Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File:                     M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier:          ABET8PEyBNyTuLgxtS9LQDCOmxWHKoEly4N90mtc9r4=
Subject key identifier:   E3:B0:31:12:95:AD:CB:50:17:FA:1F:25:F3:5F:A5:DE:89:F1:F8:F9
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer:       /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial:       01A0A828B02BF430F4D2E389DC4A4F3CBD17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number:          0A31
Signing time:             Wed 16 Sep 2026 03:00:33 +0000
Manifest this update:     Wed 16 Sep 2026 03:00:33 +0000
Manifest next update:     Thu 17 Sep 2026 03:00:33 +0000
Files and hashes:         1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: 0JdE5x6ybAg6iGiL82DMtvtDBPo8G9wbbdu3yGfb5Fg=)
                          2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
                          3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 16 Sep 2026 22:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:a8:28:b0:2b:f4:30:f4:d2:e3:89:dc:4a:4f:3c:bd:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
        Validity
            Not Before: Sep 16 03:00:33 2026 GMT
            Not After : Sep 17 03:00:33 2026 GMT
        Subject: CN=e3b0311295adcb5017fa1f25f35fa5de89f1f8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:c1:59:aa:71:3d:4c:b9:0f:ba:d1:8b:e2:
                    e5:bc:49:4f:60:87:2c:a3:aa:48:75:28:42:69:48:
                    cb:69:8b:8e:3d:5b:2b:30:ac:21:86:55:9a:e3:07:
                    38:1d:05:c5:50:9b:77:42:4c:fc:75:2a:98:d2:5f:
                    35:11:85:be:91:db:0a:c1:80:25:d9:54:b9:6f:52:
                    d1:08:87:ed:c4:88:79:45:b2:e6:2a:69:c7:8e:e9:
                    3b:2a:72:21:13:73:a4:78:34:ff:9f:b1:9f:9f:97:
                    b0:39:ac:bb:e9:c5:4b:92:36:66:da:f0:12:a9:92:
                    61:37:2e:5b:55:2a:d0:96:e0:73:64:22:b4:00:90:
                    e7:23:d0:d7:45:5b:8a:d5:93:6a:67:c9:d5:53:09:
                    de:5f:47:c5:3d:e8:57:0e:82:08:e0:46:93:65:54:
                    09:eb:41:fa:cf:ca:1b:cb:22:d7:81:94:cc:ba:20:
                    c4:c2:eb:22:de:4b:b4:f4:d6:b2:a8:42:60:6d:57:
                    f8:00:8b:31:9c:7b:2c:11:70:09:01:ea:c4:6f:13:
                    d8:e2:c5:2a:e8:50:1c:38:2c:d5:b7:55:1e:e0:e3:
                    66:5b:c4:8c:78:8d:f8:de:82:df:15:46:7f:54:37:
                    a8:28:bc:b1:aa:f0:fd:e0:3b:d8:72:9b:07:bb:fc:
                    6a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:B0:31:12:95:AD:CB:50:17:FA:1F:25:F3:5F:A5:DE:89:F1:F8:F9
            X509v3 Authority Key Identifier:
                keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:15:0e:ae:0c:7a:c8:bd:29:1b:e2:89:06:24:77:9c:41:d3:
         e7:9f:c5:ba:e7:d8:41:6d:30:62:71:90:ae:78:53:9a:4f:72:
         d5:d2:1b:50:71:05:37:e8:12:86:c2:ca:7a:ef:fd:61:c1:79:
         a0:38:32:01:53:cd:68:1e:af:03:1c:a7:aa:ae:87:77:3c:c5:
         5d:05:7c:be:df:c5:66:9c:93:01:42:89:82:46:16:24:5f:a8:
         27:28:c4:4d:82:a1:4b:71:4e:a9:fb:a3:c1:f8:f1:47:3e:bd:
         ea:d6:5f:d2:c9:34:f4:dc:b9:6c:b9:7c:eb:60:f2:4b:00:9c:
         89:0a:a6:ca:9a:f3:2b:41:bb:e9:f2:b7:28:61:ed:42:ce:9f:
         6e:96:90:06:1e:65:1e:0c:a3:87:5f:f9:b8:6f:92:0c:c1:19:
         42:50:f9:04:bf:1a:73:b8:cd:8a:96:2b:74:34:e4:06:db:5e:
         fe:c6:17:a2:be:a7:80:e4:1b:e5:1b:2d:19:11:ec:6b:4b:b7:
         02:55:49:77:a6:a1:8b:02:b7:ab:3b:af:73:27:92:48:4c:de:
         97:3e:60:09:01:ac:92:52:40:21:fb:50:f0:5d:06:8a:47:3e:
         d6:ed:04:64:17:21:b6:d2:a3:a8:28:0e:bd:ad:1a:1e:c9:f2:
         93:dc:4d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 06:04:54 2026 by rpki-client