Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
File:                     0mKOBpte2LRVk0O1tn9atPkiUf4.mft (raw, json)
Hash identifier:          NVdd4KBOfxwmj1TROKRs0fUVYu/mdLUBxwEGc/Icf/4=
Subject key identifier:   9B:8F:2E:89:30:90:73:3E:71:B7:1B:3A:71:B0:21:08:59:3A:9C:88
Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Certificate issuer:       /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Certificate serial:       01A06D5D9700BFFB64AD2FE72EA1D06B91C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
Manifest number:          0584
Signing time:             Fri 04 Sep 2026 17:00:44 +0000
Manifest this update:     Fri 04 Sep 2026 17:00:44 +0000
Manifest next update:     Sat 05 Sep 2026 17:00:44 +0000
Files and hashes:         1: 0mKOBpte2LRVk0O1tn9atPkiUf4.crl (hash: GhUf3H6RtnN5ldjViycVwIB1bL1bolbj541oy0l5f+c=)
                          2: eypU5gakI37ZRxsTjD1X4DoOVfo.roa (hash: hM1K52QM5/jrbLf53wcNduMHGRDz/fwXSTlOlM9cG8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:5d:97:00:bf:fb:64:ad:2f:e7:2e:a1:d0:6b:91:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
        Validity
            Not Before: Sep  4 17:00:44 2026 GMT
            Not After : Sep  5 17:00:44 2026 GMT
        Subject: CN=9b8f2e893090733e71b71b3a71b02108593a9c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:a5:fe:f4:35:93:74:fb:c4:de:ba:37:c4:8d:
                    3e:16:44:96:f9:4c:3b:95:ae:42:9e:2a:54:97:66:
                    88:26:2c:59:a6:05:cb:66:1d:de:ad:50:b4:12:59:
                    dd:a2:57:27:f0:1d:6c:1f:8a:98:c7:2c:ec:d3:f5:
                    87:a3:d4:d7:59:e0:fe:63:fb:a4:b1:c4:53:9e:4f:
                    3c:3c:fd:d0:85:37:5b:91:c1:67:9d:c9:d3:c2:09:
                    72:77:d7:24:29:df:68:fd:93:5f:90:df:3e:d3:96:
                    9c:d6:a8:7f:f5:88:9a:0b:33:72:ab:94:38:62:db:
                    52:ff:47:0b:5f:e0:1e:5f:1d:71:3e:e0:d2:a9:0e:
                    c0:81:a9:42:49:8a:66:f6:0f:f5:97:1c:7e:c6:ae:
                    1a:e1:6c:10:5b:3e:d1:25:16:99:93:d9:f0:86:c5:
                    ca:af:b6:88:65:ce:41:64:64:d1:89:96:68:5f:df:
                    79:c8:48:11:74:de:4a:a1:ab:de:1b:f6:39:70:a3:
                    0d:52:31:cc:d0:ae:47:a1:31:40:dc:de:4b:d0:ed:
                    71:3f:d3:db:37:46:39:b9:70:a8:9b:7e:5e:78:03:
                    53:06:ed:90:43:bc:94:17:2e:f6:93:35:7f:e8:3b:
                    cf:59:3a:e2:4d:bd:dc:e8:b3:eb:39:de:28:fb:ce:
                    a2:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:8F:2E:89:30:90:73:3E:71:B7:1B:3A:71:B0:21:08:59:3A:9C:88
            X509v3 Authority Key Identifier:
                keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:99:ec:bf:92:5e:f8:58:ee:d1:40:00:6c:ff:34:4f:65:83:
         2a:97:f1:7e:0b:8e:02:e6:c3:41:30:f6:cf:49:26:49:9d:3a:
         6c:b6:5e:5a:86:66:d6:7f:f7:ed:59:46:55:6b:be:54:8c:09:
         ca:36:f5:a8:cb:9d:34:a1:f7:18:45:3e:4e:e2:0c:e5:c3:a8:
         60:f5:6b:9d:ff:41:2a:52:44:26:4d:4c:c2:b5:4e:4f:d2:9d:
         7f:87:8f:40:71:13:ee:79:a8:d6:10:25:53:72:a5:ee:24:36:
         4d:4c:e0:f8:de:26:29:6e:73:6d:ac:2b:cb:4c:6f:77:1b:04:
         29:73:74:92:68:05:50:2e:2c:98:f0:da:ba:e8:1c:06:4b:e9:
         56:20:4f:9d:cf:c3:87:d0:00:c9:bc:e9:0c:9b:0b:08:30:f0:
         a5:1d:79:99:f6:d8:25:d9:9a:47:05:ac:1d:45:bc:e3:5e:d6:
         e6:ab:4c:96:ec:b5:54:86:57:f0:1f:07:dd:2e:63:71:f8:4c:
         f6:58:7c:92:e0:9b:c5:e8:1a:cb:d9:db:b0:a7:94:5f:99:36:
         25:07:05:33:8d:a1:df:74:22:15:f3:e8:2d:9b:ee:a1:f2:ad:
         5a:3b:6f:b2:b4:30:d3:aa:e4:f6:13:55:b2:05:c6:68:0f:ba:
         93:fb:ca:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:54 2026 by rpki-client