6:96:3c:27:ca:1a:a6:
         1f:73:f8:c5:65:56:6e:70:d6:79:69:76:2d:06:96:2b:c5:6a:
         09:16:6e:4d:39:5b:b2:f4:74:e0:8b:09:25:66:f4:e8:df:38:
         27:4a:1f:e3:f1:fb:53:b3:4e:ff:70:99:d9:48:e5:df:05:6d:
         8e:75:dd:c0:21:01:6b:56:1b:da:d4:41:ff:44:62:e7:80:6b:
         4c:a8:92:b3:ed:1b:bb:94:3d:f9:74:a7:27:bb:7f:20:63:8a:
         95:94:87:39:d2:ca:e3:78:43:c6:37:c0:1e:e2:22:ea:29:90:
         20:10:9c:87:4b:08:25:4d:c7:1b:61:7b:44:62:4d:91:67:86:
         e7:15:dd:f6:4f:c4:8f:c0:cd:26:85:09:b1:0d:b9:51:ce:d1:
         c0:ba:9a:f4:0e:c7:73:bb:7e:7b:a2:51:1a:2c:84:53:6f:7f:
         30:dc:4e:4b:49:02:55:ce:ff:79:db:4a:9e:1a:7b:10:5b:02:
         a0:85:6c:5e:13:99:92:2c:8b:b7:59:9d:b7:69:41:06:e3:0a:
         00:eb:fa:ac:69:19:4d:0e:e2:81:54:e0:d4:1d:c2:79:37:97:
         50:7c:d1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:01:21 2026 by rpki-client