Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
File:                     H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft (raw, json)
Hash identifier:          CngqFyA4rYJ4QnDrmZeJDC9BG+8PP49qMaqBesMLVYY=
Subject key identifier:   40:FE:A7:CE:4C:94:01:F6:05:CB:65:D1:F3:F4:C5:6A:70:0F:B9:5A
Authority key identifier: 1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E
Certificate issuer:       /CN=1f4439c757b6b646df16844f5a529ee27520736e
Certificate serial:       01A0916A13E266E08160EC36F700DD04A67E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
Manifest number:          0912
Signing time:             Fri 11 Sep 2026 17:00:43 +0000
Manifest this update:     Fri 11 Sep 2026 17:00:43 +0000
Manifest next update:     Sat 12 Sep 2026 17:00:43 +0000
Files and hashes:         1: H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl (hash: WGs/POkNocFAn4mZgxzRuTLMIEcVRgnDdKUdVXbKptQ=)
                          2: k6iypoa6LHwlwb2qIMXLLBYL54M.roa (hash: mfnNfPCGzWqdDV2YD4QQcqHG+UEJW0CMtavWwVN5thM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 17:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:91:6a:13:e2:66:e0:81:60:ec:36:f7:00:dd:04:a6:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f4439c757b6b646df16844f5a529ee27520736e
        Validity
            Not Before: Sep 11 17:00:43 2026 GMT
            Not After : Sep 12 17:00:43 2026 GMT
        Subject: CN=40fea7ce4c9401f605cb65d1f3f4c56a700fb95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0b:11:66:2d:b6:b0:1b:89:9b:1b:cd:0f:92:
                    13:02:87:67:d3:73:a7:0a:37:f4:d4:c3:8d:3f:4c:
                    a0:04:b7:f9:24:26:b4:ae:85:ac:bd:cc:6c:8e:d9:
                    34:2c:b3:e5:47:3d:03:15:72:e0:a4:b4:20:39:08:
                    ef:9c:85:95:75:63:19:a4:77:be:a4:7b:67:a3:b5:
                    89:fb:45:ef:d8:dd:de:6b:34:2c:f6:ab:47:bf:b8:
                    53:52:cf:91:f6:5e:17:54:e4:1e:ee:0d:96:56:04:
                    a6:4f:7c:aa:67:f4:09:e6:ba:4a:7f:5d:3c:92:06:
                    e9:2f:6c:6e:66:65:dd:34:db:ee:84:ab:a7:4a:19:
                    d2:c8:1c:48:40:17:9d:00:dc:9e:42:60:b2:5c:47:
                    8c:e7:7e:c5:a4:1b:53:67:8a:6d:66:08:52:5b:6e:
                    39:16:7c:5c:4a:7d:db:8d:9f:21:64:77:4c:9f:05:
                    1a:2f:22:5a:53:b1:4f:e2:67:29:83:ff:a6:c2:e4:
                    af:c2:c2:47:72:c2:36:51:f9:dd:06:30:2a:a8:2e:
                    b7:1e:e1:8c:d5:af:45:24:74:8f:f0:bc:ac:5b:a7:
                    19:5f:a7:b2:82:ba:04:6c:de:d6:df:08:19:5c:d3:
                    04:d4:ba:2b:ce:1c:79:bc:4c:72:91:c8:9d:82:63:
                    4d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:FE:A7:CE:4C:94:01:F6:05:CB:65:D1:F3:F4:C5:6A:70:0F:B9:5A
            X509v3 Authority Key Identifier:
