Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File:                     RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier:          g+Ncw2CKfVxZBVZDv8NGsTwkkkyTWSLWIsyHrcI+nuY=
Subject key identifier:   9D:B4:BC:0C:72:C7:E6:84:7E:B7:69:3A:42:CF:08:46:CF:58:CF:40
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer:       /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial:       01A08C0D745DD8BC2DD3737BE03A828E9182
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number:          1990
Signing time:             Thu 10 Sep 2026 16:01:26 +0000
Manifest this update:     Thu 10 Sep 2026 16:01:26 +0000
Manifest next update:     Fri 11 Sep 2026 16:01:26 +0000
Files and hashes:         1: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: w6RPH5iTVlymcMYHWvcAc9jD8w5Bc4T3Q/cvIPOl5+U=)
                          2: cyldzaN5uMb66fkP-hiffFjw-IE.roa (hash: Gj1kHwBLzSGp/dgWtzh7IJONH/VWApAr2xjaYZ7+1iY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0d:74:5d:d8:bc:2d:d3:73:7b:e0:3a:82:8e:91:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
        Validity
            Not Before: Sep 10 16:01:26 2026 GMT
            Not After : Sep 11 16:01:26 2026 GMT
        Subject: CN=9db4bc0c72c7e6847eb7693a42cf0846cf58cf40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0e:c0:09:b7:15:70:ba:b5:d3:b6:8c:48:d7:
                    70:6c:78:dd:88:47:bd:ca:b6:e3:b6:f4:03:c2:9c:
                    b1:b1:f8:4b:86:e1:46:2a:ea:39:70:b4:56:d7:dd:
                    5d:04:4e:bc:a7:24:6a:0e:5d:e2:46:06:99:5b:18:
                    e2:c5:46:50:4c:3a:99:1d:96:db:c8:b5:c1:af:01:
                    2d:0e:70:cc:8f:da:2e:ed:52:09:81:67:87:3b:9b:
                    1c:79:d1:62:e9:22:7d:e9:5d:a0:9b:c6:00:32:f4:
                    14:5c:ef:f4:d7:aa:18:07:27:53:1c:30:d8:af:d8:
                    38:56:bd:c1:52:b7:32:37:15:b9:74:55:64:8c:75:
                    f0:f7:4d:c0:0a:68:81:93:82:54:ac:1d:93:cb:1d:
                    a9:aa:49:5a:64:96:8a:53:e8:1c:ce:36:08:00:df:
                    2f:d8:c5:73:73:b4:ff:4b:5e:8a:f9:d1:cd:cb:05:
                    7b:7e:53:2e:de:0a:e5:b2:c4:a1:07:46:26:11:f1:
                    62:b9:17:ed:4a:f8:d2:08:ac:65:75:c0:1a:8b:eb:
                    dd:ea:5a:2a:21:6f:e2:66:a5:5d:13:1a:ab:05:81:
                    12:65:b5:36:5e:9d:3c:e7:83:6f:5d:ec:0e:7c:8e:
                    b3:00:76:0c:02:08:d6:dd:ec:f8:15:d3:a2:5e:c8:
                    bd:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:B4:BC:0C:72:C7:E6:84:7E:B7:69:3A:42:CF:08:46:CF:58:CF:40
            X509v3 Authority Key Identifier:
                keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:2c:81:1d:d7:25:1b:e2:59:ff:81:0e:2b:5b:a3:e3:8d:7a:
         22:8f:5f:36:45:57:d4:31:b9:52:da:f5:01:60:f3:d6:51:1d:
         e5:46:b5:98:55:c2:7b:55:7b:5c:77:4a:ec:71:54:71:c1:23:
         7f:e6:75:ba:ff:8f:5f:90:72:6f:46:b8:21:dd:16:d8:6f:2b:
         f5:eb:f2:41:2f:9f:3c:1b:63:55:d8:d5:d7:bc:d8:e1:48:30:
         ff:aa:60:28:f1:c8:1e:b5:d7:23:13:5d:6c:81:21:12:e8:5a:
         89:2d:8f:18:38:9b:ae:b7:8c:eb:52:f9:23:8f:4e:20:85:8c:
         d4:e4:fe:65:44:2d:d9:87:bf:b4:1a:9f:f4:aa:42:4c:81:bb:
         aa:8b:3d:90:10:da:dd:91:70:11:aa:8e:e8:c4:ce:2e:4e:f8:
         c4:4d:a9:f0:56:12:8d:85:3c:d1:25:81:0a:6b:ba:bd:2d:da:
         08:02:69:05:a4:d6:0f:33:d0:2a:72:be:76:e6:d7:04:8d:79:
         f2:95:5a:05:0a:2c:0a:65:d3:4a:b2:4b:82:23:5f:a7:2d:cd:
         44:5e:53:a9:7d:61:b5:0a:f3:54:f3:58:8e:cc:86:ba:3d:ad:
         f6:44:cf:ed:e3:31:b4:e5:b6:20:ac:fb:22:c8:c1:fc:97:22:
         61:9c:4b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:07:07 2026 by rpki-client