Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
File:                     8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft (raw, json)
Hash identifier:          C/ut5INsxzIjl7E/ulsbdkVcYJ3ShaRTEQwHnTQ51zE=
Subject key identifier:   40:23:6E:97:73:2F:AF:FE:78:56:DD:3E:29:74:19:DD:8B:AE:6E:6A
Authority key identifier: F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24
Certificate issuer:       /CN=f260075c0944fb1634b628bb10b67f12c873e424
Certificate serial:       01A0D539123B37EE62ED77F7E3ED334DB781
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
Manifest number:          03C4
Signing time:             Thu 24 Sep 2026 21:01:22 +0000
Manifest this update:     Thu 24 Sep 2026 21:01:22 +0000
Manifest next update:     Fri 25 Sep 2026 21:01:22 +0000
Files and hashes:         1: 8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl (hash: YaLbwj0nKWGIWHUwH1LNyRy1yQ5F7o9ZwlzTao68MHQ=)
                          2: LS1I0LR07OhJxEEUNJqhn1-nNT0.roa (hash: 05VWudDvTZxRagJ/ZMpYgYcO8jy0CMReHlty6IA1+UM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:39:12:3b:37:ee:62:ed:77:f7:e3:ed:33:4d:b7:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f260075c0944fb1634b628bb10b67f12c873e424
        Validity
            Not Before: Sep 24 21:01:22 2026 GMT
            Not After : Sep 25 21:01:22 2026 GMT
        Subject: CN=40236e97732faffe7856dd3e297419dd8bae6e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4b:cb:db:b4:4b:c7:c5:45:5e:d1:f5:71:58:
                    1b:78:2d:42:8d:68:28:35:9c:3d:9f:fe:08:43:1a:
                    0f:fc:13:79:50:eb:d1:c3:46:df:e4:79:41:9e:a5:
                    ed:74:f8:ab:3b:3e:a5:2a:11:3d:48:45:4d:d3:11:
                    3f:2e:08:20:63:44:ba:4e:ba:39:c2:55:14:ad:05:
                    f4:cf:0f:60:32:06:20:c6:f4:c7:f7:26:c5:c7:bc:
                    56:98:e1:2e:2c:b5:01:9f:cb:b7:cc:a2:c1:d9:cd:
                    53:36:ea:6e:13:b3:7c:46:b1:3e:21:89:62:96:a7:
                    de:13:e3:40:86:3e:e6:c8:d1:5d:9f:4a:55:18:2a:
                    8c:1d:eb:e2:37:ff:ea:02:f1:bb:8c:aa:d3:0c:be:
                    4c:40:d2:9e:92:5e:82:7b:cf:a2:ae:50:92:f2:f1:
                    ea:31:ca:66:5d:a5:d7:10:e2:f6:9f:f8:20:53:00:
                    cc:56:b4:70:a1:ee:c7:28:48:f8:84:f3:f8:71:81:
                    e9:7f:7a:98:1c:ce:0f:6c:09:94:b1:ea:cb:b0:90:
                    40:59:33:fc:95:c4:df:38:28:f1:d2:94:ec:cf:9d:
                    7a:16:1e:3c:40:40:6b:6c:78:67:9c:ca:10:d1:c4:
                    0a:48:02:b8:31:43:97:9f:88:e2:0c:7b:a3:50:a2:
                    2a:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:23:6E:97:73:2F:AF:FE:78:56:DD:3E:29:74:19:DD:8B:AE:6E:6A
            X509v3 Authority Key Identifier:
                keyid:F2:60:07:5C:09:44:FB:16:34:B6:28:BB:10:B6:7F:12:C8:73:E4:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9d5ce5-b6c9-48da-8e8a-6a3bb92443fc/1/8mAHXAlE-xY0tii7ELZ_Eshz5CQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:1d:e4:e8:0b:78:f6:cb:d5:41:7c:1d:ed:8e:12:de:20:80:
         a8:f0:09:28:e7:d0:e7:de:1a:07:0c:11:4b:f0:85:f2:38:f8:
         67:14:49:2d:63:53:50:33:5e:66:25:c9:5a:33:34:ff:1b:16:
         14:15:3d:7d:f3:7f:ff:c6:2b:b8:b8:05:bd:e6:c3:be:4d:ca:
         f8:a3:4a:7c:a1:79:a8:cd:f4:39:b6:0d:ea:c8:1e:53:71:db:
         fa:30:ff:50:31:7e:cc:b5:04:9e:ab:da:34:88:73:40:12:b4:
         f2:ae:fa:4d:e3:50:36:e4:4d:58:61:a2:1d:6f:37:7f:2b:19:
         8d:2d:1e:26:dc:31:dc:5b:66:2c:cb:f9:bb:30:ba:fb:c7:e2:
         17:c8:78:5d:dc:36:ba:4d:79:0a:c8:a5:8b:57:eb:32:d2:34:
         e8:a7:1e:1c:7b:39:7d:5b:80:5a:a5:ae:45:b3:7c:c2:cf:c8:
         ff:44:bc:ce:55:4e:79:2c:f8:f7:e7:68:ba:71:aa:0d:bd:a5:
         82:d8:1e:ec:bc:3a:e9:02:38:b3:55:13:07:6b:3c:d9:67:66:
         9e:c6:e1:d5:c8:0f:27:a8:e6:e4:63:09:66:e3:87:fe:20:81:
         12:0d:1d:d1:2c:9d:40:66:66:ed:2d:cc:bb:cc:1e:49:7d:33:
         c9:a2:a1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:37:34 2026 by rpki-client