Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
File:                     0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft (raw, json)
Hash identifier:          00K0w76gw2LbKNrW2vA2Y6ssbdM8Kn0G02BdzIfPRSk=
Subject key identifier:   CB:C7:21:C8:69:A1:B8:12:75:E1:B0:42:BB:47:61:B0:23:B7:C1:9A
Authority key identifier: D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B
Certificate issuer:       /CN=d09ef2093da15eec90efb837b950164669f6198b
Certificate serial:       01A0017036061EC3F7FDA0C3DCB610A39ADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
Manifest number:          09B8
Signing time:             Fri 14 Aug 2026 18:02:05 +0000
Manifest this update:     Fri 14 Aug 2026 18:02:05 +0000
Manifest next update:     Sat 15 Aug 2026 18:02:05 +0000
Files and hashes:         1: 0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl (hash: UH7lNOlU8F3bCA40pNdrl4k6uw84rfv7CVo4thyr2aI=)
                          2: y0R9OFgldF2xPpgLWZUCfSkApQg.roa (hash: K3dYxSYTTkLjGKIU3PEtGoJyW8WxL0sMjVKEq6R8Rf4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:70:36:06:1e:c3:f7:fd:a0:c3:dc:b6:10:a3:9a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d09ef2093da15eec90efb837b950164669f6198b
        Validity
            Not Before: Aug 14 18:02:05 2026 GMT
            Not After : Aug 15 18:02:05 2026 GMT
        Subject: CN=cbc721c869a1b81275e1b042bb4761b023b7c19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:80:b3:c9:a3:00:de:ed:17:d5:59:2c:7c:39:
                    3f:c2:f3:26:05:c6:a1:75:67:6d:3a:9b:ad:71:1f:
                    7a:e0:06:3e:65:f0:de:b0:93:81:bd:e1:d7:40:4f:
                    5a:f8:56:72:2c:64:c4:2c:49:55:8e:74:5e:53:3a:
                    5c:25:ca:19:78:ed:d3:11:75:c1:6c:48:d3:70:b1:
                    aa:ac:c0:9f:5a:6d:94:e1:43:ee:38:69:18:43:9c:
                    54:f8:33:c3:58:2d:81:8e:fb:db:53:8c:a1:a2:3a:
                    c3:06:17:0d:ce:eb:e6:ca:44:c5:56:1b:88:ec:bd:
                    31:a6:ec:19:b4:bc:85:85:55:43:31:b4:e4:89:03:
                    d3:3b:5e:a6:40:77:e9:a5:42:9d:88:35:91:95:e0:
                    58:b0:78:fe:18:3b:ae:89:b2:10:98:21:07:27:7e:
                    68:50:bd:e7:e4:26:98:00:d5:74:ad:49:74:5b:9e:
                    72:e0:33:bd:56:7a:2c:59:81:29:68:3a:47:23:82:
                    e0:d6:ed:8f:d4:b8:a6:37:1d:e2:1e:e4:ec:a7:bc:
                    5e:72:c7:cd:5f:05:3b:1b:f0:d4:ab:74:95:f1:e8:
                    80:c5:63:cb:8e:11:37:77:38:3d:e0:de:55:12:a0:
                    c6:d7:d9:ed:26:a2:9f:2b:ad:40:46:c8:92:d7:7c:
                    94:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C7:21:C8:69:A1:B8:12:75:E1:B0:42:BB:47:61:B0:23:B7:C1:9A
            X509v3 Authority Key Identifier:
                keyid:D0:9E:F2:09:3D:A1:5E:EC:90:EF:B8:37:B9:50:16:46:69:F6:19:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0J7yCT2hXuyQ77g3uVAWRmn2GYs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/b9ec2b-d26c-48a6-a588-6b2e68dde1e3/1/0J7yCT2hXuyQ77g3uVAWRmn2GYs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:64:12:e3:4d:68:99:8c:e4:5f:b9:da:29:0f:0f:91:04:63:
         76:cc:97:89:39:a9:18:16:b1:a8:19:be:66:b1:f1:d4:d2:70:
         94:f7:aa:15:c8:b4:1a:82:98:71:62:06:e3:86:a3:e6:77:16:
         01:13:23:7c:59:8f:f5:f2:a5:0e:e6:5d:68:6b:3a:e4:64:07:
         79:a0:df:53:ec:68:dc:58:25:53:bf:de:35:48:be:be:6c:81:
         e3:1a:c0:59:9c:47:a1:87:ac:08:3a:33:ab:b2:b0:31:71:eb:
         b2:c1:e9:13:ab:18:f5:67:f0:b8:66:17:c6:d8:8b:04:8b:cc:
         d5:03:30:86:1e:18:7c:5e:77:94:c8:bc:16:e2:31:57:40:36:
         c1:45:77:06:e7:83:d5:57:19:90:77:b7:e8:fc:ca:02:f3:12:
         68:72:a9:1d:be:38:57:c5:7b:3b:e8:3c:d9:bc:ba:e9:f5:52:
         95:26:c2:e9:9d:bf:21:65:7d:ef:b4:2c:9f:13:da:57:90:6f:
         7a:2f:c2:cf:1b:15:9d:ec:9b:a8:3a:b7:58:d0:2b:71:c7:2c:
         28:b9:4c:12:3a:4f:d0:b1:53:e1:dc:8b:2c:4a:aa:c1:6c:41:
         de:4f:29:0f:4d:cb:7d:29:3b:1a:f8:1f:24:b9:b1:e6:0d:a1:
         dc:6a:a5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:29:00 2026 by rpki-client