Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
File:                     H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft (raw, json)
Hash identifier:          xI66JhU0QGjISZAiPvpSBMRaFwGfzbEtIzLTw+9UsjA=
Subject key identifier:   84:2B:CF:36:BC:71:38:53:AD:A1:9D:69:9F:4D:86:9A:E5:12:84:CC
Authority key identifier: 1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4
Certificate issuer:       /CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
Certificate serial:       01A06EA71EC28DAA1F0F42ADCB9808970106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
Manifest number:          0C82
Signing time:             Fri 04 Sep 2026 23:00:41 +0000
Manifest this update:     Fri 04 Sep 2026 23:00:41 +0000
Manifest next update:     Sat 05 Sep 2026 23:00:41 +0000
Files and hashes:         1: H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl (hash: XtB5KaqYnMJysPVAqe9uQiVnDcgnU2irOxgI+kemBlI=)
                          2: rEklxLhJo9S4IBAy4se1tLI3lkE.roa (hash: xqvERQ2TneWjz4TWOCFTyowIh4LAz/S0+u0Tj5YT4tc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:a7:1e:c2:8d:aa:1f:0f:42:ad:cb:98:08:97:01:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fb5fc3d898348d35c77bf16c3ed9cfe815955b4
        Validity
            Not Before: Sep  4 23:00:41 2026 GMT
            Not After : Sep  5 23:00:41 2026 GMT
        Subject: CN=842bcf36bc713853ada19d699f4d869ae51284cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0d:38:98:16:72:d9:9d:28:8f:d0:36:11:35:
                    01:76:49:da:1e:a8:9a:f1:a5:c3:93:dc:a7:7a:05:
                    88:a2:1d:c7:1a:0f:67:7a:fa:d9:03:15:ec:23:6b:
                    da:99:57:1d:32:1a:d5:3b:46:31:2f:fe:ff:46:06:
                    41:02:40:1c:7a:09:96:fd:14:74:41:4d:cf:9f:09:
                    8b:98:93:cd:75:63:30:d5:ab:9d:55:86:c5:f5:be:
                    aa:35:07:7f:38:85:29:10:1e:7b:6b:2f:c0:1f:09:
                    b5:3e:60:14:07:52:74:9f:ac:d5:a7:03:56:d4:c0:
                    55:ac:a7:bd:f6:4c:de:32:1f:45:e0:92:9f:f4:47:
                    2f:fa:d0:f8:00:30:e1:b5:f0:aa:3b:91:37:22:43:
                    41:e0:b1:f7:32:27:07:3e:77:31:53:12:aa:38:20:
                    ee:05:23:c7:89:4e:b9:e8:9c:b1:e6:0c:5a:fe:94:
                    c9:45:18:a3:44:19:c0:1e:b8:ba:3d:7a:54:2f:3b:
                    e1:d2:96:7b:cd:6a:3e:83:6f:71:3e:5e:19:88:ec:
                    28:21:4d:a6:59:2d:81:e6:8f:bb:c0:c0:0a:c1:31:
                    73:69:e6:bf:5b:82:92:74:d2:b8:6f:3c:f7:df:86:
                    4e:21:97:b3:61:44:7f:db:1a:e0:10:83:97:16:ff:
                    0e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2B:CF:36:BC:71:38:53:AD:A1:9D:69:9F:4D:86:9A:E5:12:84:CC
            X509v3 Authority Key Identifier:
                keyid:1F:B5:FC:3D:89:83:48:D3:5C:77:BF:16:C3:ED:9C:FE:81:59:55:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/d4eb2f-c115-4dee-a5e7-dedea3ab0d3b/1/H7X8PYmDSNNcd78Ww-2c_oFZVbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a4:5b:40:45:1c:43:93:cf:ce:88:e5:e7:80:20:b8:a3:ac:
         89:f0:cc:05:e3:fd:ba:e9:f0:68:a1:af:b0:51:37:f2:91:c1:
         26:20:51:18:33:72:b9:d9:65:df:96:e9:d3:22:7f:9e:16:80:
         26:41:34:d4:a9:d6:d1:0e:f1:59:67:eb:0f:f9:5d:6c:a1:c4:
         e9:29:50:d7:96:bd:65:c1:b9:53:0c:2b:c7:f4:ed:c8:29:04:
         d5:1b:9a:e7:2c:b2:5c:3e:0f:7c:b9:3c:7f:aa:b6:ad:cc:d5:
         2a:40:8d:c7:43:54:21:c9:f5:1e:66:94:fd:9c:f2:63:06:9a:
         9a:82:c7:06:0e:c8:1a:4f:3d:f6:19:4a:67:3c:0a:9e:a4:40:
         4d:e4:90:fd:53:5f:b3:bf:6b:25:fd:29:6a:36:04:02:a5:77:
         c0:cc:a7:71:dd:d9:6d:a5:18:58:70:03:f1:79:d7:b4:fc:d1:
         01:f7:25:ee:7a:b2:5d:94:7b:8f:c3:64:b2:cf:91:9b:00:83:
         4f:f0:cc:a3:4b:a8:a7:d8:3e:67:bd:bb:21:ef:31:43:2f:e9:
         92:f0:11:6d:bd:a4:8a:dc:9e:11:b0:39:fd:3e:ec:ec:af:97:
         1e:d8:89:7c:f8:12:90:5c:1b:04:a4:e0:05:1e:50:8f:a4:c1:
         dc:10:9d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:41:08 2026 by rpki-client