Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
File:                     0MzQmlS_pjFBmXzWU7d7yZOS72I.mft (raw, json)
Hash identifier:          x7E2V/WeaUwJZWEuwgsk8yG71Oj5bQ5t80LDuxTXtms=
Subject key identifier:   11:64:7E:0E:93:6C:F0:57:B5:3F:18:3E:7C:6C:CA:7C:A1:1D:A9:69
Authority key identifier: D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62
Certificate issuer:       /CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
Certificate serial:       01A001DC97C9676765285C1F32C76797A775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
Manifest number:          0C12
Signing time:             Fri 14 Aug 2026 20:00:28 +0000
Manifest this update:     Fri 14 Aug 2026 20:00:28 +0000
Manifest next update:     Sat 15 Aug 2026 20:00:28 +0000
Files and hashes:         1: 0MzQmlS_pjFBmXzWU7d7yZOS72I.crl (hash: QuTrNe3TH2kLXTkQ+i6mQLkngyvUPjFHuuXu+XLeK6M=)
                          2: VQtJlC9hHzZMq_K64NB0xltL3Qc.roa (hash: My9rgEJXYw1FAk2B4n4agl5BA61SBdcnSem0n0fXVFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dc:97:c9:67:67:65:28:5c:1f:32:c7:67:97:a7:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0ccd09a54bfa63141997cd653b77bc99392ef62
        Validity
            Not Before: Aug 14 20:00:28 2026 GMT
            Not After : Aug 15 20:00:28 2026 GMT
        Subject: CN=11647e0e936cf057b53f183e7c6cca7ca11da969
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6f:7a:a3:78:18:ff:e4:c3:2e:59:09:6b:ed:
                    a0:d0:32:15:57:1e:5a:94:d8:2c:52:33:20:fe:ed:
                    0a:04:8a:b3:01:d6:33:cb:5b:aa:b0:77:19:cb:93:
                    16:e5:3b:0c:6d:95:c0:f6:ef:2b:2c:2d:a4:0e:b1:
                    2e:a9:b5:54:0c:c1:7a:35:89:f8:7f:b8:ad:27:45:
                    d9:3d:ee:c2:d2:67:6e:48:19:71:49:7e:4b:32:94:
                    b2:ca:f5:4e:7e:62:4a:71:56:cc:dc:b1:8b:11:de:
                    38:69:e7:23:5e:ae:17:f2:7f:ca:d1:48:fb:cb:12:
                    ad:46:16:08:e3:9a:76:45:aa:a5:05:f0:e6:52:ae:
                    ab:f7:4d:f4:8b:ac:b7:64:66:4f:e0:3e:83:b6:2e:
                    f5:08:1f:aa:bd:52:ad:cd:1e:65:86:27:44:15:d2:
                    be:d6:a6:29:17:10:07:ab:32:1e:82:74:11:d6:89:
                    dc:7b:0e:50:dd:79:1b:d0:18:57:e7:eb:f7:ce:48:
                    48:6f:26:67:a1:a6:cb:7c:c1:a9:82:e8:09:e0:ad:
                    ae:a0:27:99:25:f2:39:e5:a3:3e:31:7f:c6:b7:91:
                    a2:28:db:f1:1d:e8:75:59:f0:34:c7:71:1d:72:5f:
                    7e:ad:30:d5:46:ac:e7:92:d6:14:64:e4:46:17:8d:
                    e0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:64:7E:0E:93:6C:F0:57:B5:3F:18:3E:7C:6C:CA:7C:A1:1D:A9:69
            X509v3 Authority Key Identifier:
                keyid:D0:CC:D0:9A:54:BF:A6:31:41:99:7C:D6:53:B7:7B:C9:93:92:EF:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0MzQmlS_pjFBmXzWU7d7yZOS72I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/136b3f-459e-4a96-a4ab-3b990878a52b/1/0MzQmlS_pjFBmXzWU7d7yZOS72I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e0:90:45:1a:6b:d6:f7:eb:3e:8a:18:7b:5f:61:e3:ab:a2:
         cb:1f:74:fe:d5:bc:1b:2c:72:d2:d6:a5:b1:23:1e:58:1b:49:
         f5:f3:3d:a8:e9:42:5d:de:da:ed:d3:d6:44:97:2c:92:d6:8e:
         37:49:75:3b:38:b8:5c:fb:93:ea:c0:7d:ff:e0:73:03:7b:86:
         30:2b:77:48:81:7b:5e:e0:02:ef:a1:3f:9f:f5:e6:8c:26:9a:
         58:f3:19:0b:8d:80:f4:7d:5d:3c:e2:df:ff:cf:f2:56:11:23:
         dc:b1:41:81:bc:11:f3:b6:f4:44:55:c0:5e:96:52:fd:0e:09:
         68:49:63:ca:a4:25:22:0f:5b:47:69:21:ba:5e:64:c8:ba:5c:
         8e:a2:60:1f:57:4c:2f:8c:8c:06:e1:95:19:27:d4:ec:81:82:
         8d:f7:6f:d4:1a:67:50:47:ae:e7:f3:6c:48:49:81:fc:e4:42:
         6d:10:48:55:59:97:c6:3e:11:0d:92:d4:7a:14:6e:bd:e5:63:
         0f:ba:79:81:b0:e5:2b:ba:60:31:94:b7:3e:67:73:23:c2:75:
         e1:29:ca:b4:ba:da:dd:42:cc:36:02:27:23:cd:cc:da:6a:ff:
         8e:20:95:a9:da:89:a9:b5:b8:5f:13:28:dd:43:80:a2:60:cf:
         91:51:a7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:46 2026 by rpki-client