Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
File:                     0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json)
Hash identifier:          kDvc561YwHsUfL8bUyHRK4+DynYxaJRh6xOqGi90TVc=
Subject key identifier:   51:00:1D:33:75:7C:A0:EA:A0:74:3E:88:2F:9C:03:90:9C:51:5D:1A
Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83
Certificate issuer:       /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
Certificate serial:       01A001A609525232A7943C0834DC6A3743E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
Manifest number:          0832
Signing time:             Fri 14 Aug 2026 19:00:53 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:53 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:53 +0000
Files and hashes:         1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: 2v7yCw9Lqob2NdcB76NQJtiMpOxZHT4LFPff1GDTtkM=)
                          2: snrfUjBn7hs_JXI-JDADVPqBfu0.roa (hash: chl5WtQulq1NJ8dnVwRq5DKzxSTQgdztVrgONAQmO1c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a6:09:52:52:32:a7:94:3c:08:34:dc:6a:37:43:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183
        Validity
            Not Before: Aug 14 19:00:53 2026 GMT
            Not After : Aug 15 19:00:53 2026 GMT
        Subject: CN=51001d33757ca0eaa0743e882f9c03909c515d1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:3a:f8:cd:e9:51:ab:fd:a3:fc:c4:05:31:
                    cf:0f:9d:ee:33:10:59:fb:47:d4:a4:f4:c3:90:0a:
                    53:17:84:93:5e:6c:39:6e:ae:78:8c:bc:cd:b9:a8:
                    8b:e8:04:31:c1:82:de:a9:14:f3:4b:05:16:5e:6d:
                    eb:d2:d6:a3:6b:c6:d5:20:7a:76:dd:73:a4:17:ad:
                    6c:2a:1b:e4:1e:51:6a:4c:a2:29:00:e6:77:31:69:
                    ce:88:65:3b:ca:1b:dc:7c:52:bb:be:4c:2b:ec:6b:
                    75:93:2e:71:07:c2:db:f4:e0:b5:37:8f:fc:32:8b:
                    05:52:95:d2:7b:4c:bc:99:78:95:19:26:57:d1:3f:
                    24:ed:89:a6:57:d8:53:eb:da:23:29:f1:49:1c:58:
                    1a:8f:d2:86:41:05:ca:e6:1d:67:88:fb:21:3d:cf:
                    fc:f1:2b:58:9e:ae:1e:25:02:4c:e3:ce:f9:fe:dc:
                    13:b7:6a:30:6b:e3:1d:34:9a:0a:1e:4e:71:23:78:
                    97:79:d8:52:e1:42:0f:23:dd:a3:0d:04:d0:bb:bf:
                    d0:1b:c7:b9:1e:dd:06:a6:c1:36:fc:f7:d2:09:53:
                    82:dd:33:72:ea:f6:52:c6:89:73:e1:3e:0c:34:cc:
                    a4:ab:9f:69:b7:e0:6f:03:ed:c2:0f:1c:12:42:04:
                    1c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:00:1D:33:75:7C:A0:EA:A0:74:3E:88:2F:9C:03:90:9C:51:5D:1A
            X509v3 Authority Key Identifier:
                keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:56:12:c0:89:50:21:55:71:aa:23:97:f9:aa:d6:4d:33:e7:
         b4:54:ef:11:d4:c8:b2:43:1f:cc:fd:ab:5f:ec:02:5f:b2:43:
         0e:f0:f6:70:54:c1:ba:61:96:c2:4a:e5:f5:d5:0c:bd:ca:16:
         75:92:9d:1b:c6:bb:36:c8:8a:3b:8f:48:b5:36:55:38:1d:00:
         08:f6:3e:ad:3b:66:48:00:13:f8:8c:eb:b8:da:0c:94:18:4a:
         34:5f:e1:bd:3d:3e:e9:44:c5:9b:ee:ae:37:84:33:fd:4b:a5:
         91:74:d5:43:55:3b:3f:8e:e6:df:9c:bf:e0:f0:92:d8:25:4e:
         2c:e2:d9:80:9d:56:d6:d4:5d:78:75:18:4e:9f:4c:3f:42:e6:
         7d:ac:f2:79:ca:67:4a:e8:cc:b3:db:37:0e:09:c8:d8:99:df:
         72:8c:1f:1b:f9:f7:bf:11:16:5a:ca:64:1d:ec:8f:86:54:bb:
         23:4f:dc:e8:88:0b:bb:d0:7a:fb:cd:66:05:f0:fe:5f:0b:ed:
         d6:7b:7d:51:47:6a:bc:e4:9d:35:e2:a1:f7:42:72:00:56:67:
         33:20:ee:5e:30:99:37:66:5c:46:6d:48:1a:39:58:07:70:c9:
         1d:ff:11:e9:4e:06:ad:30:f8:0f:c7:3d:28:de:7f:32:46:a1:
         1d:30:cf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:59 2026 by rpki-client