Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
File:                     0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft (raw, json)
Hash identifier:          f2Bz1GbnKrp0ObnTHr0bFSzECufzQLolam/sOy3laKA=
Subject key identifier:   67:69:67:EF:DA:C7:1F:CC:CA:B7:28:C2:16:C3:AB:76:C6:6A:92:87
Authority key identifier: D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08
Certificate issuer:       /CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
Certificate serial:       01A13E263DC83B5DCE1CFEC63A26A3295D0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
Manifest number:          1858
Signing time:             Thu 15 Oct 2026 06:00:55 +0000
Manifest this update:     Thu 15 Oct 2026 06:00:55 +0000
Manifest next update:     Fri 16 Oct 2026 06:00:55 +0000
Files and hashes:         1: 0NhTEIhVVHGuhHppc2WhR24nfps.roa (hash: UAiJiA/nFpUR+80xJrPSC3HfZCrrUkoKtrqsQ8RFQsc=)
                          2: 0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl (hash: ojQ0lzfL7hWbzwDa34/JFWPsJhjUSUgJKjcD+j9aYBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:3d:c8:3b:5d:ce:1c:fe:c6:3a:26:a3:29:5d:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2f6e6b5a34fd18b435385db87bb3ae974785108
        Validity
            Not Before: Oct 15 06:00:55 2026 GMT
            Not After : Oct 16 06:00:55 2026 GMT
        Subject: CN=676967efdac71fcccab728c216c3ab76c66a9287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:e9:82:4b:52:a5:e5:c7:a0:0c:43:63:c1:
                    f7:24:b8:c4:46:bd:93:54:4f:9a:d2:65:ea:0b:a8:
                    ab:76:4c:74:43:fb:67:4e:68:b3:69:30:ed:f3:4d:
                    04:37:61:67:fb:3d:fa:ec:42:f6:0e:85:f3:6d:cc:
                    0a:5d:9b:a4:17:7b:b5:56:69:77:b1:3f:39:df:d2:
                    2b:64:50:c8:5c:0d:69:8b:ea:4a:46:ec:5f:b8:4b:
                    24:9a:6f:6f:12:de:d0:6f:99:fe:60:19:48:6d:75:
                    75:a2:65:b2:97:7e:6f:67:8f:38:5c:e2:30:96:f1:
                    e5:c4:b8:1b:e0:88:97:59:1f:99:5e:bc:38:23:ec:
                    0c:90:0a:52:12:1c:6e:ee:f4:ad:3b:6b:1a:1a:cd:
                    87:b2:b6:fc:24:6b:89:b8:d0:6b:0a:a0:1c:48:60:
                    84:4c:b5:19:2d:aa:6e:b7:67:18:7a:47:fd:05:80:
                    97:fe:70:6c:e1:5e:71:d9:77:7e:41:0a:a0:0e:98:
                    21:05:7f:43:b8:1c:d2:ce:b5:31:e6:c7:7d:8e:83:
                    a7:43:de:7f:34:31:52:63:21:1e:99:27:a3:a6:6c:
                    e3:5e:aa:2b:9d:63:1a:8b:0b:74:bf:97:c6:a6:11:
                    ee:7e:a8:57:ad:87:b2:42:dc:e7:71:40:10:5b:49:
                    09:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:69:67:EF:DA:C7:1F:CC:CA:B7:28:C2:16:C3:AB:76:C6:6A:92:87
            X509v3 Authority Key Identifier:
