Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
File:                     sk_loZnHVDnFJkkEVLSr1UAhN6k.mft (raw, json)
Hash identifier:          liErGVpJFX5jWPhpZVWF6S9CUCnYJeCW6poTuc1bJx8=
Subject key identifier:   F7:94:BD:97:73:77:8A:D0:14:DA:05:BE:B9:F9:94:06:45:FF:5F:B9
Authority key identifier: B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9
Certificate issuer:       /CN=b24fe5a199c75439c526490454b4abd5402137a9
Certificate serial:       01A089B10158433FD7048349EA240C0D742A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
Manifest number:          0266
Signing time:             Thu 10 Sep 2026 05:01:13 +0000
Manifest this update:     Thu 10 Sep 2026 05:01:13 +0000
Manifest next update:     Fri 11 Sep 2026 05:01:13 +0000
Files and hashes:         1: 1X-M9-Ob8zn_AUbRkQ52E-fkDj8.asa (hash: A9QlGHiSL6cJZrCCASWffcD/70Opt2l0qntImDeMQKw=)
                          2: sk_loZnHVDnFJkkEVLSr1UAhN6k.crl (hash: vX7ki2lxFlQPP3L10We0sPZwomzETbLRitycZCqAeXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 05:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:b1:01:58:43:3f:d7:04:83:49:ea:24:0c:0d:74:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b24fe5a199c75439c526490454b4abd5402137a9
        Validity
            Not Before: Sep 10 05:01:13 2026 GMT
            Not After : Sep 11 05:01:13 2026 GMT
        Subject: CN=f794bd9773778ad014da05beb9f9940645ff5fb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:03:1f:eb:67:fc:d2:57:00:d2:71:23:40:
                    66:8e:e9:44:63:c8:17:0a:0d:d0:6a:8f:6b:ec:1f:
                    f9:c2:6b:26:da:01:0a:45:86:1c:3f:08:7a:6a:55:
                    e3:1f:d6:38:80:50:79:4a:02:b9:24:47:7f:20:bf:
                    78:46:1b:7a:e0:9d:d5:28:37:ad:23:ac:10:76:e2:
                    de:47:91:bd:1d:10:21:77:f6:0d:cc:45:c7:65:ba:
                    84:08:b8:9d:ed:84:70:75:5a:dc:e0:b0:79:35:5b:
                    2e:9e:c1:9e:eb:e2:77:15:ca:a4:6c:c7:1c:17:0b:
                    50:f0:cc:3a:d8:5f:6d:7d:01:09:5e:fe:e3:97:de:
                    e4:d6:33:87:4a:96:7b:50:2b:8a:05:b4:ed:7e:51:
                    5a:2f:0a:09:53:17:49:93:f2:fe:d9:e0:b5:ea:db:
                    27:24:3b:77:67:62:5a:d7:dc:66:31:3d:84:e2:d8:
                    4b:93:aa:82:5c:d7:e5:9c:9e:98:a0:69:b4:ac:d4:
                    b3:9a:dc:8b:0d:0a:95:f7:40:f7:de:fb:41:b1:d7:
                    c8:ba:66:bb:ab:3b:73:b1:90:3d:1e:e4:af:04:3a:
                    d3:0c:fa:ec:c7:70:a8:76:fe:d5:27:0b:5b:a4:3e:
                    d7:28:fd:b1:ae:7e:43:35:70:2d:ed:ff:4f:d1:4f:
                    5a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:94:BD:97:73:77:8A:D0:14:DA:05:BE:B9:F9:94:06:45:FF:5F:B9
            X509v3 Authority Key Identifier:
                keyid:B2:4F:E5:A1:99:C7:54:39:C5:26:49:04:54:B4:AB:D5:40:21:37:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sk_loZnHVDnFJkkEVLSr1UAhN6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6d4f2b-b7b1-4160-8db5-c199dcaf5a13/1/sk_loZnHVDnFJkkEVLSr1UAhN6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:6a:d0:a1:ba:e6:bb:8e:ef:ce:ee:b0:79:1b:b9:9e:82:a8:
         d8:b4:38:5b:bb:d9:a0:a1:a9:34:82:2f:4f:fd:45:75:88:ab:
         ab:8a:8b:11:96:0a:92:80:c7:ff:cf:1a:7f:7e:68:2a:cc:29:
         e5:70:85:cc:ac:21:d5:8d:27:c1:07:fa:aa:74:74:68:0b:a0:
         92:d5:5a:18:56:ca:be:df:30:98:fa:06:67:52:a0:25:44:d0:
         05:bb:7b:1d:0d:aa:43:88:4a:f9:26:57:3b:e2:b9:e3:4c:96:
         00:a7:6d:8c:6d:99:47:57:46:03:8f:25:e3:96:c6:3d:31:4f:
         e7:6b:61:22:d5:38:43:dc:19:8e:3a:0a:5c:19:e8:2e:96:65:
         fa:29:57:a5:db:6b:f6:cf:ad:e4:a7:16:99:c0:cf:51:95:6a:
         84:6c:05:cb:98:2b:08:f0:d1:02:63:30:d5:f6:74:f0:69:74:
         e0:96:74:1a:c3:14:a1:d1:f1:ac:3e:03:0b:07:1e:f9:b8:ff:
         4b:a2:e1:f4:9e:ab:7c:9f:6f:59:20:f4:14:66:09:4a:1d:e8:
         d2:28:ee:50:ca:35:8c:e0:65:69:db:3f:76:48:ad:ad:4f:c5:
         b8:da:f6:a3:c1:bc:13:5c:41:71:24:e0:60:da:bd:06:f8:54:
         ae:f1:ea:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:35:44 2026 by rpki-client