Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
File:                     C1yvJi_b_MX_MOKKUQRkbieokmI.mft (raw, json)
Hash identifier:          cJUQEpAEFuc1BU1aUCTDaufJEXGryjIM6eMY45pPqPw=
Subject key identifier:   52:8F:7E:8D:8D:DB:93:7D:61:2B:A3:CB:01:E6:11:6F:B9:02:54:4D
Authority key identifier: 0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62
Certificate issuer:       /CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
Certificate serial:       01A0C82126F5A60C42C6C8F209B2A29A68F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
Manifest number:          1A6B
Signing time:             Tue 22 Sep 2026 08:00:10 +0000
Manifest this update:     Tue 22 Sep 2026 08:00:10 +0000
Manifest next update:     Wed 23 Sep 2026 08:00:10 +0000
Files and hashes:         1: C1yvJi_b_MX_MOKKUQRkbieokmI.crl (hash: +qS7y3M515mR0rHfYrqcCKWN2TOmREOy5h4/pAco73I=)
                          2: OWJuJrNuwbbFDFgA56uuuJeCvL8.roa (hash: /ZFH55PDC4s2E7M5LW3jwm4Uto4IlWIhyCzpet8FzZY=)
                          3: jHOSi9_oJekIEx4EmUwyddmGDN8.roa (hash: Ntcg6Twu+N2HgOTH++SeVjtpqrilgEpyp5kKVNoLrTg=)
                          4: kN99vFdbAempQ2A2_gxGNJ7ed64.roa (hash: 1v+1gMi8uf5SBhW1FJK7tf586/slgxWuh9VuZL56b4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:21:26:f5:a6:0c:42:c6:c8:f2:09:b2:a2:9a:68:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5caf262fdbfcc5ff30e28a5104646e27a89262
        Validity
            Not Before: Sep 22 08:00:10 2026 GMT
            Not After : Sep 23 08:00:10 2026 GMT
        Subject: CN=528f7e8d8ddb937d612ba3cb01e6116fb902544d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b0:cf:3a:ed:a2:4e:9b:7e:6c:76:e7:61:80:
                    9d:47:62:9e:90:70:97:8f:0a:ef:81:29:e4:8a:8e:
                    00:8c:94:e8:ce:f3:8d:bb:a0:3c:3d:a1:83:d6:e9:
                    58:84:fa:f7:98:00:2b:4d:17:8f:2e:55:de:96:42:
                    2c:d8:20:b2:ab:fe:c9:84:18:99:e8:c0:59:b7:79:
                    00:a0:70:e1:67:a6:e5:71:bc:40:b8:09:8e:96:8d:
                    91:7b:cb:e2:e1:97:19:2d:8f:0d:6e:30:92:c3:c3:
                    58:b1:f1:7c:65:b3:39:64:d7:8e:e8:11:fa:fe:85:
                    08:7b:3a:ba:6d:b3:3e:72:ce:dc:76:03:8b:0c:4e:
                    dd:05:0b:1b:2f:dc:ca:2b:e5:aa:72:fb:b5:a2:a8:
                    37:3e:a9:e3:20:c5:b7:ca:4f:8e:ab:f2:88:df:da:
                    7d:97:cc:f0:27:51:4f:0e:ac:dd:7e:32:f2:3c:76:
                    21:6e:17:93:18:6b:58:32:5a:c8:1c:12:b4:0f:23:
                    9c:3a:8c:84:d4:cb:a7:9e:48:96:7a:93:68:88:a2:
                    dd:1f:e2:65:54:27:b9:2e:8d:27:25:b1:7e:22:eb:
                    f6:2f:2c:3a:ba:90:3c:d5:80:45:01:7d:73:07:8a:
                    72:02:ab:18:a4:99:22:c4:55:a2:ca:ef:0f:84:4e:
                    a8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8F:7E:8D:8D:DB:93:7D:61:2B:A3:CB:01:E6:11:6F:B9:02:54:4D
            X509v3 Authority Key Identifier:
                keyid:0B:5C:AF:26:2F:DB:FC:C5:FF:30:E2:8A:51:04:64:6E:27:A8:92:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1yvJi_b_MX_MOKKUQRkbieokmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f4b8e9-686d-41be-9891-df1e95d7edd9/1/C1yvJi_b_MX_MOKKUQRkbieokmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:7d:ba:ec:8c:13:be:ac:fe:a0:0f:97:bc:80:69:c5:49:a0:
         6c:4b:ab:f0:bc:de:42:a1:ac:87:a2:37:cf:12:24:61:4f:26:
         dc:27:9c:3b:4e:05:64:ad:56:d9:3c:0e:96:ad:b4:ca:13:95:
         34:3c:f5:b3:96:ec:a2:f3:8c:df:35:f4:59:45:99:ae:05:07:
         40:2f:42:c0:f9:96:40:f2:82:41:d7:6b:79:36:60:de:ef:bb:
         ec:3f:7b:53:fb:09:93:df:fd:ff:1d:53:bf:66:8c:98:81:8d:
         0a:a7:65:13:7a:73:15:e7:dc:82:03:3f:6c:59:1a:06:fb:eb:
         e8:12:78:50:89:1e:07:a5:2e:17:b9:55:3c:6f:29:ac:c8:c2:
         24:bd:5e:27:1c:d8:c4:72:06:7a:47:7d:ac:d7:ea:c3:c2:8d:
         dc:18:9c:7b:0f:e6:ec:7b:ed:44:e8:01:f8:86:70:74:70:02:
         72:e6:9f:39:6a:94:c3:15:9e:9d:1f:97:a9:f7:a0:10:61:84:
         fb:3b:19:ca:c1:dd:15:be:a3:35:db:b7:28:69:80:a1:71:1e:
         33:2d:87:48:94:0d:09:ec:c1:30:be:4c:0c:39:a3:7b:e9:46:
         c0:10:37:0f:d2:b6:03:8b:1f:96:6e:5d:4d:64:eb:65:10:bb:
         1a:4f:d3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:11:27 2026 by rpki-client