Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
File:                     5oaWVQmmScUIq4q3L3JXvvNfeTA.mft (raw, json)
Hash identifier:          yg2U0CoMt9IwQvna2p2BSwglIxrMMQ6Zn2dsdh20xiM=
Subject key identifier:   9A:2B:C9:B8:27:59:8D:56:EE:3A:2E:B7:17:32:DB:1A:CC:C3:54:04
Authority key identifier: E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30
Certificate issuer:       /CN=e686965509a649c508ab8ab72f7257bef35f7930
Certificate serial:       01A0E7E3EB17FC2A1F2ADBEA5E5E9F6D38B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
Manifest number:          0312
Signing time:             Mon 28 Sep 2026 12:01:08 +0000
Manifest this update:     Mon 28 Sep 2026 12:01:08 +0000
Manifest next update:     Tue 29 Sep 2026 12:01:08 +0000
Files and hashes:         1: 5oaWVQmmScUIq4q3L3JXvvNfeTA.crl (hash: C6Ma4Ea3iBi33oeTyC1+BxA/+40pkeR/C0wUIAhDThw=)
                          2: WfbgqzFvbp8TCWxSG_sNKuLnLRk.roa (hash: jfHBs52kM4vMm6kxJTz0eoaLnYZ9f8a9vM4u4mqutm0=)
                          3: aB79fGj4vXTZE5XL5eriNSFisHA.asa (hash: 1qM7sm32yNwlqaxmCx8pUKuLeMMUaDuzmS9PF1Xa8zE=)
                          4: bABKElQpuUR5qvAEktEyWURQ4XE.roa (hash: xB7baZkS+NXVYrZMh8EL0mNmqqM8iQ6l8pfIwSwvFAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 12:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:e3:eb:17:fc:2a:1f:2a:db:ea:5e:5e:9f:6d:38:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e686965509a649c508ab8ab72f7257bef35f7930
        Validity
            Not Before: Sep 28 12:01:08 2026 GMT
            Not After : Sep 29 12:01:08 2026 GMT
        Subject: CN=9a2bc9b827598d56ee3a2eb71732db1accc35404
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:af:86:c1:f2:6c:cc:04:6b:36:f1:cc:03:eb:
                    be:b2:9b:3e:22:d9:87:ab:1b:11:a8:31:ab:4c:43:
                    95:e0:53:f7:27:5a:73:7f:fc:07:a3:02:64:43:c4:
                    ef:e0:20:29:d3:0d:f3:ef:5a:ef:2a:bb:09:28:fc:
                    c2:b2:9b:bd:b0:ff:8b:5a:75:d5:46:86:76:f0:8c:
                    65:0d:af:e1:10:ce:7d:5b:74:ac:41:32:b3:be:a6:
                    8d:51:36:82:27:77:61:8b:82:60:bf:d4:18:64:af:
                    f3:fa:8e:5d:ef:a1:bd:0a:db:b1:96:26:e4:10:48:
                    05:6a:90:bd:a9:8c:82:89:47:b7:79:22:70:f2:87:
                    7b:43:f0:06:31:44:92:fd:1f:90:d1:ac:f6:1a:d5:
                    2d:6e:a0:07:0c:74:f9:07:ec:60:21:eb:68:3e:3c:
                    b7:f4:47:64:03:f0:3d:37:ea:8a:78:d7:1e:cf:2c:
                    c4:71:21:a7:a6:1b:b4:12:78:87:e2:46:fb:74:eb:
                    6b:55:42:49:d3:bb:c5:2c:41:a3:f3:2a:2b:1c:49:
                    f3:23:66:3a:9f:13:1a:c6:e5:08:f2:79:c8:f8:bc:
                    ce:84:f8:70:7c:f5:a8:95:8f:f9:ce:05:b8:38:95:
                    c9:a1:c3:b4:63:83:a7:12:f8:f9:b0:ce:06:59:a7:
                    17:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2B:C9:B8:27:59:8D:56:EE:3A:2E:B7:17:32:DB:1A:CC:C3:54:04
            X509v3 Authority Key Identifier:
                keyid:E6:86:96:55:09:A6:49:C5:08:AB:8A:B7:2F:72:57:BE:F3:5F:79:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oaWVQmmScUIq4q3L3JXvvNfeTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/68bff6-7b2c-4ecf-8006-ed14af6db888/1/5oaWVQmmScUIq4q3L3JXvvNfeTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:de:25:13:71:75:98:09:c5:e4:48:36:e2:a5:b0:d4:d9:a1:
         07:56:6b:c6:bf:7c:d1:c8:27:5f:ea:7e:8d:1f:44:06:ea:10:
         de:11:2a:ec:50:72:7a:fd:f2:55:c8:51:2f:3e:57:50:67:85:
         af:50:98:91:66:76:1c:2e:00:66:9d:0d:0b:8a:48:7c:ab:f3:
         51:38:f3:04:13:67:22:56:cf:e8:e0:93:c8:90:d5:61:a1:1c:
         99:85:93:ff:de:f1:8a:a0:b5:ba:97:c2:a5:7a:95:3d:70:50:
         62:b4:f6:47:ad:84:06:7c:fc:71:a4:62:b4:1e:d7:33:9d:4b:
         14:4d:44:ce:06:6d:b4:03:99:4c:ce:ad:79:21:8d:44:35:4c:
         62:87:db:ae:64:6f:b6:9b:57:bf:be:b1:44:c5:13:62:71:92:
         1d:c4:5c:c4:1a:b7:52:c1:d2:40:2c:53:86:89:9a:2d:6f:cf:
         fe:92:de:d8:d5:91:00:9d:b1:59:60:a3:a1:9d:04:b6:31:af:
         3a:ad:41:d2:b4:77:2f:96:d7:ac:cb:b2:6a:c6:8e:af:ab:3a:
         ca:1a:98:25:f7:e1:e0:fe:9f:9f:de:a7:5d:c7:98:0b:f1:68:
         19:68:cd:a9:10:fb:cf:19:d6:ff:f8:15:e2:1a:c1:78:bd:db:
         b9:cf:db:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:31:47 2026 by rpki-client