Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
File:                     9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft (raw, json)
Hash identifier:          wdze+1opi9EQDGDyleq++EdOsOpUYDWHq6EPSSjufGY=
Subject key identifier:   18:62:4E:91:D8:2C:9B:F1:02:3C:31:29:C5:A2:85:B3:C5:6D:7F:72
Authority key identifier: F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4
Certificate issuer:       /CN=f6413486886b56231dec573fad4f8ab32cbf92a4
Certificate serial:       01A0C7B3E130C91AF83AE89F2ADF406589B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
Manifest number:          15BC
Signing time:             Tue 22 Sep 2026 06:00:49 +0000
Manifest this update:     Tue 22 Sep 2026 06:00:49 +0000
Manifest next update:     Wed 23 Sep 2026 06:00:49 +0000
Files and hashes:         1: 9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl (hash: nT18HmD6zh9kg85iky47IG+GIj1WLgZS1KrNaYNhYkk=)
                          2: F5y9ZOsLF94osiTAvUu_ZpYquTw.roa (hash: XwqPFonWgi2NEgeq0iK4xwmr9JNoIB6OncnPE0wX2yA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:b3:e1:30:c9:1a:f8:3a:e8:9f:2a:df:40:65:89:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6413486886b56231dec573fad4f8ab32cbf92a4
        Validity
            Not Before: Sep 22 06:00:49 2026 GMT
            Not After : Sep 23 06:00:49 2026 GMT
        Subject: CN=18624e91d82c9bf1023c3129c5a285b3c56d7f72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:d7:19:3a:51:ef:67:4c:af:dd:7f:f6:41:
                    fc:35:06:3c:10:1a:53:3b:0e:81:17:2a:87:1a:2b:
                    49:9d:12:45:42:12:e7:08:0c:89:ff:1a:be:4e:26:
                    3d:6a:f1:fb:88:a0:58:b1:40:60:2f:22:55:be:f0:
                    27:b3:0c:6f:1a:7c:88:99:1d:fb:12:7a:e7:d2:2c:
                    43:f8:c4:71:0d:2d:36:b3:ae:be:d9:8f:77:d0:3b:
                    ba:a2:11:e8:21:8a:96:f8:cc:58:81:f9:db:d7:80:
                    91:bb:cf:13:fd:1a:78:b4:c2:64:6c:87:ba:42:bd:
                    f3:b0:91:c0:62:98:28:cb:44:fd:c1:86:24:c6:0a:
                    ae:f1:b2:ec:ef:42:29:15:33:b4:f5:90:b4:d4:b4:
                    8d:e7:e4:1d:bb:46:ea:ed:2c:37:4a:45:bb:fb:aa:
                    c3:33:fe:df:3c:5f:3d:bb:6f:05:c6:a0:77:46:20:
                    36:78:bd:02:b4:99:53:d7:f3:22:1d:71:14:bd:88:
                    38:15:52:bf:83:f1:e0:1d:cc:c7:d4:68:40:f6:12:
                    bd:b7:21:3a:70:68:ec:22:1e:c3:bb:21:ce:95:67:
                    cb:8a:3f:d9:02:ff:3c:50:ad:91:41:bc:03:90:53:
                    97:5f:3c:db:f2:f1:8d:69:9c:83:d6:12:af:30:43:
                    1c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:62:4E:91:D8:2C:9B:F1:02:3C:31:29:C5:A2:85:B3:C5:6D:7F:72
            X509v3 Authority Key Identifier:
                keyid:F6:41:34:86:88:6B:56:23:1D:EC:57:3F:AD:4F:8A:B3:2C:BF:92:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/2b587f-35e4-4bbc-bcd0-99eef6905d83/1/9kE0hohrViMd7Fc_rU-Ksyy_kqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:01:26:cf:23:c3:a8:6b:29:9e:1f:cb:a9:ae:f2:47:0b:fe:
         96:fa:ac:bf:42:fc:11:97:75:83:f2:3f:66:e7:5c:b3:d9:d6:
         af:0b:5f:ec:02:b7:23:be:06:dd:3f:eb:cd:f1:f4:cd:18:01:
         dc:3a:3b:28:f2:5c:af:4e:7d:6c:dd:4d:79:cf:8c:39:c7:1e:
         3a:81:04:21:93:33:95:d7:af:e5:dc:01:3e:47:51:06:4a:5b:
         4b:24:7c:53:85:15:19:76:32:d3:7a:c6:d2:60:64:c9:8c:d4:
         e9:6d:a5:b1:65:93:9e:8a:59:f6:03:79:93:71:61:67:7a:89:
         e8:1c:e6:2e:5f:11:c9:42:13:1a:46:a9:ee:d3:41:e2:43:49:
         c9:1c:ee:2b:2a:71:16:7d:e3:c3:36:4e:f2:c0:31:60:51:90:
         c5:40:1f:e7:b6:d1:77:5c:79:76:9d:cd:ed:9c:eb:ca:e3:6e:
         e4:e8:1c:69:a1:c0:f8:2e:81:13:71:fe:ea:67:f8:0f:5b:67:
         11:56:9f:36:a3:72:e6:09:89:2c:70:bc:6e:c7:43:f8:87:17:
         be:08:75:2f:23:71:90:75:13:6b:ca:57:ab:ca:ff:0f:8f:0f:
         64:e1:ed:9f:3e:a1:ae:ec:fc:b2:84:0f:87:29:f4:73:b2:57:
         db:29:8c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:14:19 2026 by rpki-client