Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
File:                     RETHw600tpd_oYoiN8owa5vuCOA.mft (raw, json)
Hash identifier:          Wr/qdwziJTjO6J6ro7+h/iGlrnaUxvYME0PeVAJd9SE=
Subject key identifier:   37:4C:ED:3A:15:E3:E9:3D:9F:5D:BC:37:FD:FF:B0:16:B3:EE:DC:AC
Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0
Certificate issuer:       /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
Certificate serial:       01A089E7643960DC66920234A89707266B36
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
Manifest number:          154A
Signing time:             Thu 10 Sep 2026 06:00:38 +0000
Manifest this update:     Thu 10 Sep 2026 06:00:38 +0000
Manifest next update:     Fri 11 Sep 2026 06:00:38 +0000
Files and hashes:         1: 2SIXUZTGLSsuNmHnmH_XZgRCYVY.roa (hash: kuoWaUJI+dAA7ih84KRN5TqDkuF9bUAxQjQzkKOCjIc=)
                          2: 3xhOROtsWU6kcbRg-0eVsWv_Cf4.roa (hash: 5LTgCgWwER8eaf33nSzOpEaP32v0UF0hdAvBDa8TC70=)
                          3: KRctRzsS6WkYFQeNR_1yTG9YjP0.roa (hash: oB1FvlbACGWEHyhDswCez14XuSiwC0mCrxW2Q45DLmU=)
                          4: RETHw600tpd_oYoiN8owa5vuCOA.crl (hash: ZNjMFnKk/KXQODO2VOcGQUsrmwKXbcNVT6ZC7FZ2d6s=)
                          5: nayB3_rE3RntOJEk4e7i16Y7R3M.roa (hash: YijDZOJxEI25MjJmJqVvk74PVNuOr37g49vUulKscOg=)
                          6: oI0gNsAnUZaiiR1_JxvhZXrdyvc.roa (hash: PZhUlF96CrIiZt17nWZPHRO35kGXkmt9vTJKXgGorHc=)
                          7: qT0dlLpzpHG-UMlryrlwiaMMxcY.roa (hash: 9waKgS4/9SGo8HvqSDRZz0wIFy4U+cc/1Ys4XOOzmjw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:e7:64:39:60:dc:66:92:02:34:a8:97:07:26:6b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0
        Validity
            Not Before: Sep 10 06:00:38 2026 GMT
            Not After : Sep 11 06:00:38 2026 GMT
        Subject: CN=374ced3a15e3e93d9f5dbc37fdffb016b3eedcac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:1e:85:37:88:d3:39:47:01:42:e1:c4:71:
                    19:a8:e4:6b:22:35:f5:53:f7:c8:27:0d:b4:80:93:
                    16:67:55:62:29:f2:db:44:d1:05:e6:6b:1b:34:b2:
                    ad:6d:78:8f:90:fa:4a:c0:82:45:a9:92:7f:81:28:
                    d5:27:69:66:eb:50:4a:a0:cd:47:a0:3d:eb:c1:73:
                    af:52:47:20:4a:1f:b4:05:4a:c5:cb:2d:56:ca:95:
                    33:b8:08:a9:c9:7b:5e:22:68:74:2d:6d:29:c9:0c:
                    27:8d:f3:3a:60:49:af:6b:66:87:7b:d9:e8:7c:24:
                    6c:f0:09:9b:2c:36:50:21:25:44:f7:82:8a:c2:47:
                    ca:97:a1:a6:7b:e0:fd:3a:42:d8:3c:88:58:2e:db:
                    ff:37:91:6f:c4:1d:78:43:88:2c:f2:3d:49:0c:aa:
                    c0:dc:39:8d:94:e4:dc:42:fe:ad:bc:50:43:c4:9b:
                    27:1d:2d:3f:c4:0b:6e:05:4f:0b:eb:9d:fb:f8:19:
                    5f:7f:97:7e:db:b2:78:47:6c:fc:70:ea:d8:b1:fe:
                    7a:68:15:e7:49:68:c0:2b:31:9f:bc:14:21:d2:92:
                    2e:db:a0:9c:38:5e:41:55:b7:14:da:b0:70:21:c8:
                    61:f7:9f:94:82:72:49:46:e5:26:17:4d:14:84:98:
                    43:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4C:ED:3A:15:E3:E9:3D:9F:5D:BC:37:FD:FF:B0:16:B3:EE:DC:AC
            X509v3 Authority Key Identifier:
                keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:14:ab:86:43:db:48:78:27:4b:3d:39:2b:4c:b1:28:b6:2d:
         7b:39:d6:da:c8:60:4a:e0:44:41:18:76:cb:f2:70:ea:d2:b4:
         7c:57:bf:91:40:fc:ec:df:d4:b5:0e:80:70:18:74:56:5d:01:
         89:01:af:7a:aa:92:3e:85:19:72:0d:0e:42:c5:1d:31:88:ce:
         64:d6:37:f7:d8:bd:6c:e8:bc:76:e4:b8:6f:10:df:0a:f2:46:
         25:96:15:09:4e:08:48:af:93:de:c6:94:a5:87:e0:c8:c1:c0:
         04:a7:24:2f:a5:09:3b:91:4e:06:21:f8:40:11:80:7d:ae:30:
         e4:73:85:a3:c8:ec:6a:fa:e3:c0:96:cf:6c:78:7d:58:5b:35:
         5d:57:09:2a:4d:84:2a:cd:c4:c6:ea:a7:7b:2d:e9:bd:06:bf:
         8f:c3:85:bb:38:5b:4d:d2:c7:ef:a3:9d:17:91:31:2a:43:44:
         ca:03:e8:de:95:7d:65:2d:1a:5e:73:78:52:5b:ae:10:3d:d7:
         90:50:27:c3:eb:95:0e:98:be:f7:8c:1d:a1:6a:81:37:62:24:
         ff:a3:16:a5:df:8d:16:c3:84:d6:94:61:d4:04:79:ff:f3:b9:
         61:9d:b8:13:08:7c:45:b4:2d:11:2a:ac:3b:5f:21:bd:bd:d8:
         0e:e0:9d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:54:59 2026 by rpki-client