Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
File:                     jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft (raw, json)
Hash identifier:          49XxZWP15yxc9zRlNVmrVGKotsbwCgtdWXHTPXunoeo=
Subject key identifier:   52:8F:73:AC:F2:A7:47:60:89:FA:72:1D:EC:E6:84:9B:E4:31:84:1A
Authority key identifier: 8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18
Certificate issuer:       /CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
Certificate serial:       01A08BD5F958AF732F7C8C898012A530EBA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
Manifest number:          13F8
Signing time:             Thu 10 Sep 2026 15:00:50 +0000
Manifest this update:     Thu 10 Sep 2026 15:00:50 +0000
Manifest next update:     Fri 11 Sep 2026 15:00:50 +0000
Files and hashes:         1: 0SsVKDB-etOOcOJQzIHSYo6Hluc.roa (hash: H/DwF92N2tX0k/2d7XIAaSBcDnUSEy8mxFtoeNIE6Kw=)
                          2: 0wUdxJ4suYobkrI0m3nFXE-K2KU.roa (hash: FQiCUFsTMLuwkmXx5bpC/mi0OyHn67NhNJuEJfN64/4=)
                          3: 16y6Dm3S-0XHkZbYn6cxfAo_YFw.roa (hash: irAMsjmRujbnUilwywkGQLVJ9AE8/s362qDrKSsSxPI=)
                          4: 1s1Anh1QdawOquhsQec7nqu-SG0.roa (hash: 6504PhSQMgZrsrEiZwvBZyN4RItbFrKjL7CmPL9wxiY=)
                          5: 2dvNjFNNGXzYwjJ3gSoiKOH6YQ4.roa (hash: igNQ1yKZeqJtmX3Z7Md10ja7c0/HQ0NFLXG1rlvOgqU=)
                          6: 7fjgR8MdkVqNxOuk17l6YOZkEXc.roa (hash: V6auew69PK5NifvnfyykYZCVCycoyXF8cQaN55tYK2g=)
                          7: 7mCn109sqofRWDcNGOrrWERitmM.roa (hash: n6j8KsGkcRSlMvVC+mLJUCmxgZJPqcyhJhHOVryX78M=)
                          8: Ae4-OOb-2nImKqdi1MxBgmBoWVs.roa (hash: KwsDySAe+eP5dCXWhiEtsf9rm3LNfZPilz1MOuwv4sU=)
                          9: FVA4oJspHiHRrvb4oPtG_h-PCUc.roa (hash: 8Bxg+XWjUfh7Zdnhw++FwSqxGhF6WD8KSM27CCqW1Hk=)
                          10: G_rLb1NHBdbT4ggKLzWbI18udZ4.roa (hash: 4GIc2uDLUKOt0yM8/St7IKalsIdESkoGix2DNQwzQiI=)
                          11: JyOt5cnB4v3T3UZPKw92X0tNe54.roa (hash: MUq1toHmKuuf364qjeKbDPNwnyp28heyE703+cnlITE=)
                          12: K0d-nr6FyB_kVSGyDh66Rm6xuvo.roa (hash: EjAMOySbpY1BQojVyP+4Fblh4A/2sP9R9ArCHE0eUrI=)
                          13: OW2i0Vv3eqlIhzi4Ce-giYKAHvo.roa (hash: 2ZqSdW69STHjs36+tEpGmZ3SaSTt9SUQC7OzgPN8IYo=)
                          14: Or5GdPC3i4DomxvbtpMmobgK3sg.roa (hash: vyasvDlNnRIIOt+N/kTnXMKrvV2imQsfb6nc8t1wEWc=)
                          15: P9AAwlJ1hAyoBTMnpPtV2ahht98.roa (hash: w/3W+982HT12bpaYdt1kWDUaV8RUnkWfWrwrtVX09Bo=)
                          16: TmyYIBkphXsirlJCQTVa7k6Uie8.roa (hash: hhCTErkRmXxcMcTjpwytmP+hxldbDBaVoTRSyv8AD3g=)
                          17: U7oXbPR9C9b39Cn3HMYf0C_-Xuo.roa (hash: HqG/neowXQp3hyj34sle61tnf6dsEZFjdso7+Oknl5c=)
                          18: Ufkv8jiL7xZNW_nZ6mQGVgFaatc.roa (hash: Sr6wUGNDgEARiAEw7iKuRuPr56/2v7RjVXYJB+eoKWA=)
                          19: WQYEipD2j9z75du2QB8SySPDnxI.roa (hash: CV6p+h2jprm7Gg9PLiJzpVym5xmpbUgS8b6EhM9ktlE=)
                          20: c3wcGPfeUV88q6TA4u7y7Mms2vQ.roa (hash: wYvAqUgZsKTLwhxzM00Aba7HLAIWb47vx7l+YCHWjTQ=)
                          21: hciHi1rbAPXC_QOxKxCBhhQcO_o.roa (hash: gpGy+g3ryjDdMYoZqZQTJLY4xwgqtQLamwKVVCAZNpQ=)
                          22: jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl (hash: m2UAbqFQThtIeO0FWztfannbhg4UgCc9clcENZLzlmA=)
                          23: kdpA_FGh8De_3t0XAUAZBxl2atQ.roa (hash: sVcoVUKOIe+5ShYkg7UX2nsGLKYp9ktHdUjuoSG4OfU=)
