Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
File:                     Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft (raw, json)
Hash identifier:          DBSZoa7TqJWaqbK/eGP9xP4sF8IWXrHSUr6gBrArNQA=
Subject key identifier:   88:1D:EF:A1:DD:E4:2E:DC:44:4F:05:4C:6A:41:8D:40:9F:C3:54:25
Authority key identifier: 46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48
Certificate issuer:       /CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848
Certificate serial:       01A0B1996F07A4DE94F7EEAE2A014978E53E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
Manifest number:          08D2
Signing time:             Thu 17 Sep 2026 23:00:17 +0000
Manifest this update:     Thu 17 Sep 2026 23:00:17 +0000
Manifest next update:     Fri 18 Sep 2026 23:00:17 +0000
Files and hashes:         1: Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl (hash: 9hpQ0Q7sMNau7fyBMxAqiDiaTVK0QANHmC38v1AvbDc=)
                          2: YGnN82E7AnH_j4eaF9W1W1WjZSo.roa (hash: SoIylCg6a/wt1TKL6JVP1AZFMMupreSe0oa44in2zMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Sep 2026 22:53:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b1:99:6f:07:a4:de:94:f7:ee:ae:2a:01:49:78:e5:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d6ebea6e6ea9e6006a81344d1163fbec4fa848
        Validity
            Not Before: Sep 17 23:00:17 2026 GMT
            Not After : Sep 18 23:00:17 2026 GMT
        Subject: CN=881defa1dde42edc444f054c6a418d409fc35425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:eb:31:93:2a:72:ee:3c:5d:62:cc:03:7c:b8:
                    59:45:00:6f:ad:6e:3e:04:07:86:f6:22:38:dc:c8:
                    f8:cb:d5:ec:d3:22:ce:d0:53:42:87:70:ca:a3:26:
                    d6:47:bf:24:09:dc:35:b4:ec:47:c4:7f:b2:f3:c4:
                    e0:0f:8e:27:ae:48:ad:96:e0:39:d1:83:a4:d0:2a:
                    cf:11:a8:af:8c:fa:65:d3:34:13:22:ed:86:ac:8e:
                    8a:63:c8:7a:93:76:ee:96:9e:2f:72:95:ff:1c:48:
                    f9:bb:4d:b9:1b:ff:3c:07:70:17:eb:9b:97:f6:18:
                    cf:03:89:f1:60:36:72:0c:b7:35:ba:6a:f6:b2:20:
                    c9:79:56:ae:4d:2e:80:0e:d0:96:e6:b3:45:8e:40:
                    65:81:33:23:87:40:57:92:00:30:1b:4d:a7:f8:33:
                    d9:37:ca:90:bd:de:ff:4b:d4:cc:55:b3:63:16:50:
                    0b:84:ba:6d:d1:c8:07:0b:54:74:10:f2:f4:d0:f6:
                    51:ac:4d:46:cb:3a:33:d2:c5:99:f5:6b:65:12:a3:
                    11:15:08:d5:e7:48:17:4c:65:82:79:ff:89:d0:ec:
                    14:94:ed:65:5b:e3:06:e1:81:96:c7:a9:74:b7:1a:
                    6e:1b:a6:b4:c4:35:0b:cf:5a:eb:e2:15:16:c1:65:
                    0b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1D:EF:A1:DD:E4:2E:DC:44:4F:05:4C:6A:41:8D:40:9F:C3:54:25
            X509v3 Authority Key Identifier:
                keyid:46:D6:EB:EA:6E:6E:A9:E6:00:6A:81:34:4D:11:63:FB:EC:4F:A8:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rtbr6m5uqeYAaoE0TRFj--xPqEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/15541d-a7ba-4710-a5cf-965cc208ee40/1/Rtbr6m5uqeYAaoE0TRFj--xPqEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:55:7a:84:cc:c4:9b:5f:a5:9b:77:01:21:32:63:7b:2e:d7:
         97:05:ea:03:87:70:09:11:53:66:1d:9c:b7:17:7e:92:10:d5:
         4c:e3:2a:e0:71:ff:dd:c2:b1:d3:bd:11:55:7b:85:10:48:b0:
         f7:2e:08:68:e5:76:c3:f5:06:0b:f6:ea:75:a4:97:41:3c:47:
         46:17:08:24:df:25:8e:a5:fd:4a:60:f5:7d:8e:25:74:5f:60:
         c9:fc:03:c0:90:e0:16:aa:e9:7f:55:58:97:24:b9:46:21:cf:
         d1:42:82:e3:ea:62:37:f0:6a:aa:d8:77:a8:87:24:82:af:77:
         cc:47:38:8a:81:b3:ea:87:c1:e5:ff:f8:9b:78:26:28:5d:32:
         0d:51:89:65:6f:cb:c9:7d:37:ba:ce:f6:5f:75:4d:45:a1:84:
         3f:83:6f:73:f7:c1:97:08:c2:fb:26:1e:fd:b1:d8:0d:73:e4:
         d1:30:fc:68:d3:1a:ab:a4:08:21:50:66:c0:62:89:06:ae:92:
         a9:5e:7b:40:15:b3:9b:cb:a3:78:58:bb:c5:39:b1:dd:fd:97:
         ba:7e:3c:30:ba:3a:a7:be:98:d7:1d:db:60:07:58:81:cc:54:
         12:78:db:ea:17:84:b2:9f:a6:2b:57:23:ab:6e:16:c9:ac:32:
         3f:5c:e0:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 02:29:38 2026 by rpki-client