Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
File:                     g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft (raw, json)
Hash identifier:          zvYqVL1kYUpOLuZVQkWDqn/FILytYHnPUCcWohFvXgQ=
Subject key identifier:   85:6F:A8:16:0F:43:67:F5:6A:C4:27:22:54:BD:5E:D9:9F:4D:C3:B3
Authority key identifier: 83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0
Certificate issuer:       /CN=83c966da5eead50905091c3b599c9a44074739d0
Certificate serial:       01A08979992E7CBF8F1A1C23CCCC3C5DFBD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
Manifest number:          1013
Signing time:             Thu 10 Sep 2026 04:00:42 +0000
Manifest this update:     Thu 10 Sep 2026 04:00:42 +0000
Manifest next update:     Fri 11 Sep 2026 04:00:42 +0000
Files and hashes:         1: g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl (hash: LRhZiD7zGacZadmvTtL0DwZJ5m4rB5wyXwG1T34LjfM=)
                          2: mlxjfCYLY5zP7FWHQn5jZrn1-2E.roa (hash: Sa3BVa6U3gGHjYDNKkWwgEzxSnctftBOzOaSJF0fsp8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:89:79:99:2e:7c:bf:8f:1a:1c:23:cc:cc:3c:5d:fb:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c966da5eead50905091c3b599c9a44074739d0
        Validity
            Not Before: Sep 10 04:00:42 2026 GMT
            Not After : Sep 11 04:00:42 2026 GMT
        Subject: CN=856fa8160f4367f56ac4272254bd5ed99f4dc3b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:de:a2:90:89:6c:34:90:71:32:3b:ff:66:46:
                    e1:45:8c:71:d4:5f:ae:1a:49:30:60:1e:b1:80:41:
                    15:62:24:db:c5:3e:63:49:fd:62:35:13:a9:e8:cd:
                    6d:d0:de:fe:02:f5:ca:91:4d:a4:35:11:79:57:aa:
                    23:d2:a7:9b:06:03:ad:38:7a:56:be:37:aa:e8:1f:
                    96:b8:ac:bf:e3:6c:c9:0f:79:6d:ca:0e:c1:20:ec:
                    76:89:7b:17:81:89:b2:d4:ac:80:8b:90:1b:71:d6:
                    45:f0:4d:6d:4c:1e:62:64:c3:d6:9b:10:01:c0:73:
                    0e:da:5f:f8:f2:15:cd:7e:37:af:89:01:a3:f4:d2:
                    8d:9b:73:c3:6e:06:46:49:f0:5d:0a:d8:45:a2:4d:
                    73:c9:90:7c:85:0d:a2:46:c4:37:6a:7b:b6:56:f1:
                    10:11:07:d5:16:01:18:39:3e:31:5f:ff:e4:df:36:
                    e5:69:a2:96:af:ae:8a:e2:24:32:6e:c9:30:54:5a:
                    d8:e2:13:7e:39:8f:c4:4f:0a:0f:03:12:00:ca:56:
                    12:5b:55:7c:7e:d4:9d:a5:a2:b5:15:1d:dd:b3:0b:
                    44:53:dd:0a:3f:c9:1e:53:94:88:1c:76:32:10:bc:
                    90:5e:dc:73:e6:9c:79:ff:09:6b:ac:c4:ac:7f:64:
                    b5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6F:A8:16:0F:43:67:F5:6A:C4:27:22:54:BD:5E:D9:9F:4D:C3:B3
            X509v3 Authority Key Identifier:
                keyid:83:C9:66:DA:5E:EA:D5:09:05:09:1C:3B:59:9C:9A:44:07:47:39:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8lm2l7q1QkFCRw7WZyaRAdHOdA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4b99b8-0657-4162-ab04-f572a0fce0ee/1/g8lm2l7q1QkFCRw7WZyaRAdHOdA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d8:12:91:cc:52:61:21:35:03:99:93:61:70:69:7e:63:65:
         91:4e:e7:0c:e5:c1:5e:d8:27:10:af:3c:89:31:77:0a:00:69:
         97:1a:29:39:13:14:63:80:72:a1:1d:70:53:78:40:9a:96:05:
         55:d7:94:7a:dd:e8:10:e0:4f:12:4c:64:fb:0a:87:52:f9:43:
         6a:7c:69:73:09:55:56:c6:57:aa:82:ad:fc:74:a8:0f:b3:1f:
         09:0b:e7:83:0b:6b:a8:ed:d1:2d:17:75:b9:fa:6a:8a:f0:fc:
         41:51:b1:56:f1:85:99:98:3c:7d:2a:10:97:de:82:f1:ef:50:
         fd:e9:61:26:c1:10:16:e1:9e:33:62:ea:e4:be:5e:f0:63:b9:
         34:6a:00:e5:82:1e:d3:97:ff:cc:6f:67:9e:d3:3f:39:50:df:
         30:a5:58:9e:97:0e:32:5c:12:b0:2b:4e:6d:d6:1a:0f:6d:48:
         ba:21:e5:18:11:5b:7c:cb:ab:88:cf:4f:98:00:1a:2b:5a:ee:
         70:67:51:50:f1:df:07:4c:aa:04:e7:49:a0:2a:66:b2:d5:6c:
         b9:fb:de:2f:84:05:e0:91:9e:09:bd:6e:b1:c9:d4:46:85:98:
         c7:e5:1b:49:5d:ed:ea:49:0c:ad:28:98:a0:8a:2d:df:5c:13:
         dc:6f:fa:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:40:46 2026 by rpki-client