Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
File:                     9ONr1L84JXQMkFpnzcFrMBhyqnE.mft (raw, json)
Hash identifier:          iQOEdLZ7BPuZsXaW+MNJAAtSWNPI5hI3cLlBlt9PEpU=
Subject key identifier:   FB:64:06:FF:0D:5D:43:E3:47:B6:58:9D:82:6B:1B:7A:AC:CD:10:8D
Authority key identifier: F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71
Certificate issuer:       /CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
Certificate serial:       01A03C711B0F413C9A99A20F4D30343C6A2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
Manifest number:          015C
Signing time:             Wed 26 Aug 2026 05:00:40 +0000
Manifest this update:     Wed 26 Aug 2026 05:00:40 +0000
Manifest next update:     Thu 27 Aug 2026 05:00:40 +0000
Files and hashes:         1: 9ONr1L84JXQMkFpnzcFrMBhyqnE.crl (hash: 6utuxCkmhZmkTlPKRbHo4wkGriT1D85VKxsEFBiqC5M=)
                          2: LLDfBKtlCeW3eI7057StcwRGUvc.asa (hash: FU+roj6w95slO9NnUEl8Tx6t8gdfs68bD1W8S1h/R64=)
                          3: Vr9B-zHNKLHeB8Xx57Kq7jsYtHM.roa (hash: OzngqieZsxcHJ4EZWwYuegusT/oah57Gh4sMFZUQ7jw=)
                          4: YIz6jgPy4T57-v5Y0lRVw2yHO-g.roa (hash: y3YrgdUaOAbn2OQqch9+TXJZirScPNyDivnJKIFz94k=)
                          5: gxhNdT76LUOawd0GerJXEnAbQVU.roa (hash: ViECi6teUjpoYqtJK7rD4xR1mS6VHcPwXBdiN9l6wxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 05:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3c:71:1b:0f:41:3c:9a:99:a2:0f:4d:30:34:3c:6a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e36bd4bf3825740c905a67cdc16b301872aa71
        Validity
            Not Before: Aug 26 05:00:40 2026 GMT
            Not After : Aug 27 05:00:40 2026 GMT
        Subject: CN=fb6406ff0d5d43e347b6589d826b1b7aaccd108d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ac:c8:bb:5d:7b:10:48:b2:4f:43:b6:bb:8b:
                    ba:bf:bb:08:04:da:be:9d:81:0c:6d:02:42:21:bb:
                    08:95:ac:18:33:b7:44:16:50:5f:ca:b6:56:af:cb:
                    0f:d4:45:17:0e:b1:3f:0b:39:cd:9c:da:6c:0d:84:
                    99:60:43:86:b5:b4:d3:78:e1:7c:8d:e7:bf:de:ae:
                    6f:34:4c:16:5f:de:cc:c3:90:6f:a9:63:bb:97:e8:
                    32:e3:ee:86:b2:d6:47:dd:84:25:7d:4a:2b:78:53:
                    b2:5f:f6:87:e1:9d:e7:fd:cb:fe:58:2d:81:18:76:
                    9d:38:b5:b0:39:3c:02:9e:3c:2d:2e:57:5c:56:4e:
                    b9:11:a0:c2:ab:5c:56:a9:17:04:4b:00:90:b2:37:
                    bb:f2:d2:e0:ef:65:9a:29:46:dc:98:b1:1d:10:6a:
                    8d:e5:d3:13:48:19:b5:53:36:06:b7:0b:a9:6a:f0:
                    46:68:eb:f1:28:81:07:b8:14:c9:bc:10:8d:de:dc:
                    71:c2:cb:9b:f3:30:cc:73:04:2d:66:39:0e:f3:bc:
                    b4:15:51:7b:1f:8e:04:c9:78:f5:d4:24:e4:26:ae:
                    af:27:c6:93:f0:c8:65:2d:64:22:6f:88:d0:81:ad:
                    b4:5d:ca:1c:b1:99:1e:94:9a:f8:da:08:e3:04:ff:
                    71:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:64:06:FF:0D:5D:43:E3:47:B6:58:9D:82:6B:1B:7A:AC:CD:10:8D
