Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
File:                     8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft (raw, json)
Hash identifier:          97aUb6xyUVpnlCXDzFWa5zaJQlYmdsM7sxylWnsd6pM=
Subject key identifier:   22:BA:41:E9:67:C3:8F:87:8C:17:78:BF:AF:1C:4D:07:12:33:44:49
Authority key identifier: F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D
Certificate issuer:       /CN=f30e445195b64d799b822e99947792e0cab32b6d
Certificate serial:       01A0BE429F64943334D3ECD2A8FEF788750D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
Manifest number:          0235
Signing time:             Sun 20 Sep 2026 10:00:31 +0000
Manifest this update:     Sun 20 Sep 2026 10:00:31 +0000
Manifest next update:     Mon 21 Sep 2026 10:00:31 +0000
Files and hashes:         1: 8uCWMBaWAfKrOPaxucU0CJPP8RM.roa (hash: 8TbK/6lzE8XJo6X13VzuN3zdyGNywLk9SzbZ334PGyI=)
                          2: 8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl (hash: X7/VMt8C6gPSC8T2vpsKqhNjKnot55jAUg8M8qG9RPw=)
                          3: K8OjdeZE4Br2GTESQBNt1eSDPwY.roa (hash: fIWa2xGxlcYKnph2SKf7XRil77W6h0VckxbilfoHwsA=)
                          4: dvXRkjs-45zB5XW29YCyKf1ztCg.roa (hash: aEvTO527goc2fGvDjuX652xQ1MJZNYgikCVMkI8HG+U=)
                          5: xF-cxA4SeqtGQA9ZB7-AVyYSB2M.roa (hash: RbNnO+KUGiOJuykRwnQ3Ov2/3BQdLz3gW3J/aCk0jpM=)
                          6: y31kGASp2zNH3cDWQizl3r6O43c.roa (hash: 7ulkExljIxl1cpFUvjA7+r26bnE26w6f10AU3mMSeCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:42:9f:64:94:33:34:d3:ec:d2:a8:fe:f7:88:75:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f30e445195b64d799b822e99947792e0cab32b6d
        Validity
            Not Before: Sep 20 10:00:31 2026 GMT
            Not After : Sep 21 10:00:31 2026 GMT
        Subject: CN=22ba41e967c38f878c1778bfaf1c4d0712334449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ce:dd:e7:38:b0:d2:dd:4e:3e:15:53:17:3b:
                    9e:9c:40:6f:de:58:d7:80:f2:30:7b:74:ff:67:5b:
                    f2:90:e5:a3:5d:28:6a:be:f4:b0:09:1d:d4:ca:de:
                    db:56:98:5a:f6:2c:d2:a1:79:7b:27:84:43:7b:89:
                    50:6b:70:65:53:63:1b:2c:cb:9d:10:cd:f0:cd:0d:
                    c4:97:b9:ee:ff:05:ce:62:f6:80:8c:58:7a:09:ff:
                    5f:fc:30:17:29:28:aa:99:61:4c:96:ab:d2:48:49:
                    d6:7d:49:1d:72:e2:40:c3:55:42:46:c6:65:e9:3a:
                    3c:fa:88:f0:96:0b:ad:d1:a5:06:1d:2a:3e:e6:cd:
                    6b:58:4e:c6:fc:4e:a3:d6:19:cd:dd:40:23:7f:94:
                    af:60:a4:3e:ad:d6:13:26:c6:e1:03:39:e4:6e:40:
                    c4:36:90:0a:c7:67:e4:f6:74:c3:0f:98:35:13:33:
                    a7:e7:dc:ef:24:41:7c:29:02:aa:f7:38:67:59:5e:
                    7e:d5:41:b9:e4:d7:dd:82:c9:93:4b:9e:71:f0:8d:
                    fd:09:94:52:af:4f:c9:84:3f:bc:90:a6:5d:05:89:
                    ce:fd:82:51:e9:c3:4c:a2:49:3c:9f:6f:80:e8:0c:
                    e1:68:b5:f9:97:f2:86:e5:ac:70:e0:bc:4e:a8:8a:
                    ea:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BA:41:E9:67:C3:8F:87:8C:17:78:BF:AF:1C:4D:07:12:33:44:49
            X509v3 Authority Key Identifier:
                keyid:F3:0E:44:51:95:B6:4D:79:9B:82:2E:99:94:77:92:E0:CA:B3:2B:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8w5EUZW2TXmbgi6ZlHeS4MqzK20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/b52c5d-95ba-4dd3-bba8-b7ca1f4728d0/1/8w5EUZW2TXmbgi6ZlHeS4MqzK20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:21:28:6b:75:56:eb:40:1b:26:6d:28:74:73:dd:d2:3b:ca:
         4e:11:67:d5:4f:c9:b3:9d:07:78:75:b6:d0:7c:13:d5:17:18:
         bf:92:fc:65:d9:2e:8e:c4:b6:41:fe:d8:03:37:b7:71:bb:5c:
         f2:4e:3d:7d:9f:ad:1d:9b:29:a6:fb:94:91:d9:26:33:bc:41:
         58:54:50:b4:c1:85:35:bb:21:82:6b:4b:c2:1a:c3:24:43:ce:
         9f:ff:cf:b8:93:3c:78:56:d3:43:ac:a7:68:bf:5d:8d:3e:22:
         d8:74:f7:cc:9f:19:06:e4:71:65:1e:38:28:bf:73:7d:c9:54:
         83:1b:c2:bf:32:69:60:a0:99:64:e8:55:58:56:be:cb:e0:af:
         d4:40:ed:d2:58:30:53:81:ea:51:98:01:6b:01:20:28:6d:2e:
         25:e0:e7:05:8e:5a:8f:9f:88:14:2e:82:e1:72:ac:78:e6:42:
         52:09:87:64:a5:b5:70:67:dd:b2:ff:9f:c3:66:38:6d:9a:fc:
         1e:92:da:98:a3:8a:be:99:ca:37:c6:0d:ff:94:03:45:70:36:
         fa:59:32:3a:cd:2e:71:dc:73:3c:2c:03:90:56:3f:69:45:11:
         93:57:e5:0e:74:3d:95:c7:b7:d3:c6:1f:5a:78:65:d7:84:f6:
         dd:f3:5a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:32:01 2026 by rpki-client