Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
File:                     RV9UXiqU8FHOuPgPRGwcthwObI4.mft (raw, json)
Hash identifier:          jV0Hy5epO6A5UY5fTY5Q/nQSvyNcBY0ukm4fjqk7tQY=
Subject key identifier:   90:B8:53:43:9B:A2:33:FB:3F:43:55:54:23:5A:A0:35:47:31:64:F1
Authority key identifier: 45:5F:54:5E:2A:94:F0:51:CE:B8:F8:0F:44:6C:1C:B6:1C:0E:6C:8E
Certificate issuer:       /CN=455f545e2a94f051ceb8f80f446c1cb61c0e6c8e
Certificate serial:       01A0C331DF3F3C2559206CB626B31525E33B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
Manifest number:          0488
Signing time:             Mon 21 Sep 2026 09:00:20 +0000
Manifest this update:     Mon 21 Sep 2026 09:00:20 +0000
Manifest next update:     Tue 22 Sep 2026 09:00:20 +0000
Files and hashes:         1: RV9UXiqU8FHOuPgPRGwcthwObI4.crl (hash: rgyZum+5RaE7sidnFEwj1opJWzAgSY2PMAK+CVqQTTY=)
                          2: TGnGTCkP1dTeSG5Z0jeGksx2_TM.roa (hash: 4RJjvyKtkRooo1Te20TythHJtDrbG5VCS6d6MKrm0hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:31:df:3f:3c:25:59:20:6c:b6:26:b3:15:25:e3:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455f545e2a94f051ceb8f80f446c1cb61c0e6c8e
        Validity
            Not Before: Sep 21 09:00:20 2026 GMT
            Not After : Sep 22 09:00:20 2026 GMT
        Subject: CN=90b853439ba233fb3f435554235aa035473164f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:21:81:4c:d2:46:cd:73:37:ea:21:0f:b6:8f:
                    90:39:77:52:91:2f:e7:44:63:b4:e2:13:ca:e5:59:
                    3d:d1:8c:cc:6e:da:7f:de:a1:ea:60:7a:6f:07:16:
                    8b:bc:d2:3a:2f:8c:28:b0:71:b9:86:eb:04:e6:8b:
                    07:aa:ec:62:cb:4d:e9:70:53:57:dd:10:4f:6e:08:
                    c0:24:3e:3a:36:01:c3:ed:33:02:55:0d:35:be:7f:
                    01:1d:24:62:8f:5a:9e:13:3c:ec:37:78:06:55:67:
                    58:f3:a0:6c:57:4b:a6:bd:09:ac:88:16:a0:59:03:
                    56:92:9b:4e:5c:be:b0:2c:43:f3:42:c9:81:70:4e:
                    42:b8:fe:b9:45:ac:35:04:2a:98:68:47:e1:74:d4:
                    82:19:a4:51:07:80:39:b5:ec:d2:10:66:18:88:4a:
                    81:d4:48:cd:dc:22:a7:21:47:6c:2f:f5:78:a6:18:
                    5a:48:71:ca:95:dd:c4:01:5b:96:c4:f7:3d:8d:28:
                    fb:17:cf:3f:da:9a:0c:6f:d4:c3:e8:62:09:25:f1:
                    a3:f1:75:4a:b2:3c:38:34:87:85:89:a9:58:b9:ab:
                    b5:b0:18:1b:86:d1:72:ff:6d:68:4d:24:3a:20:fd:
                    1a:77:84:67:9c:62:c4:6b:74:72:1f:a3:38:6a:d4:
                    51:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B8:53:43:9B:A2:33:FB:3F:43:55:54:23:5A:A0:35:47:31:64:F1
            X509v3 Authority Key Identifier:
                keyid:45:5F:54:5E:2A:94:F0:51:CE:B8:F8:0F:44:6C:1C:B6:1C:0E:6C:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RV9UXiqU8FHOuPgPRGwcthwObI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e8449a-a797-452b-bdfa-9c4211dda541/1/RV9UXiqU8FHOuPgPRGwcthwObI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:34:f6:93:6b:72:fc:64:d2:c7:6d:fb:94:0c:4a:dd:c0:af:
         f5:f6:66:b8:93:e4:5f:c2:70:35:1b:63:a3:3d:2f:d7:77:3b:
         0a:62:08:56:4c:4f:00:39:5a:eb:2e:8b:cb:7d:fe:b3:9e:6b:
         65:b8:7e:11:3f:5d:73:02:7c:2c:03:34:fc:10:5e:fe:74:73:
         6e:48:4d:23:a2:3a:4c:da:94:90:8f:cc:0f:9d:e6:36:34:ef:
         8d:ed:a9:3b:6d:11:11:ab:b8:aa:4d:63:0a:6d:39:42:1b:a1:
         0f:97:4c:d9:27:d9:e9:b8:a1:5c:52:41:54:cf:83:6a:97:bf:
         ff:06:fc:a9:f8:63:94:13:ec:0f:9e:5d:1e:6d:1e:54:fb:c8:
         35:f7:46:35:4b:54:8e:d0:e3:e3:51:94:66:b9:51:74:ca:d1:
         31:43:ac:b4:00:b3:1b:cc:2a:41:18:24:db:f3:93:14:b6:c1:
         85:15:6f:f0:b3:83:40:46:a0:e0:5e:19:b3:b4:14:bb:cc:44:
         7b:b4:2f:09:32:bb:df:2d:63:48:c5:8d:e0:97:b6:da:f4:0b:
         17:e8:c5:b7:ed:7d:81:a9:fa:50:3b:7b:79:cf:96:73:15:57:
         2d:2a:2a:58:5e:61:f1:06:de:42:e1:9f:34:86:43:bc:df:6c:
         61:aa:36:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:40:02 2026 by rpki-client