Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
File:                     0nuHf4mTQSab7GfG46CoiLp66Y0.mft (raw, json)
Hash identifier:          WKnqRkHjtFQrZ1x/Nodp2HSQkmKBwaE7FbXTVjhKIMc=
Subject key identifier:   4F:4C:52:C8:49:B8:9A:70:24:E0:8F:F4:2C:1F:BB:06:A7:62:A9:E3
Authority key identifier: D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D
Certificate issuer:       /CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
Certificate serial:       01A0C10CC7CA4178305B14645B2D6D2019EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
Manifest number:          0E69
Signing time:             Sun 20 Sep 2026 23:00:35 +0000
Manifest this update:     Sun 20 Sep 2026 23:00:35 +0000
Manifest next update:     Mon 21 Sep 2026 23:00:35 +0000
Files and hashes:         1: 0nuHf4mTQSab7GfG46CoiLp66Y0.crl (hash: PaFRSGeBHpQ8f0d3yuKi+4nbln0nN1EcXmAMeySk1sA=)
                          2: ESKSicApbc_Lc7K1oxfrHyvWB2A.roa (hash: 9hp563pGKax4wS0ioE86wmQq8LK8c0yOcQLKfH9tKgk=)
                          3: GzzDQC3ubi3zt1X18DBGioGRdBc.roa (hash: D/wNKKfIUY9J0S4B/WgJwAFtRjUwUsHpDQtQvyp4Lvk=)
                          4: a8xxFezDGCmHsEOSRqb1XFyjzzQ.roa (hash: UKvCG+Ut498aH2KrK/T04+U4clxpUw2ygew8dg+YGZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:0c:c7:ca:41:78:30:5b:14:64:5b:2d:6d:20:19:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d27b877f899341269bec67c6e3a0a888ba7ae98d
        Validity
            Not Before: Sep 20 23:00:35 2026 GMT
            Not After : Sep 21 23:00:35 2026 GMT
        Subject: CN=4f4c52c849b89a7024e08ff42c1fbb06a762a9e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:0e:d6:f9:f8:68:ef:35:db:b5:b2:ad:7a:
                    b1:12:26:7c:04:61:2a:8a:df:aa:88:b8:43:27:44:
                    ca:26:c8:7d:8f:b3:ba:7b:84:1e:d9:28:c0:c9:50:
                    fd:bd:79:c3:37:2e:ff:05:90:3e:c1:90:97:02:12:
                    47:4a:72:17:a4:ca:1a:0a:0f:5a:26:57:3b:f5:a4:
                    93:c6:86:82:b0:68:08:57:48:f5:9d:fb:d7:dc:ef:
                    8a:87:63:d3:76:a1:ef:ed:b7:c8:21:21:9b:85:3f:
                    ee:25:22:54:5a:72:78:85:87:8a:a9:4a:13:63:ab:
                    3d:21:d9:17:fa:19:c6:93:b0:f2:be:8b:b0:d6:df:
                    f2:cb:9a:b1:6c:61:91:0f:83:75:3a:07:c5:6e:8d:
                    e9:ac:dc:81:ca:16:9e:26:3f:35:11:57:19:76:b6:
                    e8:b0:b3:f4:2b:08:1b:15:7f:0b:49:80:21:af:cb:
                    e8:b8:b1:1e:99:12:d3:4e:df:fa:b3:5f:cb:3d:2e:
                    01:ee:a8:d9:e2:73:63:cc:50:8a:b9:78:bf:64:fa:
                    b9:dd:e2:f4:b3:c7:f5:da:ad:1e:cf:99:8f:dc:fc:
                    77:4f:c5:1b:1a:27:31:fd:89:5b:a6:1e:6c:b3:b2:
                    5f:34:f0:df:20:c9:e5:58:16:4d:38:0e:0a:6a:0f:
                    de:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4C:52:C8:49:B8:9A:70:24:E0:8F:F4:2C:1F:BB:06:A7:62:A9:E3
            X509v3 Authority Key Identifier:
                keyid:D2:7B:87:7F:89:93:41:26:9B:EC:67:C6:E3:A0:A8:88:BA:7A:E9:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0nuHf4mTQSab7GfG46CoiLp66Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/445ed0-48b3-408e-a1bc-9979df52b018/1/0nuHf4mTQSab7GfG46CoiLp66Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:44:f1:46:4d:44:b9:a0:21:d6:54:c4:74:b7:f0:58:28:d0:
         cc:ba:a0:e8:a0:86:d0:1b:38:32:59:5a:c5:70:a4:bb:4d:6b:
         12:32:64:6d:4c:43:94:51:e0:fc:22:45:62:6c:2a:1c:74:c8:
         65:9a:71:19:59:96:5b:72:b0:d1:cc:94:57:f6:65:63:09:1d:
         af:0a:fd:b1:c4:a0:de:36:fb:35:64:e7:00:8f:13:5d:85:a9:
         a2:da:fa:06:93:86:d2:48:67:4a:6a:88:c9:65:83:5e:48:bc:
         44:98:8f:31:7e:09:fe:88:7e:2e:6c:24:b7:73:86:c4:96:ff:
         c3:85:9c:6a:88:a4:8c:7c:41:fc:64:a4:25:f6:7a:83:48:33:
         8b:b7:7a:f0:d1:f9:41:50:b2:c3:e9:39:57:3a:bb:15:45:e2:
         05:d8:33:2e:3d:fa:8a:7a:50:68:4a:c6:2c:e8:9b:ef:5a:2a:
         82:c5:8f:48:56:7a:6d:10:58:70:6e:f9:63:dd:2f:19:82:82:
         f3:a2:3b:ec:a9:45:2d:f0:c0:78:21:bf:6a:a5:56:62:a0:64:
         82:82:98:2f:b5:84:27:65:58:de:c4:49:1d:eb:70:bd:de:16:
         77:ba:21:6e:e5:0e:70:1f:90:70:90:3b:04:c8:1e:75:13:3c:
         06:96:22:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:02:00 2026 by rpki-client