Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
File:                     0mpECeqR9QbWM4ccbDVUDUYDN9E.mft (raw, json)
Hash identifier:          sjY6hHZECqHWsP9l19eSRPluFmAXLkLQqF7ecZga+6w=
Subject key identifier:   4D:F4:32:23:5C:7E:88:AE:33:A1:57:AB:1E:C1:E2:F1:38:AA:0B:28
Authority key identifier: D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1
Certificate issuer:       /CN=d26a4409ea91f506d633871c6c35540d460337d1
Certificate serial:       01A08B31B60FCCA1641C4853313E490A11E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
Manifest number:          122A
Signing time:             Thu 10 Sep 2026 12:01:25 +0000
Manifest this update:     Thu 10 Sep 2026 12:01:25 +0000
Manifest next update:     Fri 11 Sep 2026 12:01:25 +0000
Files and hashes:         1: 0mpECeqR9QbWM4ccbDVUDUYDN9E.crl (hash: kItb1N8ltG9tfhZM+bxH0zjmvcervE72BmGVw1YuZHU=)
                          2: wm1lXzHcJX95NHj9ois5gkctOoQ.roa (hash: fWjCquBSQ6//3hLKFz3ks7PPTJDwsXZsgsh+NNqW3Mc=)
                          3: wzoQWaU78B1JYcVEw1aU_m666Qg.roa (hash: YXxlzjY6ITzVnS2guD8G2HgvMXrNu1UDUO++sIfSdhw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 12:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:31:b6:0f:cc:a1:64:1c:48:53:31:3e:49:0a:11:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26a4409ea91f506d633871c6c35540d460337d1
        Validity
            Not Before: Sep 10 12:01:25 2026 GMT
            Not After : Sep 11 12:01:25 2026 GMT
        Subject: CN=4df432235c7e88ae33a157ab1ec1e2f138aa0b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:22:6b:78:15:91:c6:89:56:5f:66:87:a7:cc:
                    8f:b8:94:90:0b:b9:c1:61:48:d3:1d:42:17:f1:bd:
                    a5:4d:45:e7:9b:b4:b7:3b:bd:ef:ac:e7:fb:5d:f6:
                    30:c3:07:9e:6c:91:7c:62:df:5a:04:77:74:72:3e:
                    31:b8:88:af:18:00:85:15:f9:ad:3f:37:34:1d:3c:
                    d3:65:8b:b8:ae:64:c0:c2:93:42:a4:d7:05:18:70:
                    84:4b:59:c3:d4:eb:85:6e:21:83:0c:8b:79:8c:80:
                    8c:f7:6b:87:5b:fc:94:e2:b0:3b:29:3d:82:a4:cc:
                    92:55:d5:f8:04:2c:7d:51:b5:a0:3e:97:12:e8:1f:
                    18:45:14:c4:10:7f:00:c9:e7:be:80:77:e4:bc:dd:
                    0a:39:f5:29:37:b5:6b:e3:37:9f:71:a8:6d:97:b1:
                    61:46:87:c4:e8:62:22:00:c0:f4:e2:03:16:da:63:
                    68:3c:41:eb:73:17:29:5c:1d:7a:17:a0:b1:79:d8:
                    d7:39:06:be:c8:57:46:d8:c6:e3:02:ba:6b:a5:b2:
                    85:59:ec:f7:a8:a9:7d:de:77:b4:df:7b:98:ec:3b:
                    15:f7:f3:b4:51:72:19:2b:30:30:79:e2:10:af:56:
                    d0:27:c0:bb:eb:04:5a:75:0a:f2:50:bf:9b:8e:a3:
                    7f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F4:32:23:5C:7E:88:AE:33:A1:57:AB:1E:C1:E2:F1:38:AA:0B:28
            X509v3 Authority Key Identifier:
                keyid:D2:6A:44:09:EA:91:F5:06:D6:33:87:1C:6C:35:54:0D:46:03:37:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mpECeqR9QbWM4ccbDVUDUYDN9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f41051-0810-43ff-b196-cfefdfdfbe6b/1/0mpECeqR9QbWM4ccbDVUDUYDN9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:07:ef:95:26:15:80:55:fb:b6:18:24:8c:7d:5b:d8:85:72:
         cd:ec:a6:0c:46:29:ee:de:1f:10:fb:5a:46:f2:a0:8c:f5:87:
         9a:f3:e3:a1:a7:57:0c:c1:2d:ac:d4:25:76:c1:db:71:3a:63:
         f0:5c:73:12:fe:30:25:31:1d:a4:1f:16:9e:91:50:c0:4a:87:
         9f:ef:ac:2b:01:15:40:67:74:10:57:4f:9e:77:ee:d4:e0:2b:
         33:fa:70:a2:e1:42:04:86:6a:75:6f:ca:c3:a4:f0:6a:6a:f5:
         f2:26:22:81:ba:4d:aa:7a:c4:3f:18:5d:e0:95:a3:8b:78:c2:
         c4:d2:20:a3:2b:22:e1:d6:cc:10:20:08:4e:57:7e:0e:29:54:
         48:9b:ce:5d:4d:73:4d:42:98:21:5c:38:2e:5a:79:f0:cd:30:
         37:8a:31:8e:30:c6:4b:cb:eb:b2:21:11:33:c0:0c:1e:11:41:
         03:00:45:c6:bc:ea:58:de:ce:e3:bb:48:1a:78:4f:0b:f0:2d:
         5d:ee:fb:41:5a:f4:a4:e4:45:a9:98:08:69:6f:75:06:54:bb:
         c5:e0:f2:54:24:92:39:51:6d:7f:c8:5c:ed:36:35:0b:be:12:
         bf:d9:0c:1a:f1:b4:51:61:84:23:57:fa:53:5a:c3:b5:1b:de:
         bc:da:11:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:04:32 2026 by rpki-client