Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
File:                     0L-t8pI57Yzz9saT2L23n0IACrw.mft (raw, json)
Hash identifier:          NqAt1ytZTacuPDGYRKiAXDXf9dSXEDH9PzY4bRLNclo=
Subject key identifier:   0F:97:C5:D9:53:B9:F2:C7:70:BA:B0:CF:83:B4:27:CA:24:11:C5:43
Authority key identifier: D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC
Certificate issuer:       /CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
Certificate serial:       01A147603CB8B3AC41D5B0CCD91A4E8B5EBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
Manifest number:          125B
Signing time:             Sat 17 Oct 2026 01:00:51 +0000
Manifest this update:     Sat 17 Oct 2026 01:00:51 +0000
Manifest next update:     Sun 18 Oct 2026 01:00:51 +0000
Files and hashes:         1: 0L-t8pI57Yzz9saT2L23n0IACrw.crl (hash: HnQH0pVlG7CLZp7mXdlbRu2zJodtKsGUigc/e7MZsZA=)
                          2: 2JYWg4gqZMghUwSsH_cELClo_DE.roa (hash: XmfRPL/CjIz58Jli7M5Cw1QTYVH2xAtyBdeQbzz9+4Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:47:60:3c:b8:b3:ac:41:d5:b0:cc:d9:1a:4e:8b:5e:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bfadf29239ed8cf3f6c693d8bdb79f42000abc
        Validity
            Not Before: Oct 17 01:00:51 2026 GMT
            Not After : Oct 18 01:00:51 2026 GMT
        Subject: CN=0f97c5d953b9f2c770bab0cf83b427ca2411c543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:08:b9:5d:f4:5d:d5:a7:5d:58:d9:66:2e:b1:
                    9e:c5:8b:96:dc:62:33:cb:8d:db:53:8f:05:17:3f:
                    b3:06:de:bb:42:a7:d1:da:d4:e4:0f:fd:10:10:bf:
                    6c:77:0d:cd:e3:80:a9:da:7f:9e:81:bc:d1:08:c8:
                    2c:f8:61:ca:21:60:65:18:ca:ac:18:ea:22:11:22:
                    aa:28:d5:92:bf:e7:54:45:c7:fa:8a:08:6b:c3:4f:
                    13:99:92:5a:d4:52:62:26:19:4b:56:bf:7a:51:ef:
                    88:06:06:cd:90:b1:e0:03:5d:bb:b3:65:74:f9:9f:
                    0c:b7:7c:fc:de:10:59:8f:da:45:0c:41:b4:07:c8:
                    34:c0:69:c1:66:8c:75:5f:fe:bc:a8:39:97:c2:14:
                    89:1d:9e:4b:ad:57:88:09:25:4d:25:68:74:87:47:
                    f2:9e:53:4d:c7:05:16:e6:58:d1:ef:a0:df:0e:fb:
                    23:2b:b9:9a:39:25:e8:da:f9:bf:2e:11:a9:71:43:
                    28:fa:96:94:30:55:47:1f:22:17:83:3f:42:88:01:
                    33:be:56:26:89:b8:ca:06:44:22:18:14:1f:2e:4b:
                    81:6e:97:51:96:2f:75:bc:71:90:ed:c0:c3:2f:ca:
                    f6:33:98:e4:88:9c:e1:61:6f:43:7f:b0:79:6e:22:
                    97:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:97:C5:D9:53:B9:F2:C7:70:BA:B0:CF:83:B4:27:CA:24:11:C5:43
            X509v3 Authority Key Identifier:
                keyid:D0:BF:AD:F2:92:39:ED:8C:F3:F6:C6:93:D8:BD:B7:9F:42:00:0A:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L-t8pI57Yzz9saT2L23n0IACrw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/cfa9cd-8d7b-4a35-82d0-7bb365f34c6c/1/0L-t8pI57Yzz9saT2L23n0IACrw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b5:ad:c0:b8:d7:f4:87:46:9d:d1:12:b0:ec:b0:8f:40:b8:
         27:95:e6:2f:ac:bd:2b:3f:5d:75:5d:8e:40:49:41:cb:c1:30:
         20:57:9b:6e:6b:ec:2c:f3:79:ea:ec:4b:0c:52:2c:f9:da:82:
         40:6f:76:1d:7c:ab:09:b0:39:bb:08:58:96:53:a3:32:0f:7e:
         d3:0e:81:eb:32:88:cb:43:92:12:32:6d:c5:53:45:d0:86:62:
         a3:e5:49:3c:3c:b1:2f:6f:57:ff:f4:c0:d0:53:84:bd:cc:50:
         77:12:b8:25:2e:cb:28:33:d4:8c:6e:77:61:68:c6:cd:02:99:
         56:0e:a5:33:c4:48:f4:e9:ff:21:af:fc:b0:2d:aa:82:ba:70:
         be:36:f5:50:2a:98:b0:7c:1b:ef:bf:77:05:3c:bb:54:07:72:
         07:ab:af:45:f4:fe:e9:24:53:6c:a7:6d:89:a0:14:97:9d:2c:
         59:8f:71:42:7f:34:17:01:d6:bf:87:fa:2a:7d:cc:85:e1:1c:
         ae:6a:99:72:d7:02:c7:5b:85:b5:47:fb:f4:9e:15:12:d6:dd:
         1a:ba:d8:1d:ef:13:1a:89:8a:10:ba:b6:fd:86:c6:ea:b1:cc:
         30:7a:7d:25:bd:36:e9:5f:56:9a:97:27:b2:0b:53:64:e6:fd:
         92:ee:8a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:58:45 2026 by rpki-client