Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          BiZrqS1QP2oDcH/YUCdr3L1Rbw7IEYXoh7uVMuePa6c=
Subject key identifier:   62:3B:30:07:D8:C9:F5:9E:D3:B5:61:8D:39:38:15:82:F5:4B:25:04
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       01A0E5BEC9A0AF23FCC00A1495BE8E7522E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          186B
Signing time:             Mon 28 Sep 2026 02:01:20 +0000
Manifest this update:     Mon 28 Sep 2026 02:01:20 +0000
Manifest next update:     Tue 29 Sep 2026 02:01:20 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: 8ZiDg0q8bjx/BsojOVsbadjzfHxsjQPFEk3MqF4nVqc=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 02:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:be:c9:a0:af:23:fc:c0:0a:14:95:be:8e:75:22:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Sep 28 02:01:20 2026 GMT
            Not After : Sep 29 02:01:20 2026 GMT
        Subject: CN=623b3007d8c9f59ed3b5618d39381582f54b2504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:75:67:56:d1:90:f0:7c:45:4f:ba:78:cf:0b:
                    11:2b:dc:d8:04:77:98:7b:d3:c4:48:9e:14:a6:8c:
                    8c:d3:35:ad:e4:e7:d8:9a:80:b8:ed:f6:58:ec:8f:
                    54:56:1b:43:1e:3f:92:06:e1:88:ac:99:10:53:d3:
                    13:63:a1:b0:e7:2a:18:58:4d:35:80:93:37:70:6f:
                    0a:f3:c3:32:ee:05:54:1c:80:2c:38:fc:d6:21:8d:
                    a5:5c:e8:fe:fc:a3:14:1b:22:78:3a:8d:6b:19:2b:
                    38:39:6e:0d:25:4a:a6:90:30:cb:3a:f5:1d:a6:95:
                    c8:1d:58:38:40:f7:06:eb:72:81:09:8d:33:e9:7c:
                    ad:66:2c:68:cd:00:06:7a:96:50:51:8e:8f:d4:d1:
                    11:80:d3:2b:8d:e5:ed:ad:a4:ba:d8:ae:39:d4:85:
                    11:9c:ae:2f:37:07:0f:1b:0f:7e:7b:62:c8:31:13:
                    cc:f8:14:7f:70:3e:35:15:5a:e7:ef:a8:67:36:20:
                    1b:96:47:3d:39:37:b0:be:cd:19:49:11:3d:35:5c:
                    96:82:75:23:1e:7d:e9:d0:0a:62:d9:16:b3:10:b5:
                    47:06:a6:1c:8d:59:8b:e5:94:13:c0:30:9e:4d:f0:
                    6a:81:a8:d2:cf:7e:87:5d:3b:cc:38:63:ae:7c:2f:
                    a9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:3B:30:07:D8:C9:F5:9E:D3:B5:61:8D:39:38:15:82:F5:4B:25:04
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:4d:8e:3a:aa:04:ba:18:c2:27:51:7c:08:9b:ba:19:39:56:
         81:b0:37:18:b6:fd:12:51:5b:ae:9b:27:4a:07:7e:a8:88:c5:
         ff:c0:1f:13:53:14:68:93:a2:87:04:d7:b7:d2:82:a2:2d:83:
         b0:03:70:ca:9e:fa:98:96:d3:dc:80:e1:a0:8c:89:fb:0d:18:
         97:2e:59:91:51:83:42:51:6a:76:f4:ac:4c:01:27:cc:4a:03:
         46:7e:4b:6d:1c:83:05:0e:66:e9:a8:96:2d:de:bb:bc:30:c7:
         a8:92:41:18:da:6d:46:43:d8:53:74:7c:62:d0:19:ab:9e:06:
         85:ce:74:fe:7a:14:ea:1d:01:54:12:3f:78:08:04:37:bf:00:
         85:2f:55:2e:fa:c1:12:86:7c:73:11:2d:56:c7:78:fe:bd:20:
         ed:31:55:7a:33:7d:48:27:1f:a4:d0:1a:01:5c:ef:91:08:1a:
         3b:32:6a:f9:e6:54:52:a2:8c:07:e9:f0:15:28:47:76:99:3b:
         12:6e:e8:1b:a7:8d:15:09:bf:26:59:48:c9:0a:ef:9d:9a:17:
         47:af:fe:08:75:ee:66:fe:e2:a8:28:98:ba:1f:ba:b6:5c:a6:
         d5:de:88:ad:46:bf:7f:59:3f:34:0b:ba:e0:69:eb:b6:d9:50:
         fd:3f:28:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:59:46 2026 by rpki-client