Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
File:                     9lHcmHXjXsWAxXH9BBb01fXUFYo.mft (raw, json)
Hash identifier:          Ns0Gxtfe4rjHrenHwzN3AvDOYO0AUlqTBOvsONwrOmo=
Subject key identifier:   BF:07:48:96:17:B4:F3:3F:D0:69:64:71:1B:1D:F2:D7:5D:42:11:0B
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Certificate issuer:       /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial:       01A1238A79229D766761C41CB38E1BDD1D20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
Manifest number:          188B
Signing time:             Sat 10 Oct 2026 02:00:39 +0000
Manifest this update:     Sat 10 Oct 2026 02:00:39 +0000
Manifest next update:     Sun 11 Oct 2026 02:00:39 +0000
Files and hashes:         1: 9lHcmHXjXsWAxXH9BBb01fXUFYo.crl (hash: WaI9QIa7asHyhCg3puLXnijJQy4VOdqZpfxD8JPMmQo=)
                          2: YM3wQTi2x2EudGBPrzItpE43E2c.roa (hash: Sd7kskZmFtQJRKtp/YHI0+nJKqtHTzL5Y9EeusM164Y=)
                          3: Yg7E55a2UJqTQFaCnTzTTOSXYrw.roa (hash: x5OI9MFzvqEd1w1iJv4pgEoP0EdTtO/USBwwhTo0Jpg=)
                          4: r036AdIz75Z053MFaHs3tcuY-Nw.roa (hash: 8Je3ULYLFevUXyJGFb/41M+gwSpMqvfl1xU3DGaabAI=)
                          5: yS8cmTmj8meagVhPwVIDXg74ndI.roa (hash: u8fsfb+ZmTtjberBYDLdik/L4xd6b2U9btatPVwrbkY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:8a:79:22:9d:76:67:61:c4:1c:b3:8e:1b:dd:1d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
        Validity
            Not Before: Oct 10 02:00:39 2026 GMT
            Not After : Oct 11 02:00:39 2026 GMT
        Subject: CN=bf07489617b4f33fd06964711b1df2d75d42110b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:67:32:42:85:67:dc:98:17:db:2f:33:87:d5:
                    3e:d1:30:65:ed:be:02:6c:4d:84:44:03:13:ea:c1:
                    f7:24:15:2e:39:cf:85:33:8d:e7:50:1b:f6:65:93:
                    cc:80:43:89:cf:71:ac:51:28:01:2d:76:70:8a:3e:
                    f3:3a:52:f0:eb:92:07:8b:5f:07:0c:f1:53:eb:c2:
                    9d:0e:dd:b8:75:af:10:e5:ae:a0:a0:cc:b0:ac:64:
                    6e:f9:d3:34:64:3a:64:9a:4d:1f:3f:a7:bd:17:fc:
                    b7:05:04:4c:10:44:f9:f9:5d:d9:4a:cc:82:9e:cd:
                    30:e4:14:57:e6:e7:9a:9f:3e:d3:d8:2b:a3:07:ad:
                    f3:c5:c5:c7:74:bb:7f:84:ce:d4:9b:11:80:d4:a3:
                    da:8e:1c:35:c7:6d:38:67:79:41:b9:c8:92:d9:e9:
                    c5:b4:3a:2c:ba:11:f5:98:c1:62:b6:c2:f4:47:b7:
                    91:51:fc:ba:71:5b:76:76:e2:b9:68:24:30:90:3b:
                    3f:03:c3:fb:66:58:63:b1:de:f0:7a:7d:10:08:07:
                    d1:d4:3d:c7:2f:91:73:57:25:18:10:a8:27:33:c5:
                    ce:31:97:2a:0f:b4:00:b3:db:af:0f:ce:97:e9:a6:
                    8b:bb:d9:b2:01:14:76:c3:48:7d:3a:5c:24:7f:35:
                    56:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:07:48:96:17:B4:F3:3F:D0:69:64:71:1B:1D:F2:D7:5D:42:11:0B
            X509v3 Authority Key Identifier:
                keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ad:e8:81:21:41:f9:7e:e0:8a:7d:2b:72:e8:04:6f:b5:7d:
         fb:f5:a2:b1:8f:89:85:b3:1d:1b:e7:bd:78:18:4a:3e:a5:99:
         a5:58:07:9b:a3:9b:2e:9f:c4:84:3e:ca:f9:c6:12:4b:03:3b:
         38:6d:00:69:b1:30:55:59:77:ee:d7:ce:36:4f:f3:ca:4a:1e:
         c7:62:01:4a:66:b5:82:6c:5c:b5:e9:f7:d0:b8:90:1c:7e:ae:
         28:34:9a:33:57:c0:b8:80:d8:f9:4d:4c:d2:b7:09:88:ac:68:
         5c:15:80:b8:32:0a:d7:71:b8:99:ce:83:8a:4d:6a:0f:09:75:
         20:d7:5f:33:c1:85:0b:3d:bb:8c:e5:0a:1b:4b:1f:f5:49:54:
         12:e9:dc:07:8e:c8:e1:7e:57:22:47:94:97:c6:5b:d9:00:bf:
         5b:36:dd:a8:03:6d:5a:83:4c:3a:e8:77:0d:94:9d:66:8e:16:
         63:a0:0e:92:87:f4:f5:08:7e:e6:fc:fd:9e:19:d8:a9:35:e8:
         97:95:35:0f:78:41:40:26:52:bc:b6:8b:ab:17:1e:df:44:9e:
         a9:eb:09:a1:c7:42:2b:dd:14:c7:58:9d:49:e4:33:2b:3f:ff:
         5c:ec:93:3e:cb:42:25:a8:be:e4:20:b0:d5:2a:b0:00:ea:d3:
         18:c3:d2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:21:29 2026 by rpki-client