            X509v3 Authority Key Identifier:
                keyid:F4:E3:6B:D4:BF:38:25:74:0C:90:5A:67:CD:C1:6B:30:18:72:AA:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ONr1L84JXQMkFpnzcFrMBhyqnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/4f8124-4142-4dd5-8c62-07c8b5a985ba/1/9ONr1L84JXQMkFpnzcFrMBhyqnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e1:36:b4:36:b4:41:13:a1:62:14:06:9a:bd:69:51:ba:ae:
         8e:67:af:10:f6:54:39:af:37:12:8a:29:27:b6:c2:37:88:76:
         0a:1f:6a:81:72:a0:96:dd:aa:37:db:c6:2e:13:e6:03:ca:5c:
         be:35:0a:93:30:ad:62:09:f1:bc:0b:8f:02:b8:6b:56:0b:5d:
         a6:d5:88:71:d1:04:6d:aa:22:36:83:98:35:76:3b:dd:02:26:
         d8:98:c0:79:29:21:b1:16:27:f5:6f:12:db:f0:ca:10:49:c3:
         40:22:01:3d:d2:f0:b8:13:12:fd:b0:21:a6:c6:ca:89:30:ed:
         d1:33:f6:e0:6d:19:67:dd:b3:3d:81:b2:85:56:dc:8f:98:13:
         75:84:9b:5e:de:9b:ac:75:51:9b:03:83:b7:4e:f1:74:b4:66:
         ad:36:61:14:a3:d8:88:de:ec:91:aa:5b:06:5f:c4:e8:f6:6f:
         e9:2a:c2:a4:e4:5e:ba:80:07:7b:64:1a:3d:e0:a0:07:d5:81:
         2c:16:32:32:2c:54:24:0b:53:80:c9:fe:91:18:8d:f4:f1:9e:
         d0:10:57:8c:fa:c8:57:19:23:d4:06:d9:7b:fa:36:f1:7e:ed:
         bf:d3:0d:8c:64:1c:9c:c9:8b:4d:94:58:a9:d2:d1:7b:51:5c:
         68:e6:48:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA8cRsPQTyamaIPTTA0PGouMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTM2YmQ0YmYzODI1NzQwYzkwNWE2N2NkYzE2YjMwMTg3
MmFhNzEwHhcNMjYwODI2MDUwMDQwWhcNMjYwODI3MDUwMDQwWjAzMTEwLwYDVQQD
EyhmYjY0MDZmZjBkNWQ0M2UzNDdiNjU4OWQ4MjZiMWI3YWFjY2QxMDhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7azIu117EEiyT0O2u4u6v7sIBNq+
nYEMbQJCIbsIlawYM7dEFlBfyrZWr8sP1EUXDrE/CznNnNpsDYSZYEOGtbTTeOF8
jee/3q5vNEwWX97Mw5BvqWO7l+gy4+6GstZH3YQlfUoreFOyX/aH4Z3n/cv+WC2B
GHadOLWwOTwCnjwtLldcVk65EaDCq1xWqRcESwCQsje78tLg72WaKUbcmLEdEGqN
5dMTSBm1UzYGtwupavBGaOvxKIEHuBTJvBCN3txxwsub8zDMcwQtZjkO87y0FVF7
H44EyXj11CTkJq6vJ8aT8MhlLWQib4jQga20XcocsZkelJr42gjjBP9xswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPtkBv8NXUPjR7ZYnYJrG3qszRCNMB8GA1UdIwQY
MBaAFPTja9S/OCV0DJBaZ83BazAYcqpxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9OcjFMODRKWFFNa0ZwbnpjRnJNQmh5cW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80ZjgxMjQtNDE0Mi00ZGQ1LThjNjIt
MDdjOGI1YTk4NWJhLzEvOU9OcjFMODRKWFFNa0ZwbnpjRnJNQmh5cW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80ZjgxMjQtNDE0Mi00ZGQ1LThjNjItMDdjOGI1YTk4NWJh
LzEvOU9OcjFMODRKWFFNa0ZwbnpjRnJNQmh5cW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi+E2tDa0
QROhYhQGmr1pUbqujmevEPZUOa83EoopJ7bCN4h2Ch9qgXKglt2qN9vGLhPmA8pc
vjUKkzCtYgnxvAuPArhrVgtdptWIcdEEbaoiNoOYNXY73QIm2JjAeSkhsRYn9W8S
2/DKEEnDQCIBPdLwuBMS/bAhpsbKiTDt0TP24G0ZZ92zPYGyhVbcj5gTdYSbXt6b
rHVRmwODt07xdLRmrTZhFKPYiN7skapbBl/E6PZv6SrCpOReuoAHe2QaPeCgB9WB
LBYyMixUJAtTgMn+kRiN9PGe0BBXjPrIVxkj1AbZe/o28X7tv9MNjGQcnMmLTZRY
qdLRe1FcaOZIDw==
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:07:43 2026 by rpki-client