Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
File:                     o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft (raw, json)
Hash identifier:          soIL62D0S5hTtgrfwB+k7RrB+oR/s/O28f+w6/lgG+s=
Subject key identifier:   51:EC:AE:8F:61:8C:8E:F0:C3:6F:0C:55:D3:D8:F4:CF:79:C4:03:6A
Authority key identifier: A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61
Certificate issuer:       /CN=a36619427c283fa3b2bb7b45cc35a51286398961
Certificate serial:       01A08A8CD2F50B6C03F664E2C50CDC956277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
Manifest number:          02FB
Signing time:             Thu 10 Sep 2026 09:01:19 +0000
Manifest this update:     Thu 10 Sep 2026 09:01:19 +0000
Manifest next update:     Fri 11 Sep 2026 09:01:19 +0000
Files and hashes:         1: kFGche0sUMJjtQYWtRrXVgbIroM.roa (hash: 34UZsa7v3vzkYl287UK/ejNXOYJMH9D9QG1MuCDxpCg=)
                          2: o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl (hash: BsCuaVfAHGMt2H5Byw6w/bi570HZfzHtqtB2YR8qLh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:8c:d2:f5:0b:6c:03:f6:64:e2:c5:0c:dc:95:62:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a36619427c283fa3b2bb7b45cc35a51286398961
        Validity
            Not Before: Sep 10 09:01:19 2026 GMT
            Not After : Sep 11 09:01:19 2026 GMT
        Subject: CN=51ecae8f618c8ef0c36f0c55d3d8f4cf79c4036a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fb:88:55:81:16:6f:44:ba:af:2a:ec:d1:10:
                    99:38:6d:ee:98:9c:f1:b2:a2:b7:1a:a5:76:e5:fb:
                    92:ef:e7:69:aa:d2:57:1d:16:1c:58:03:08:0f:bc:
                    c4:c0:84:a2:28:bf:d1:10:3b:97:a1:3d:fd:d7:59:
                    35:de:5d:0c:a5:5d:1f:1c:fc:52:47:59:0a:bc:39:
                    e4:6d:61:81:30:05:a7:49:7a:43:89:cd:8e:22:d7:
                    ac:79:6c:62:85:82:46:3b:85:f7:30:7a:83:9b:c3:
                    91:80:2a:56:23:b1:a9:c3:eb:62:2f:dc:7c:aa:89:
                    6e:f0:05:f9:37:c6:c3:61:47:f8:22:61:50:67:ca:
                    0c:b3:d0:4b:77:fd:b2:40:8e:df:93:4d:c4:8b:a4:
                    a5:a1:43:bb:5b:5d:57:9a:4f:b5:23:b0:93:5a:89:
                    3a:90:bd:bf:0f:c4:44:c3:2b:3d:8f:bf:72:4d:00:
                    cb:cc:b1:96:e4:b0:49:93:10:90:83:81:5d:b2:f0:
                    39:bd:67:61:57:b2:de:c8:3f:a1:15:c4:8d:9c:e8:
                    b1:d3:81:9c:65:7e:12:9b:19:fc:f6:53:22:1c:ed:
                    89:7b:1b:d7:2d:00:d5:16:e3:30:51:e6:cc:80:f5:
                    01:5e:d7:4b:0c:0b:28:27:35:ea:21:0b:61:af:39:
                    41:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EC:AE:8F:61:8C:8E:F0:C3:6F:0C:55:D3:D8:F4:CF:79:C4:03:6A
            X509v3 Authority Key Identifier:
                keyid:A3:66:19:42:7C:28:3F:A3:B2:BB:7B:45:CC:35:A5:12:86:39:89:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0fa280-02dd-4517-89a7-3b8178dbb94c/1/o2YZQnwoP6Oyu3tFzDWlEoY5iWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:15:38:bb:01:04:62:cd:70:2e:a0:59:d4:33:8e:fe:86:
         f3:b6:72:0d:b5:bf:3d:4f:17:93:d9:72:e3:f3:bf:48:95:22:
         e1:f8:4d:f4:45:91:8c:25:ce:00:ff:05:ef:56:2d:e2:1a:e9:
         1c:27:60:c1:0e:c9:e8:e8:04:1c:a0:71:96:ff:0c:9b:e0:27:
         d2:6e:a4:ef:cc:41:67:8e:ec:a2:41:b7:7e:79:1b:c1:d7:c8:
         a7:d7:47:ea:fe:36:23:bc:e2:68:e4:b3:b4:94:7b:1c:e0:12:
         92:b0:d6:ae:f8:c6:ec:f9:1e:05:fa:59:5d:aa:e7:90:ab:7e:
         27:ee:c9:92:4b:29:97:55:06:53:c6:e7:85:8b:3d:4e:f1:aa:
         3f:56:a7:6d:20:ae:39:a1:3a:a9:9f:11:bc:73:8b:72:94:ec:
         ba:00:13:c0:12:a1:73:63:a7:34:72:85:9c:aa:8b:b3:c2:06:
         7a:70:7d:9d:7e:80:50:1b:98:9e:52:0e:4d:85:31:31:72:f9:
         29:4c:84:3b:09:0d:6e:c1:f6:4f:68:91:a1:91:a3:d6:19:f3:
         ae:fe:9f:b8:c1:0b:e3:c4:b2:47:c6:4b:7f:99:b1:dc:9a:13:
         b5:be:45:ca:60:84:9d:fb:73:7e:e1:3b:8a:eb:47:59:cb:eb:
         4d:1d:fd:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:07:33 2026 by rpki-client