                keyid:1F:44:39:C7:57:B6:B6:46:DF:16:84:4F:5A:52:9E:E2:75:20:73:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0Q5x1e2tkbfFoRPWlKe4nUgc24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fe9eb3-3b1b-4ff4-a374-5a5d0bd8760e/1/H0Q5x1e2tkbfFoRPWlKe4nUgc24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:34:74:08:e9:f9:d0:83:c2:8f:ff:6a:6e:b2:cb:b3:82:20:
         53:bf:31:b3:df:fe:83:df:77:37:36:c8:4f:e1:75:58:d1:ed:
         fa:f2:3f:39:64:86:73:55:05:f4:74:b0:67:a6:2a:89:16:87:
         7b:a8:35:d7:e6:7b:d1:30:e7:05:6f:68:af:37:42:45:d1:80:
         00:48:21:d3:02:ab:42:c6:13:0e:88:6e:8e:cf:5a:31:94:c9:
         ff:7b:d4:da:14:62:1c:4e:26:70:ed:3f:f6:33:de:61:a8:33:
         04:2d:ee:a3:f2:77:19:19:10:3a:b5:77:ba:fb:75:6e:7b:17:
         43:4f:08:44:29:9e:0f:88:77:73:67:42:2b:b8:f5:9d:50:52:
         57:91:07:a5:eb:96:76:07:b1:31:92:fe:8d:ff:fc:3d:3c:a9:
         ef:7b:8f:b0:2b:e0:b1:8c:ed:1d:a2:fe:f6:29:c8:ad:7c:86:
         06:41:4e:8a:a9:a3:81:c9:82:f9:49:0a:6b:29:e0:e7:2f:55:
         21:1a:e0:86:3c:b1:54:42:51:5d:5c:dc:5c:c7:b3:21:78:42:
         41:cc:86:e3:53:e4:70:ec:1e:b9:d7:a8:85:c7:6f:45:fd:2a:
         62:45:d5:b8:ce:d9:7d:b8:8e:4f:7d:14:1a:b2:2e:aa:fd:9c:
         87:cb:b2:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCRahPiZuCBYOw29wDdBKZ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDQzOWM3NTdiNmI2NDZkZjE2ODQ0ZjVhNTI5ZWUyNzUy
MDczNmUwHhcNMjYwOTExMTcwMDQzWhcNMjYwOTEyMTcwMDQzWjAzMTEwLwYDVQQD
Eyg0MGZlYTdjZTRjOTQwMWY2MDVjYjY1ZDFmM2Y0YzU2YTcwMGZiOTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2gsRZi22sBuJmxvND5ITAodn03On
Cjf01MONP0ygBLf5JCa0roWsvcxsjtk0LLPlRz0DFXLgpLQgOQjvnIWVdWMZpHe+
pHtno7WJ+0Xv2N3eazQs9qtHv7hTUs+R9l4XVOQe7g2WVgSmT3yqZ/QJ5rpKf108
kgbpL2xuZmXdNNvuhKunShnSyBxIQBedANyeQmCyXEeM537FpBtTZ4ptZghSW245
FnxcSn3bjZ8hZHdMnwUaLyJaU7FP4mcpg/+mwuSvwsJHcsI2UfndBjAqqC63HuGM
1a9FJHSP8LysW6cZX6eygroEbN7W3wgZXNME1Lorzhx5vExykcidgmNNkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFED+p85MlAH2Bctl0fP0xWpwD7laMB8GA1UdIwQY
MBaAFB9EOcdXtrZG3xaET1pSnuJ1IHNuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBRNXgxZTJ0a2JmRm9SUFdsS2U0blVnYzI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mZTllYjMtM2IxYi00ZmY0LWEzNzQt
NWE1ZDBiZDg3NjBlLzEvSDBRNXgxZTJ0a2JmRm9SUFdsS2U0blVnYzI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9mZTllYjMtM2IxYi00ZmY0LWEzNzQtNWE1ZDBiZDg3NjBl
LzEvSDBRNXgxZTJ0a2JmRm9SUFdsS2U0blVnYzI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUjR0COn5
0IPCj/9qbrLLs4IgU78xs9/+g993NzbIT+F1WNHt+vI/OWSGc1UF9HSwZ6YqiRaH
e6g11+Z70TDnBW9orzdCRdGAAEgh0wKrQsYTDohujs9aMZTJ/3vU2hRiHE4mcO0/
9jPeYagzBC3uo/J3GRkQOrV3uvt1bnsXQ08IRCmeD4h3c2dCK7j1nVBSV5EHpeuW
dgexMZL+jf/8PTyp73uPsCvgsYztHaL+9inIrXyGBkFOiqmjgcmC+UkKayng5y9V
IRrghjyxVEJRXVzcXMezIXhCQcyG41PkcOweudeohcdvRf0qYkXVuM7ZfbiOT30U
GrIuqv2ch8uypQ==
-----END CERTIFICATE-----
Generated at Sat Sep 12 01:02:38 2026 by rpki-client