Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
File:                     MobhKf8m2K3BBxSpHKU9gAsG_iU.mft (raw, json)
Hash identifier:          uGAkKq2mR6o5lKN4pvlgWrolUeKq6Fr65UwlEdlbMPc=
Subject key identifier:   E6:14:7D:7F:FD:4D:E8:8C:0D:8F:33:50:BA:37:D7:86:6A:E1:6F:7F
Authority key identifier: 32:86:E1:29:FF:26:D8:AD:C1:07:14:A9:1C:A5:3D:80:0B:06:FE:25
Certificate issuer:       /CN=3286e129ff26d8adc10714a91ca53d800b06fe25
Certificate serial:       019D98F41F60A5C58338FF46DFA87C3EF439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
Manifest number:          0896
Signing time:             Fri 17 Apr 2026 01:00:28 +0000
Manifest this update:     Fri 17 Apr 2026 01:00:28 +0000
Manifest next update:     Sat 18 Apr 2026 01:00:28 +0000
Files and hashes:         1: 1zoQceuOvt344ZlaLSwyO8txqS8.roa (hash: 9QVYcBnBzg93X4oPERVNxsL4xQPuP9NLRuwQb+0Ocws=)
                          2: MobhKf8m2K3BBxSpHKU9gAsG_iU.crl (hash: Sg9pvmygdp0YmBAweRjB4w4wJ0I73xRN/SXsW0fT6Gc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 01:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:f4:1f:60:a5:c5:83:38:ff:46:df:a8:7c:3e:f4:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3286e129ff26d8adc10714a91ca53d800b06fe25
        Validity
            Not Before: Apr 17 01:00:28 2026 GMT
            Not After : Apr 18 01:00:28 2026 GMT
        Subject: CN=e6147d7ffd4de88c0d8f3350ba37d7866ae16f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:c7:ea:0f:35:50:ca:8d:4e:8b:e4:03:c0:
                    c5:b2:1f:55:06:c1:29:e1:ce:a9:33:c2:46:c9:5c:
                    60:e5:42:42:c4:51:79:c2:31:d6:d9:52:47:29:27:
                    45:4d:b1:f8:ae:d2:73:dd:da:df:36:ab:96:d9:e3:
                    0e:7f:a4:cd:45:40:f7:c5:6a:25:75:e3:91:11:d7:
                    f5:42:c9:0f:51:f0:66:2e:3d:53:35:3f:d6:cd:cc:
                    2e:98:44:f6:86:79:90:c3:b4:0d:39:d9:3d:44:cd:
                    78:81:c9:da:76:2f:fb:35:2d:39:6c:8b:a5:99:fd:
                    00:89:73:54:55:bc:8e:d5:9c:97:cf:a0:d4:b5:a4:
                    da:08:9f:13:31:5b:ce:bc:64:b3:e9:29:a4:d4:c5:
                    54:16:4f:1e:aa:97:5a:11:12:59:0c:60:06:70:10:
                    08:a4:2d:09:2c:a8:e8:dd:31:79:b5:a3:81:8c:4d:
                    ce:7a:b0:4a:02:0e:6c:0e:f3:f1:92:15:92:0c:2d:
                    74:45:6f:99:07:7f:32:4b:fb:3f:5a:c3:65:7e:13:
                    ab:e8:a6:99:40:f8:55:56:96:2c:e2:49:05:5e:9c:
                    0b:85:ff:d1:cd:e4:e1:14:a9:f9:4f:2e:e5:43:42:
                    ba:54:c4:e3:d2:d0:83:6c:14:83:4a:f6:0d:5e:45:
                    3e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:14:7D:7F:FD:4D:E8:8C:0D:8F:33:50:BA:37:D7:86:6A:E1:6F:7F
            X509v3 Authority Key Identifier:
                keyid:32:86:E1:29:FF:26:D8:AD:C1:07:14:A9:1C:A5:3D:80:0B:06:FE:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MobhKf8m2K3BBxSpHKU9gAsG_iU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/649476-2b03-4cff-b918-8a5fe0ef17b8/1/MobhKf8m2K3BBxSpHKU9gAsG_iU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:aa:85:97:9a:e9:fb:1b:7a:eb:8c:22:a4:e1:84:1f:47:78:
         c5:2e:20:ce:80:ac:5c:db:91:73:24:ac:a8:96:a8:94:15:74:
         6c:ce:2d:b1:06:90:d3:3d:c2:62:da:c4:f2:a2:fc:21:aa:ee:
         08:47:d3:c4:ab:7a:06:d4:58:c1:2b:27:e7:81:ea:ab:02:b4:
         e3:26:7a:08:fe:d5:b1:67:d8:82:4b:aa:27:c1:f2:e1:08:83:
         00:b2:94:b4:e9:a6:78:ba:64:c5:d9:2d:ca:c0:f6:c2:7f:bf:
         3b:1c:29:e7:04:08:52:bc:9f:84:99:7b:5d:03:5f:fb:10:7c:
         2c:8a:91:36:be:70:f9:3e:e6:1a:73:4e:bc:3e:43:bc:c8:40:
         34:4f:b8:da:e8:57:ad:91:a8:be:03:34:84:e7:d6:50:0f:ee:
         c8:1b:f4:f8:84:31:49:61:34:01:80:cf:13:48:23:4d:7d:33:
         0a:d5:31:12:1c:e3:af:69:67:6a:99:1d:3f:0e:f5:2c:a2:5c:
         b5:0e:8d:63:88:31:88:a5:b5:e3:89:f0:2b:03:d8:86:dc:22:
         df:44:5c:e6:b8:80:aa:55:12:92:de:6b:bc:52:36:76:8b:34:
         71:f5:f4:bf:77:95:a8:90:49:25:5b:26:88:74:cf:d0:26:19:
         6f:a3:3b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:36 2026 by rpki-client