Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File:                     8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier:          evk+yYCa0mOLE13Sm+/w2pgYwq0DA2lZZ2ubqRicOZk=
Subject key identifier:   CC:41:3F:49:1A:DA:43:8D:B7:53:C8:94:4F:43:D1:60:6D:56:5B:57
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer:       /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial:       01A0DCBB5E8BED058F0B59AC85FBA0085D14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number:          151C
Signing time:             Sat 26 Sep 2026 08:01:02 +0000
Manifest this update:     Sat 26 Sep 2026 08:01:02 +0000
Manifest next update:     Sun 27 Sep 2026 08:01:02 +0000
Files and hashes:         1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: p0Q2WnzBKbYSex4y9sB1xSY2KX+7J1JyLIXkqReljLQ=)
                          2: 9hD2ERgxFZRceTwyPk94l0SmsBw.roa (hash: 7W+094dJdVnFZLMoB+fr0KNBxnfuASm7T/kRouyIeBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 08:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:bb:5e:8b:ed:05:8f:0b:59:ac:85:fb:a0:08:5d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
        Validity
            Not Before: Sep 26 08:01:02 2026 GMT
            Not After : Sep 27 08:01:02 2026 GMT
        Subject: CN=cc413f491ada438db753c8944f43d1606d565b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:31:1c:77:cc:bc:05:ee:9d:d0:dd:e3:62:dd:
                    f7:82:cb:e3:52:5f:81:a0:90:05:04:74:93:ee:d5:
                    32:8a:03:4f:a1:ec:49:29:11:cc:dc:15:ea:0e:19:
                    be:b4:ac:ce:3e:bb:31:bf:6a:cc:c4:50:7d:1f:87:
                    94:fa:39:53:6c:07:17:91:b5:f4:18:09:d2:de:1b:
                    27:3b:73:d7:89:67:64:0a:5a:cc:fd:63:dd:91:a4:
                    4f:f0:e2:4b:ae:7b:e7:b4:ae:5d:a8:29:76:5b:68:
                    87:85:35:9d:01:a5:0c:c4:ad:e6:36:56:54:e9:e5:
                    d4:f4:b8:79:38:ee:e9:a4:99:99:ac:2d:5d:26:75:
                    08:be:5a:1f:98:1b:7f:bd:7a:a2:73:c4:4e:25:cc:
                    e7:bf:65:57:9f:ae:5d:ce:e1:ed:ca:2a:5b:fc:be:
                    03:8c:45:6e:dc:00:fc:4a:a4:85:a1:5a:0b:22:6b:
                    06:13:3c:2d:76:0d:26:71:90:66:ac:c2:39:cd:6b:
                    7f:04:0d:5d:05:60:2a:f1:2e:ed:93:ae:9f:98:9d:
                    ba:56:6e:03:23:f6:a3:db:8b:d0:e6:93:03:13:f0:
                    52:66:03:dc:70:b5:bb:99:a2:7a:8e:de:63:8c:38:
                    ea:4a:52:10:f3:10:e1:b8:be:f0:66:6e:69:59:0e:
                    1a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:41:3F:49:1A:DA:43:8D:B7:53:C8:94:4F:43:D1:60:6D:56:5B:57
            X509v3 Authority Key Identifier:
                keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c5:ac:9d:51:5a:f4:47:c9:d7:e2:3c:f8:cf:59:39:3d:d0:
         29:26:b4:c1:65:d8:58:8b:46:6a:57:76:ba:a9:e1:8e:35:ee:
         9f:43:2f:6c:bd:3b:ea:df:c2:f4:bc:45:72:aa:ca:25:2c:6a:
         c1:dc:ab:d3:21:02:ea:75:66:5a:a8:e5:37:e3:7e:15:ff:ef:
         08:4a:0d:7b:95:d9:26:fd:9b:09:74:1a:e7:2b:0d:7a:9c:12:
         5c:35:a3:61:7e:14:e6:96:f7:c9:af:2e:ce:2c:f5:97:59:d8:
         89:c7:c7:db:54:45:23:0d:c9:5b:be:12:ba:b8:b8:fa:1f:3e:
         8f:16:ab:a9:8f:ba:fd:a7:06:dd:05:3a:3a:9b:83:cc:d2:92:
         3b:a8:96:7b:ab:59:bc:cf:de:8d:66:7b:41:1f:f0:8f:0c:3e:
         b9:a4:d5:5a:68:7c:83:c2:9f:c0:cf:d2:fb:2a:bb:00:72:c5:
         67:3b:1a:22:ba:c3:c6:5e:b0:00:1a:61:aa:89:73:82:10:ae:
         e8:bb:ee:c3:ac:cf:75:1a:16:e2:d4:7e:b9:74:c1:1a:19:56:
         ba:c1:a5:f5:bb:11:2f:8a:90:7f:a7:08:51:22:df:30:96:f6:
         0d:0c:c5:05:6e:92:76:51:b9:e7:96:00:60:fc:aa:8f:0d:eb:
         10:cb:fa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:02:33 2026 by rpki-client