Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
File:                     l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft (raw, json)
Hash identifier:          kzm4ZVhzZozhW7GhkZgB2XSSuD7J+9q3p0jCMmGITDs=
Subject key identifier:   1C:75:A0:F9:0C:E1:28:DC:D0:29:2D:31:35:A9:5E:80:52:D3:D7:A4
Authority key identifier: 97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75
Certificate issuer:       /CN=97da420008cfb9193499278ef558bd42d61c7f75
Certificate serial:       01A131B432B7C1D5D8DE6D3BBE9DF96ED829
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
Manifest number:          0FF8
Signing time:             Mon 12 Oct 2026 20:00:55 +0000
Manifest this update:     Mon 12 Oct 2026 20:00:55 +0000
Manifest next update:     Tue 13 Oct 2026 20:00:55 +0000
Files and hashes:         1: RRtfB43pqBCM6OCwQmvlGxGMPl0.roa (hash: LR6JcqCChdanxUEAC+gj24/t+Ng0ZaCy6iSBjwr0kN4=)
                          2: RosKSFL_tFtQ89bX-qHP5zLu6m0.roa (hash: I4juV9hPvK9S7lanhjFS1ERPjUkTsd9rdm1n5n9GOHM=)
                          3: fUgeR2nF_pXWNWV55rMg8WE-3cA.roa (hash: tWjY+UnVt+eeOEtvKdASRIS/bltLwSGhZ5m+5B8PJGo=)
                          4: l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl (hash: uPmu5WJA9KNrv11SM6Gbwes+gKE7R+7uC0p6clgqpq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 20:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:b4:32:b7:c1:d5:d8:de:6d:3b:be:9d:f9:6e:d8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97da420008cfb9193499278ef558bd42d61c7f75
        Validity
            Not Before: Oct 12 20:00:55 2026 GMT
            Not After : Oct 13 20:00:55 2026 GMT
        Subject: CN=1c75a0f90ce128dcd0292d3135a95e8052d3d7a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:44:15:1f:17:d3:28:47:75:e6:ef:ca:c3:90:
                    41:00:67:48:c9:51:5a:52:4a:6e:a1:0b:bc:66:fd:
                    76:22:b1:51:c2:e2:fa:53:62:f4:0f:1e:40:04:49:
                    b4:41:a1:1a:2e:a3:bd:19:23:ae:2b:45:2c:0b:63:
                    88:39:5f:a4:5b:c4:d5:1f:c1:db:22:5f:8a:5e:6b:
                    37:16:94:b4:8e:23:b0:92:ee:f5:06:51:4f:ed:7b:
                    e3:10:4d:43:32:15:19:04:80:0a:58:53:cb:3c:46:
                    6a:f6:0c:90:f9:aa:15:fe:ba:34:26:8b:a5:4d:1c:
                    73:96:7c:f7:1b:31:d7:fe:c8:9e:58:31:e4:3a:ce:
                    d5:92:b9:5a:9f:99:eb:d1:fa:aa:86:7c:16:e2:01:
                    1e:cf:5b:42:e0:47:c7:f1:0f:67:ec:db:0a:4c:0c:
                    32:0d:8b:8e:ae:a0:d4:89:20:10:5f:6b:32:6b:31:
                    57:52:07:66:10:52:5a:f8:35:e4:94:12:49:91:ba:
                    4f:fe:e1:63:41:7d:96:d5:72:19:d8:ad:2a:3a:95:
                    67:3d:7b:e9:72:ee:a0:64:fe:30:45:39:14:bf:cc:
                    a5:c6:6f:6d:83:72:96:ef:83:fb:4c:dd:86:ca:3e:
                    a5:ba:c6:b2:9d:63:e3:cc:6a:4f:17:15:24:00:e3:
                    0e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:75:A0:F9:0C:E1:28:DC:D0:29:2D:31:35:A9:5E:80:52:D3:D7:A4
            X509v3 Authority Key Identifier:
                keyid:97:DA:42:00:08:CF:B9:19:34:99:27:8E:F5:58:BD:42:D6:1C:7F:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/139044-9ebc-4559-ba10-a38e1eca4fd4/1/l9pCAAjPuRk0mSeO9Vi9QtYcf3U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:9c:e1:8b:c4:ca:4b:b6:4b:a4:9e:c4:43:4d:7e:b6:aa:d8:
         55:1a:49:a5:87:d5:8b:cc:09:b7:33:51:66:27:e6:f0:f6:97:
         3e:7c:f0:dc:17:ec:f4:d3:a5:83:c4:27:91:bf:89:02:3a:d3:
         83:8c:00:d5:02:1e:dd:7f:bd:b3:82:66:17:3a:0e:f4:07:30:
         a4:f7:09:7d:29:e6:3e:36:a8:08:f7:97:c7:d7:a1:2c:64:13:
         18:4a:21:2c:37:1e:6c:43:bf:46:1d:3a:5c:d3:c0:f8:3f:48:
         00:ab:9d:2d:65:d2:d6:34:12:29:dc:f1:e2:57:c8:01:7e:f4:
         9a:7c:c3:4e:c9:5c:6b:60:ed:2e:36:26:30:01:6d:a4:79:f2:
         aa:58:05:22:04:4f:db:88:23:53:cd:90:67:0e:6c:d9:bc:94:
         0d:d1:ac:ba:cb:97:69:24:d5:ae:b8:69:40:bb:cf:6f:af:a1:
         62:5f:56:77:39:ce:14:45:44:6e:31:66:2e:89:de:d4:b8:09:
         17:ac:4f:2e:51:c3:2e:3c:41:df:77:4c:40:98:ab:c1:27:4d:
         b9:e4:f8:93:7f:e4:3f:08:89:44:b4:56:02:19:57:af:00:73:
         13:c8:c9:c2:0a:65:44:8b:0a:a3:28:8e:7e:e6:17:80:c5:54:
         f5:e7:b9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:22:55 2026 by rpki-client