Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
File:                     9H0DN3zBCPRAkSa5oMIBYyQhxko.mft (raw, json)
Hash identifier:          DVBgdb9UVWteTMwwikqQCcwZse3nQCQStlY5Cy2Dz6E=
Subject key identifier:   60:09:82:79:D6:57:9F:63:BB:F0:55:88:39:D1:3E:81:8E:EF:C9:41
Authority key identifier: F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A
Certificate issuer:       /CN=f47d03377cc108f4409126b9a0c201632421c64a
Certificate serial:       01A00137E5F93A682B820373574661A2730B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
Manifest number:          19FD
Signing time:             Fri 14 Aug 2026 17:00:35 +0000
Manifest this update:     Fri 14 Aug 2026 17:00:35 +0000
Manifest next update:     Sat 15 Aug 2026 17:00:35 +0000
Files and hashes:         1: 9H0DN3zBCPRAkSa5oMIBYyQhxko.crl (hash: stiFO3j9NwEb9xBhHCd5k8FhmvnOYn3kXoFDRmaqZj8=)
                          2: GNmi18wQl4vtlo-9lVpDdUD44U8.roa (hash: PX3LxFRdOujIRS22JaSLS22PgqGNSnD4VtofU70m2Ic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:37:e5:f9:3a:68:2b:82:03:73:57:46:61:a2:73:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f47d03377cc108f4409126b9a0c201632421c64a
        Validity
            Not Before: Aug 14 17:00:35 2026 GMT
            Not After : Aug 15 17:00:35 2026 GMT
        Subject: CN=60098279d6579f63bbf0558839d13e818eefc941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8a:44:43:1b:41:80:7c:5b:39:21:4f:20:95:
                    1c:9b:e0:83:d1:30:4c:40:d6:c9:42:c2:d2:ed:4a:
                    56:50:b8:9a:ac:67:0c:f1:69:a7:29:21:eb:a3:d1:
                    d8:55:a3:e1:10:04:a1:da:55:93:e6:87:8f:f7:2c:
                    ff:57:ed:a6:0c:03:f9:07:d1:40:8a:dd:6e:f5:c0:
                    2d:c3:ba:6c:3a:02:33:e0:da:8d:76:2f:70:e8:1a:
                    81:1e:d5:76:e4:0d:b3:2f:46:b8:86:61:41:72:02:
                    f6:2f:c5:f2:f1:24:eb:1c:e9:ad:25:5b:61:df:71:
                    ae:16:1f:fa:98:8d:21:1f:19:68:20:5d:21:77:65:
                    ff:ae:66:06:c7:ca:1f:7b:94:b8:91:da:18:ea:34:
                    fc:08:79:8b:15:b8:85:70:d3:4d:b5:10:c1:81:da:
                    c4:18:6b:95:37:07:ee:06:39:8e:8f:7f:2c:4b:d3:
                    a6:0c:1e:b4:74:35:3a:62:bd:6f:a9:cb:ad:40:e5:
                    d8:60:88:98:a5:cc:9d:9e:62:01:b6:59:05:94:a1:
                    0d:f1:9d:a8:89:58:06:1c:d2:95:32:45:66:e3:59:
                    ce:ae:7b:7a:4b:33:88:56:44:44:0d:3b:9a:22:7d:
                    32:89:0a:74:df:db:63:5a:5a:9d:d1:f3:7c:da:0f:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:09:82:79:D6:57:9F:63:BB:F0:55:88:39:D1:3E:81:8E:EF:C9:41
            X509v3 Authority Key Identifier:
                keyid:F4:7D:03:37:7C:C1:08:F4:40:91:26:B9:A0:C2:01:63:24:21:C6:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H0DN3zBCPRAkSa5oMIBYyQhxko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8bc469-f7e3-40c4-afc8-e1d0fdd5bff5/1/9H0DN3zBCPRAkSa5oMIBYyQhxko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:d0:a6:f4:fc:5c:80:2f:96:8f:e4:92:13:25:b8:60:cb:a7:
         c8:a6:91:8e:bd:56:05:76:52:4a:61:06:f7:84:fc:27:32:4f:
         41:e9:da:60:dc:3b:c4:ba:8f:d2:ee:f8:d3:36:58:72:2e:2a:
         6c:94:d7:d5:3b:d0:41:2c:37:8f:b2:95:fb:8f:07:6c:67:57:
         37:ed:a4:8e:51:7b:9f:64:db:7a:35:cd:25:f6:e9:a2:cf:26:
         31:f8:97:fa:10:f1:37:d2:71:15:4b:5a:34:5a:ac:ca:0d:35:
         0a:dc:7f:0a:b7:bd:82:71:b4:28:f7:54:d5:a1:57:1e:71:5a:
         f8:64:cc:0b:9f:a4:b5:92:55:3c:df:5e:5a:25:a7:9d:38:b5:
         5c:2b:3b:1a:89:81:87:9a:0a:bd:cc:a3:ae:bd:a8:6c:73:69:
         82:0d:7b:e9:4c:01:73:58:00:f3:c3:db:78:36:76:7f:19:2b:
         79:f5:74:ba:52:45:87:b7:4a:c6:73:56:17:80:73:e9:69:d5:
         ea:74:7f:eb:dd:10:2e:18:6c:ce:91:6e:30:07:95:79:8a:17:
         29:26:1d:21:3d:c3:a0:98:72:01:ba:76:f5:7a:9c:4f:39:09:
         ac:bb:83:c6:6e:c9:04:03:4e:26:6f:37:10:49:00:63:dc:ba:
         34:e1:a7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:48 2026 by rpki-client