Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
File:                     95_P0odavfYeGdMnDq_h7_rcZmI.mft (raw, json)
Hash identifier:          ko7+dCH5/Z5Qs5TIXtX1EElocPRPMdUchUT2GvSOxlw=
Subject key identifier:   05:99:ED:86:36:CB:CB:A5:FD:7A:13:E0:FF:CC:2D:5A:1E:A7:CC:EE
Authority key identifier: F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62
Certificate issuer:       /CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
Certificate serial:       01A1291EEEA38ABF4EE5F98905B9480407EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
Manifest number:          0692
Signing time:             Sun 11 Oct 2026 04:00:55 +0000
Manifest this update:     Sun 11 Oct 2026 04:00:55 +0000
Manifest next update:     Mon 12 Oct 2026 04:00:55 +0000
Files and hashes:         1: 12ZQ62nPJwBHdDipttw3dUMZnqY.roa (hash: mj44+gLUBC8dy/BsSB97lGlEqLGL0epooCBx2VlfKb0=)
                          2: 95_P0odavfYeGdMnDq_h7_rcZmI.crl (hash: pfoYwGbOg+OJK/g9vKM5U85vbSJqx0Ss1ixykng85o0=)
                          3: Jv0u9cMD564Ime5yTEWdumsR3O0.roa (hash: y04ea8/vqCOfvH/IiN/FLgzOzYxMmv/5aeY5o3QGFD0=)
                          4: MGt5BnBc1caHCVlOZifA8hYKUFM.asa (hash: Z3wsIN7VXFqQgyEQhPtCMDIavrFmtm5IXKY4ICw229o=)
                          5: gxePdXWHsul0oNwQhQ3aS2MQ6ME.roa (hash: iRowxiL68qvO5oDgW7hTqSRfTbL0D0sk6Kkkv12eMRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:1e:ee:a3:8a:bf:4e:e5:f9:89:05:b9:48:04:07:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79fcfd2875abdf61e19d3270eafe1effadc6662
        Validity
            Not Before: Oct 11 04:00:55 2026 GMT
            Not After : Oct 12 04:00:55 2026 GMT
        Subject: CN=0599ed8636cbcba5fd7a13e0ffcc2d5a1ea7ccee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f0:68:e5:51:6b:4a:e1:4a:31:28:2e:10:a4:
                    10:95:1b:f3:4b:3a:c6:b1:72:d5:7a:0a:ce:55:7f:
                    b1:e9:23:3f:6b:86:e3:6b:af:53:7f:f9:7a:f7:8b:
                    a3:23:a8:c3:80:2e:d8:33:3b:96:7c:3c:8f:74:8f:
                    5f:12:c0:f4:ea:51:93:f0:d7:a2:3f:4f:19:98:79:
                    ce:ed:9d:c3:05:6b:fc:62:cf:10:07:79:9a:7f:af:
                    a4:70:17:57:d3:a1:02:1f:db:69:b3:fc:16:72:c6:
                    68:97:aa:c4:39:30:29:1d:f5:2a:e2:60:59:b7:82:
                    01:36:3c:ca:7e:0b:e6:f2:80:97:fd:d5:35:30:8f:
                    7a:03:b0:7d:1f:93:c6:19:8c:0e:e6:4c:88:c2:ac:
                    a9:09:10:8f:52:21:72:5d:a6:93:50:59:8c:10:4b:
                    60:ff:a7:27:61:80:d4:37:51:83:c8:d7:2c:ba:e6:
                    cd:63:8a:e5:62:16:96:2d:1a:06:b0:cb:5f:40:2a:
                    f1:0f:7b:fc:6f:17:25:b3:90:57:03:11:05:af:69:
                    94:1f:bd:5f:db:a7:d9:1b:f5:12:c6:95:41:b0:3b:
                    f9:1e:9b:48:f0:2e:10:31:6d:4c:82:ce:24:bd:db:
                    fd:60:87:fe:4d:4b:e7:40:ec:df:a6:48:7f:a0:ec:
                    e5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:99:ED:86:36:CB:CB:A5:FD:7A:13:E0:FF:CC:2D:5A:1E:A7:CC:EE
            X509v3 Authority Key Identifier:
                keyid:F7:9F:CF:D2:87:5A:BD:F6:1E:19:D3:27:0E:AF:E1:EF:FA:DC:66:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95_P0odavfYeGdMnDq_h7_rcZmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b02cb6-86c7-4f6d-99d1-90776f84c9b7/1/95_P0odavfYeGdMnDq_h7_rcZmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b9:a5:b6:a8:a4:04:fa:67:83:af:1a:55:f7:03:f6:4b:3b:
         19:28:f1:be:f3:b2:36:0e:0e:40:7d:6f:34:cf:8a:cf:f2:5e:
         ed:ca:10:96:f8:88:8e:af:5c:0e:f0:a6:39:b8:cb:b6:b6:8d:
         0e:55:8b:49:07:97:f0:37:b0:13:b3:4d:e6:79:c7:6c:c2:ce:
         68:6b:4b:ec:b8:fd:a0:eb:20:95:1e:cf:7e:f8:94:63:4c:d6:
         5a:fe:cd:f3:72:ab:76:27:a0:b2:c1:9c:c3:be:15:dd:2b:31:
         2e:11:c1:e4:cf:f7:d5:7e:78:4f:b1:3d:bd:50:f8:3b:56:16:
         ad:f4:3c:4a:7d:79:8a:e1:49:00:51:96:65:5f:dc:45:74:cd:
         10:82:6b:e2:44:79:a1:ab:2b:3b:18:7a:2e:38:f6:87:cb:08:
         ec:d5:6c:8f:b8:b3:35:e2:19:8e:96:6b:e6:5c:e6:1b:9b:00:
         4c:13:d5:82:2e:85:18:61:0a:b1:45:1a:37:08:eb:ce:dc:42:
         12:2b:5b:c8:84:01:56:67:fb:5c:74:76:8d:fb:69:c0:af:03:
         78:50:8c:e6:0d:05:4e:e2:bf:d1:d6:86:a4:6b:e2:02:6c:8b:
         51:63:59:20:89:1f:a3:70:a8:60:af:b9:a9:81:42:f0:be:a5:
         a7:2b:37:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 14:32:50 2026 by rpki-client