Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
File:                     advh59nofWhwGkA1p2xRv-zYjYE.mft (raw, json)
Hash identifier:          110MANrIwEvs9L0oW/k5j/6tFpV9+D1NwCkmKh1Qkjs=
Subject key identifier:   43:82:46:F6:E0:B5:95:72:7F:05:2F:9E:A3:54:90:93:42:D9:A4:D8
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Certificate issuer:       /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial:       01A0E5F5DE38AC0F56C243BE210024353DA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
Manifest number:          0811
Signing time:             Mon 28 Sep 2026 03:01:30 +0000
Manifest this update:     Mon 28 Sep 2026 03:01:30 +0000
Manifest next update:     Tue 29 Sep 2026 03:01:30 +0000
Files and hashes:         1: 144YKZFeHUoWAh6egSqndWusFOM.roa (hash: JebAk5xxUlwF25bt/7wgP5P3eQrs43nqDPNiHs8sVDE=)
                          2: 2_5Pizr_dey_wsN1BXCTRJH3EG0.roa (hash: j9IlFbOau5bJeR6L12OLqIg9qpTzlR19TGig6zEhDF4=)
                          3: 5zy2Ulr79dbtTaE3OZs_6qr3UqE.roa (hash: EEAEVHUAhDuMxhb53Mdri68EpJGkXtEYX2cNgsYZpzc=)
                          4: 9pPf8N-xbMT9o8UBJiPr7d92dmo.roa (hash: QOYbkI9+2diJOwe6krK7d78idH2agB/NPLIUaIdszRQ=)
                          5: GzR_Gn9aMAHUr1ePa2ecaxR0bwU.roa (hash: 7i6X+85SPVw3sqcP1208MXkTesdemK8+2JulDhTtOgk=)
                          6: H-qQrCrAktzV-DbBsgXII5ecG6E.roa (hash: erbHrqWEc0I2T4g+aCnNjuIZqyQhXGo0pcfKHlJM7/M=)
                          7: KQt0bGNTmAqkKMpA808bq5qAorg.roa (hash: HfmKhmXTk452cgTDlSlUC3REiJ7+v52ou6kKwFAi23k=)
                          8: L5wbMaW6iLNCTWg3v6DA5hlTUEw.roa (hash: FzuvIo201WVt27BM5X7jwcOguZldBZloRPmtC7hcI1M=)
                          9: PLMbYZg-ZJoMJXEwD_dNPsS7CC8.roa (hash: KUJkUeg6zm3w35+L+38+PiwvNkQMV/2nX08/uGAy2lM=)
                          10: PPbDqXTI2oLfXrOdBjzamnjf-Is.roa (hash: exsR5Q3c8hhnVYhW0MoOSEpqsmdyDC5TxI3F+Ib3Uig=)
                          11: Rk3iX8TpkaQgD3TF-fnI9o7W7O8.roa (hash: bofsGduriRhR/R/BQsCSeddnTYoQ+RMoW3f7cBT+4OE=)
                          12: TnLBmBgQSFjNyZk9wLYLseWxWy8.roa (hash: L8Wqf5zUSRS3tMpgIljce/Plv8K5QgHIKFrd9mENn5A=)
                          13: UPYPtFt9hA7Fshl044W18IsW6iI.roa (hash: +/X5gYeSTMRTy1HrrsqCpkKxEcusQnKC9lCBav6Kbf8=)
                          14: XOJiaLeJCz3ytdO00WBq937piI0.roa (hash: v2vqT1L2zCbVq2R1hKoPt/8mcKtO7ZRpN5eQuLPaByE=)
                          15: advh59nofWhwGkA1p2xRv-zYjYE.crl (hash: gLrt3su7Xc9dRUomFKQt8TYVxlA5Tr8HQ1TXhXKAOCM=)
                          16: n4DxEm2C9DgfRdTFUEly40c3ySQ.roa (hash: EEKVIWMbLgevLDeloMM06tT9vww9YdjYKwtKyRl3ARE=)
                          17: paj8DkvX3JY5yJbmewavbftSsEU.roa (hash: oxEzRffKUATaKxFAdchv3n3r/z8Z9CRcjER0mcVzjBs=)