                keyid:D2:F6:E6:B5:A3:4F:D1:8B:43:53:85:DB:87:BB:3A:E9:74:78:51:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0vbmtaNP0YtDU4Xbh7s66XR4UQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b0c77-8085-4a5a-bace-143c3d38d17c/1/0vbmtaNP0YtDU4Xbh7s66XR4UQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c6:21:4f:6f:fb:de:45:6e:ba:69:2d:f0:e6:11:1e:eb:6b:
         62:37:ca:21:a7:64:25:b3:44:b4:2f:07:21:87:95:9b:dc:e6:
         c1:1d:cc:5b:2b:9c:f2:72:6a:5a:aa:9e:23:4c:77:23:01:49:
         0e:78:b7:b3:cb:cd:a6:c2:21:85:9d:f7:a9:af:33:ea:77:7c:
         a4:17:e3:26:4b:12:89:7e:a4:6c:6e:84:ce:ad:05:36:39:2f:
         0a:9b:dc:eb:0a:56:22:38:b5:0f:85:e6:45:9d:80:87:9c:28:
         b9:f7:4e:c7:01:9a:3d:27:92:cf:b5:e7:57:56:59:d1:d2:7e:
         89:71:4a:35:cb:ef:bd:8b:b9:a8:48:6a:94:2f:6e:9d:14:da:
         f4:86:74:7b:81:98:00:91:c1:77:03:ac:3f:5a:4c:0b:bd:91:
         97:a1:b8:91:ce:5d:a3:74:ec:26:64:11:b5:3a:a9:0d:eb:d8:
         8d:5d:14:58:bb:67:e8:0b:b3:e6:a0:9a:2a:ba:3c:c2:50:9a:
         97:58:ed:5c:80:fa:d0:bd:fa:c4:1a:60:2d:1f:a4:66:33:51:
         63:1c:f1:49:6f:ba:82:25:0d:ae:f8:b2:f2:3e:e1:05:80:74:
         e6:0e:70:fa:84:f4:85:1c:24:0f:ad:b5:2c:51:ae:5f:30:32:
         27:2b:c1:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+Jj3IO13OHP7GOiajKV0KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZjZlNmI1YTM0ZmQxOGI0MzUzODVkYjg3YmIzYWU5NzQ3
ODUxMDgwHhcNMjYxMDE1MDYwMDU1WhcNMjYxMDE2MDYwMDU1WjAzMTEwLwYDVQQD
Eyg2NzY5NjdlZmRhYzcxZmNjY2FiNzI4YzIxNmMzYWI3NmM2NmE5Mjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFTpgktSpeXHoAxDY8H3JLjERr2T
VE+a0mXqC6irdkx0Q/tnTmizaTDt800EN2Fn+z367EL2DoXzbcwKXZukF3u1Vml3
sT8539IrZFDIXA1pi+pKRuxfuEskmm9vEt7Qb5n+YBlIbXV1omWyl35vZ484XOIw
lvHlxLgb4IiXWR+ZXrw4I+wMkApSEhxu7vStO2saGs2Hsrb8JGuJuNBrCqAcSGCE
TLUZLaput2cYekf9BYCX/nBs4V5x2Xd+QQqgDpghBX9DuBzSzrUx5sd9joOnQ95/
NDFSYyEemSejpmzjXqornWMaiwt0v5fGphHufqhXrYeyQtzncUAQW0kJ/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdpZ+/axx/MyrcowhbDq3bGapKHMB8GA1UdIwQY
MBaAFNL25rWjT9GLQ1OF24e7Oul0eFEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS85YjBjNzctODA4NS00YTVhLWJhY2Ut
MTQzYzNkMzhkMTdjLzEvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS85YjBjNzctODA4NS00YTVhLWJhY2UtMTQzYzNkMzhkMTdj
LzEvMHZibXRhTlAwWXREVTRYYmg3czY2WFI0VVFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAsYhT2/7
3kVuumkt8OYRHutrYjfKIadkJbNEtC8HIYeVm9zmwR3MWyuc8nJqWqqeI0x3IwFJ
Dni3s8vNpsIhhZ33qa8z6nd8pBfjJksSiX6kbG6Ezq0FNjkvCpvc6wpWIji1D4Xm
RZ2Ah5woufdOxwGaPSeSz7XnV1ZZ0dJ+iXFKNcvvvYu5qEhqlC9unRTa9IZ0e4GY
AJHBdwOsP1pMC72Rl6G4kc5do3TsJmQRtTqpDevYjV0UWLtn6Auz5qCaKro8wlCa
l1jtXID60L36xBpgLR+kZjNRYxzxSW+6giUNrviy8j7hBYB05g5w+oT0hRwkD621
LFGuXzAyJyvBUw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:34:06 2026 by rpki-client