                          24: oIjvZ5LFpREEoQ8CBQGoijsn0Nc.roa (hash: M99QhtER9HJAO8F9G3t/LufEuGbqke6cpdVhyWm1xXw=)
                          25: pdLh7xvaX1CZetTeKzwrGS9oqdo.roa (hash: BdAcKY+3HpnFAKISEO/MKuSBunkmIg8PdCaI4X/Vc8E=)
                          26: plcJAoUt3ObRYB80UXn3jJwsM50.roa (hash: 73gdO7zUcUNZgeuvyNGHXSPiLSUGsq/a2kFDPmZUlgA=)
                          27: xKH-si1DhOiUdanbclaUXyvQ8oI.roa (hash: cqd69YqhAEhayTiTYZKqWDUypDcoPpQi51cHl699YCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:d5:f9:58:af:73:2f:7c:8c:89:80:12:a5:30:eb:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e1c11658d2041eaf2502fe5408ed493bbd4f318
        Validity
            Not Before: Sep 10 15:00:50 2026 GMT
            Not After : Sep 11 15:00:50 2026 GMT
        Subject: CN=528f73acf2a7476089fa721dece6849be431841a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:84:41:8c:15:84:3b:fe:82:53:8b:33:92:b5:
                    01:0a:4e:8c:82:01:fb:79:28:d0:6e:44:ae:ad:6a:
                    bb:5f:52:86:2c:ef:c8:ad:35:d5:17:26:56:11:90:
                    01:a4:23:ba:8e:0e:62:c3:67:4b:bd:8c:12:a2:6b:
                    cc:87:b7:c1:c3:50:fa:36:4f:79:f5:5f:b9:74:36:
                    2a:f7:60:4f:b9:f7:71:6c:fc:ef:f6:bd:c8:38:c1:
                    9b:04:e1:f6:a5:bd:ea:05:84:8f:8a:42:2a:03:ab:
                    c6:b7:e4:45:e0:3a:e4:76:20:73:ab:bd:08:b7:11:
                    c3:ae:0b:c7:fa:3c:f4:3a:e8:06:46:73:2a:8e:c4:
                    2a:97:a0:33:7d:03:fd:01:89:9f:fd:ed:bc:48:92:
                    bc:75:11:d6:1e:7f:d2:a3:36:26:cd:2e:96:db:13:
                    45:03:86:06:fc:c9:27:5c:36:6e:f1:16:5c:97:13:
                    6e:82:ff:5e:a1:fd:0d:58:e2:ab:77:fa:7a:02:96:
                    b7:8f:6d:1d:26:f5:fc:4d:cb:39:3a:27:8a:fc:6c:
                    79:97:1e:62:7d:3e:87:92:f6:43:93:7a:33:95:12:
                    5f:7c:cb:f8:06:27:8b:b5:e0:43:87:f7:9b:f2:a3:
                    d0:76:53:93:87:a1:e3:58:c5:24:47:9c:56:1f:85:
                    8a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8F:73:AC:F2:A7:47:60:89:FA:72:1D:EC:E6:84:9B:E4:31:84:1A
            X509v3 Authority Key Identifier:
                keyid:8E:1C:11:65:8D:20:41:EA:F2:50:2F:E5:40:8E:D4:93:BB:D4:F3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhwRZY0gQeryUC_lQI7Uk7vU8xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/70bf8b-d8c4-40c3-9022-63348cdbf024/1/jhwRZY0gQeryUC_lQI7Uk7vU8xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:ec:a6:2a:8a:b2:58:90:af:ef:62:bf:f4:2b:52:53:c7:63:
         b4:1e:16:14:36:81:ff:4f:d4:6f:bf:41:2e:fa:c2:50:84:7c:
         0d:15:fe:11:99:2b:ce:8f:16:c4:69:d2:75:3e:0e:18:dd:13:
         95:ce:e6:e9:8e:0d:9c:45:43:6b:da:8f:59:ac:e0:35:da:25:
         9d:88:c1:85:6d:5c:23:24:6c:43:62:45:9b:12:f2:73:c5:5b:
         08:43:05:38:e0:4f:51:aa:99:e6:3a:41:f0:8d:77:52:2f:d4:
         13:60:96:e3:ba:85:05:80:57:55:e9:44:95:9a:46:79:16:1e:
         38:31:40:3c:3c:58:9d:99:3f:83:78:98:a3:3d:df:03:a6:8c:
         5e:08:d1:6c:4e:b1:1c:90:90:25:53:36:68:04:a4:b8:7e:63:
         25:53:fa:a2:78:c6:fc:94:36:71:cf:d2:17:e2:84:69:07:5c:
         fd:8d:3c:26:bf:59:9a:ee:57:cc:07:65:96:d1:40:8d:76:6e:
         2e:c1:20:50:49:73:2b:20:bb:72:1c:1c:5d:d2:1a:af:31:19:
         8f:93:5f:40:a7:1d:86:9a:67:7d:a0:8e:8d:a0:46:38:a1:b1:
         d3:85:fe:35:9c:00:7e:d8:ca:a7:fa:b9:d3:ce:4d:46:00:1e:
         98:29:93:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:31:28 2026 by rpki-client