                          18: vNR9lGFOCfab6bTTp8G08FNVEf8.roa (hash: 4XTEzmqXelwK7Dpu3c2vtVcqR7va6XfQ3QnP6hRZaQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e5:f5:de:38:ac:0f:56:c2:43:be:21:00:24:35:3d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
        Validity
            Not Before: Sep 28 03:01:30 2026 GMT
            Not After : Sep 29 03:01:30 2026 GMT
        Subject: CN=438246f6e0b595727f052f9ea354909342d9a4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4d:e2:ad:f5:23:72:9f:a1:c7:83:bc:9d:ce:
                    20:7a:d0:12:27:30:8a:e4:4e:ef:ce:e8:e1:aa:03:
                    54:46:27:82:07:fd:bb:d3:f3:61:da:d9:c3:f0:0e:
                    68:0e:b6:49:bd:03:f5:82:d7:f7:47:5f:82:27:0e:
                    40:0c:96:0e:6e:1e:87:d5:db:24:21:59:fc:25:1f:
                    96:8b:0d:19:76:d8:37:1c:18:c6:65:c9:1f:3f:81:
                    c7:11:26:61:cc:6f:46:1d:4a:fb:f9:cd:21:bf:fc:
                    76:6f:ca:60:c0:74:c8:13:76:d4:db:ec:6f:8f:b7:
                    89:63:cf:71:28:7b:e8:cf:27:7c:4f:3e:80:0e:9a:
                    1f:11:5c:f7:e8:b7:d1:2f:40:5c:52:70:42:5d:dd:
                    9e:1b:87:bb:ac:b8:72:d4:87:51:c5:32:c5:0a:2e:
                    ee:47:ea:6a:29:f3:b1:25:62:f8:59:7d:d0:5a:95:
                    2c:a8:b5:91:99:02:a3:67:b4:e0:8c:0f:92:6e:1f:
                    ff:4c:52:0d:7d:ff:f4:03:21:eb:07:af:c2:ec:2b:
                    33:b8:56:13:b7:a7:64:01:bd:d1:7b:df:c4:24:2e:
                    ee:f2:7d:7a:d5:c1:84:31:18:82:c4:d5:d2:68:3e:
                    66:73:1a:37:85:45:c2:fb:34:36:eb:9f:7b:aa:eb:
                    36:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:82:46:F6:E0:B5:95:72:7F:05:2F:9E:A3:54:90:93:42:D9:A4:D8
            X509v3 Authority Key Identifier:
                keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:d9:44:88:04:3f:91:3f:74:cd:f0:eb:23:fa:5c:f2:74:41:
         f3:85:ad:86:7d:84:c2:cb:55:44:1b:0c:b1:5f:e6:40:40:61:
         7e:a8:e6:81:8f:59:be:1e:29:d5:05:57:3f:49:93:f5:89:51:
         3e:fd:82:c7:03:ed:b7:ad:fd:7c:3a:26:fe:92:4e:29:d9:04:
         da:a7:21:87:8a:c6:9c:76:0b:ec:a8:66:b6:5e:77:92:e1:37:
         f5:95:9b:ea:c4:80:a6:b3:1e:48:45:de:f2:21:51:30:7b:db:
         b2:82:4f:02:86:1b:6b:12:e4:c1:8e:be:13:73:a6:74:2b:37:
         46:a0:08:dc:a7:0d:78:89:09:8f:89:0a:89:5f:19:51:bf:a6:
         f7:3c:aa:7d:ea:eb:a4:d9:4c:e5:c8:15:d1:a6:97:21:02:2f:
         77:df:12:ef:18:e0:4b:37:db:83:6e:a9:99:43:be:8a:7e:14:
         41:90:64:f5:36:5b:a9:47:5d:d0:90:79:ed:b4:29:d7:0e:fb:
         70:42:64:ad:a7:26:49:c4:18:ba:be:61:2f:5d:31:1a:44:08:
         1e:5d:3e:35:8e:d8:f4:53:70:ea:ca:6d:77:d3:af:29:02:08:
         21:3b:c4:aa:6c:47:d1:fd:01:2a:b7:9e:ae:79:a8:e9:0a:99:
         cd:b6:6d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:26:36 2026 by rpki-client