Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
File:                     0PT6gHWHU7JDohZe3ep12-7oJsQ.mft (raw, json)
Hash identifier:          mptuPuBtqMWkOH/VCpmWPK9b2pqQIVo1b4PJEV8xVvM=
Subject key identifier:   2D:F0:4F:D6:C1:94:D6:BE:67:1F:78:84:C7:C2:E8:34:7D:66:E2:13
Authority key identifier: D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4
Certificate issuer:       /CN=d0f4fa80758753b243a2165eddea75dbeee826c4
Certificate serial:       01A0C21F7C8EAEB71C7CE946F7B15CCE1C6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
Manifest number:          1550
Signing time:             Mon 21 Sep 2026 04:00:38 +0000
Manifest this update:     Mon 21 Sep 2026 04:00:38 +0000
Manifest next update:     Tue 22 Sep 2026 04:00:38 +0000
Files and hashes:         1: 0PT6gHWHU7JDohZe3ep12-7oJsQ.crl (hash: PtsWP7AOLBWPetINRLV2JTw9jG1Scj1gm9EjIDWGdHg=)
                          2: pLi1qq2wcSmdgCiUnjjCoQErQdA.roa (hash: 7prO26MADaOtqZ/YBeNHajM4pUEvbdbYtkMA592/T+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:1f:7c:8e:ae:b7:1c:7c:e9:46:f7:b1:5c:ce:1c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0f4fa80758753b243a2165eddea75dbeee826c4
        Validity
            Not Before: Sep 21 04:00:38 2026 GMT
            Not After : Sep 22 04:00:38 2026 GMT
        Subject: CN=2df04fd6c194d6be671f7884c7c2e8347d66e213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:54:56:86:67:aa:3c:eb:a8:67:d2:90:c1:f8:
                    66:4c:fc:6e:96:e8:14:e6:eb:2a:35:cb:25:e5:9c:
                    96:cf:85:16:f0:88:04:92:1f:d6:74:c6:c2:11:6a:
                    52:ae:b0:6d:b0:ae:03:a2:99:e5:54:e1:28:b1:48:
                    25:00:a3:34:2d:ef:d2:fb:5f:3a:d4:1c:ed:a0:8e:
                    4c:70:c0:f8:e6:44:dd:e0:d5:b3:41:93:0a:a1:ec:
                    d5:56:0a:b8:ce:0a:11:23:3f:d2:44:cc:94:18:a1:
                    42:e6:3f:87:2a:08:7c:34:f7:89:a8:6a:89:3b:92:
                    9e:4a:bc:5a:48:19:23:75:61:1d:70:23:48:b5:e7:
                    31:2c:09:32:32:e8:69:e4:f3:59:4f:ea:ea:87:a6:
                    30:3d:b8:ff:d6:17:aa:0b:9b:b0:be:c3:e0:a7:95:
                    53:d5:b8:a6:f9:ec:03:94:6a:70:0b:57:01:96:e9:
                    ac:ff:5c:e9:38:67:82:40:ee:eb:17:cc:f3:c6:49:
                    2c:0a:66:a6:8d:73:af:30:65:54:21:01:25:dc:01:
                    6a:61:f9:7f:07:c9:4b:2a:b6:39:45:93:03:23:d7:
                    e4:63:16:9d:38:34:43:a4:ab:70:4a:0b:ab:de:21:
                    25:80:a1:06:5f:ce:27:b1:b3:b1:2e:63:18:cc:51:
                    ef:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F0:4F:D6:C1:94:D6:BE:67:1F:78:84:C7:C2:E8:34:7D:66:E2:13
            X509v3 Authority Key Identifier:
                keyid:D0:F4:FA:80:75:87:53:B2:43:A2:16:5E:DD:EA:75:DB:EE:E8:26:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PT6gHWHU7JDohZe3ep12-7oJsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ca5c19-e496-49e8-8b93-72a1f37719bb/1/0PT6gHWHU7JDohZe3ep12-7oJsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:49:29:92:67:f5:22:55:e1:62:04:d4:5d:2e:aa:fd:da:45:
         83:f0:14:91:52:c1:57:f1:fc:61:63:7f:40:74:c1:70:73:49:
         59:78:d4:8e:d7:01:23:9f:59:8a:23:a7:fe:d2:30:0f:c6:d2:
         11:ba:4d:94:b1:c7:42:22:94:8f:14:15:27:dd:d3:70:30:70:
         0e:e5:91:69:14:3f:3b:9d:46:50:9c:f2:09:fc:a6:15:d9:9b:
         f0:b4:dc:dc:72:bd:63:67:5a:b3:e3:99:e5:19:b0:4a:ca:00:
         68:a6:52:97:bb:40:23:54:2c:1a:7f:27:4b:c2:d6:d5:0f:dd:
         8e:59:1b:f3:6e:1b:4c:2d:38:b1:1f:a8:b8:c7:29:8c:e4:ea:
         7b:6a:c3:e5:ac:72:a7:10:32:d7:ca:a9:9f:53:4a:41:8a:23:
         a6:67:ce:76:82:b7:00:06:f4:49:ca:9e:fe:b4:10:c1:9b:67:
         65:28:44:b3:59:e7:7f:f8:2e:38:92:d1:ae:55:16:35:d6:fa:
         eb:e8:a2:cb:26:4a:d5:2e:46:05:6a:98:fe:8f:39:b7:58:41:
         80:42:10:77:f5:b2:28:71:54:fe:2b:23:f9:ac:f0:db:c4:11:
         13:38:33:43:fa:96:bd:5b:b9:d6:4e:0a:6c:84:1f:c4:0b:c3:
         79:c3:97:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:25:30 2026 by rpki-client