Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
File:                     0F9s96mFiwKHHBx_E9GzOIDpii0.mft (raw, json)
Hash identifier:          V+Cbxbk0MNJJ1fDPb+n4C+ZjNhYGwAkylAsNqdzfTMM=
Subject key identifier:   0B:88:D1:55:B5:B3:57:E6:33:F3:0C:C2:BD:EB:F7:57:E4:CC:D3:B8
Authority key identifier: D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D
Certificate issuer:       /CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d
Certificate serial:       01A03FE0577CCA9AFD6B3CD3A9D890A9D373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
Manifest number:          02A5
Signing time:             Wed 26 Aug 2026 21:01:02 +0000
Manifest this update:     Wed 26 Aug 2026 21:01:02 +0000
Manifest next update:     Thu 27 Aug 2026 21:01:02 +0000
Files and hashes:         1: 0F9s96mFiwKHHBx_E9GzOIDpii0.crl (hash: pBmkfO++/OU/94eUTAaRak5OGN0bmFS6ZL3DDLDOewk=)
                          2: dIxRZVoK391SO4N57N0kDl39xT8.roa (hash: svamFcAbrklGijDHK+E9cDfDGI1J3qNLX+B2lQjxTj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 20:12:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:e0:57:7c:ca:9a:fd:6b:3c:d3:a9:d8:90:a9:d3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d05f6cf7a9858b02871c1c7f13d1b33880e98a2d
        Validity
            Not Before: Aug 26 21:01:02 2026 GMT
            Not After : Aug 27 21:01:02 2026 GMT
        Subject: CN=0b88d155b5b357e633f30cc2bdebf757e4ccd3b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:b1:b5:1b:38:9a:35:f4:5e:33:bf:d2:d6:
                    c2:60:27:13:ec:e8:08:47:4a:52:94:e2:08:ab:94:
                    3a:d2:e9:09:9c:ab:d5:5f:26:db:09:8a:50:cc:80:
                    8a:40:5e:4c:0b:0e:25:1e:f8:00:f0:f1:95:5f:8a:
                    d1:ae:21:af:20:ad:ac:e9:c4:c0:65:4f:75:72:eb:
                    5d:cb:6e:58:66:51:9c:83:57:9a:d8:70:85:6f:e7:
                    fc:1a:de:eb:c9:8e:2a:ba:f3:0c:d2:a8:db:9d:4a:
                    d4:a7:8c:44:db:eb:c3:24:67:ed:2a:58:0b:48:37:
                    12:53:67:77:df:bf:24:a6:f5:9d:69:4b:d1:7c:d1:
                    92:f0:12:5b:d4:99:b6:4d:38:99:01:4d:ae:0a:6c:
                    8e:09:f1:cd:17:5b:1f:3e:48:45:fe:a7:fc:ad:0a:
                    c9:10:77:60:b3:93:9b:a6:10:97:61:7a:dd:9d:7d:
                    ef:94:a2:34:32:ce:b5:27:ff:bf:00:21:74:4b:1a:
                    9b:41:a8:08:8c:f8:71:3b:14:a8:ef:8e:41:17:b7:
                    28:9f:02:86:ae:fa:a4:55:78:33:b2:2f:c6:64:a8:
                    14:01:03:00:76:82:52:cf:ed:91:31:e7:82:4a:b2:
                    bd:92:9a:0e:ea:d0:6f:d4:4e:0f:c9:db:0c:c6:73:
                    f0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:88:D1:55:B5:B3:57:E6:33:F3:0C:C2:BD:EB:F7:57:E4:CC:D3:B8
            X509v3 Authority Key Identifier:
                keyid:D0:5F:6C:F7:A9:85:8B:02:87:1C:1C:7F:13:D1:B3:38:80:E9:8A:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0F9s96mFiwKHHBx_E9GzOIDpii0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/364c78-a9f5-4e85-bdcf-1ca4ce024ce0/1/0F9s96mFiwKHHBx_E9GzOIDpii0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:f0:38:a8:d5:15:f1:ef:a1:b4:a3:c3:68:f7:af:8c:cd:8a:
         28:7b:f4:47:64:f8:fd:f3:73:8e:c2:f5:02:4b:90:a7:cb:95:
         d6:e8:c5:a2:0f:c9:90:d3:3a:2e:14:2c:a8:67:62:31:3d:18:
         42:4c:af:cc:bf:c0:36:8b:5e:51:a7:9e:ed:98:61:00:8b:e8:
         44:b3:dd:f3:1f:26:a6:06:c8:51:f8:b7:6b:d3:eb:ba:fe:a7:
         2a:32:e2:77:4d:71:d7:fa:1f:82:b7:2f:bc:d3:84:09:92:39:
         18:24:5a:41:cb:d0:67:30:1e:7f:0c:d7:c9:2f:ae:4c:a5:ab:
         30:37:55:b2:64:90:70:67:18:30:d8:50:bf:27:43:e3:6a:f2:
         25:12:31:e5:49:49:f4:3e:0d:17:ee:f7:fe:90:52:50:54:a6:
         53:b1:fa:36:9a:77:3e:a6:ee:bf:6f:69:0f:37:3a:f4:2d:93:
         43:93:c7:c9:29:83:6e:91:6d:b3:f9:26:a4:9a:dc:b3:5a:0c:
         40:ab:76:3b:3a:1b:f6:58:d8:c6:73:f4:6f:f7:e3:98:25:68:
         78:f9:fb:dc:b1:ba:7a:91:dd:2d:ba:71:47:4b:65:f3:e6:6e:
         33:21:e5:fe:77:9b:cf:4f:c3:a7:5d:48:61:71:fb:75:1d:c3:
         3c:fd:a9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:33 2026 by rpki-client