Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
File:                     aotaN08UbXtqbcfTFujrsS3upnA.mft (raw, json)
Hash identifier:          riLZt7zsJeLVs2S/Q+PoDSliRdOyauQHFQzpEq9pRnY=
Subject key identifier:   69:3E:BB:72:79:43:53:B4:B3:45:67:4D:0A:55:AF:75:F6:4A:02:1D
Authority key identifier: 6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70
Certificate issuer:       /CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
Certificate serial:       01A0B4D17B2B0BC9220EA33956A28DF3D56D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
Manifest number:          1135
Signing time:             Fri 18 Sep 2026 14:00:22 +0000
Manifest this update:     Fri 18 Sep 2026 14:00:22 +0000
Manifest next update:     Sat 19 Sep 2026 14:00:22 +0000
Files and hashes:         1: aotaN08UbXtqbcfTFujrsS3upnA.crl (hash: ZC+YSrXSqoXNozZ6ayh0bWWqF1/0nusY/f3tHyMk3hM=)
                          2: bet4fdymyOIlEb-62LJXEqjZz4M.roa (hash: z3hr8kxRBm3emLdFWmkitNGZ2vCXqhwRUzbp9y48TSg=)
                          3: xzOtkf3m_unGZDJuyTmOZRDo1vs.roa (hash: AqWTAJg+/JR+tTmpK3jZUrDvB6ISeUjMegyS/xS/c3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b4:d1:7b:2b:0b:c9:22:0e:a3:39:56:a2:8d:f3:d5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8b5a374f146d7b6a6dc7d316e8ebb12deea670
        Validity
            Not Before: Sep 18 14:00:22 2026 GMT
            Not After : Sep 19 14:00:22 2026 GMT
        Subject: CN=693ebb72794353b4b345674d0a55af75f64a021d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:f6:c7:61:9b:e4:9f:78:1f:54:b2:0a:1b:
                    5a:f8:7e:ac:dd:9f:69:17:23:a3:84:a9:74:d0:37:
                    e4:04:46:6b:81:22:2e:0f:5b:d4:2a:6a:bd:01:d2:
                    36:fa:f8:d7:fb:d9:f3:5a:6f:f6:79:58:ea:33:40:
                    15:22:86:62:b3:63:01:56:46:cf:89:5d:6c:10:5f:
                    90:4f:d2:2d:01:e8:b9:95:44:02:f8:07:9f:05:f0:
                    c0:71:7a:0d:39:f7:94:30:aa:fb:22:dc:28:65:58:
                    1d:9d:76:bd:38:bd:9c:01:a5:90:ff:1b:e7:d2:fa:
                    b5:43:e5:17:db:ce:b7:7e:3c:9f:4e:ec:cb:f3:7d:
                    5c:e3:47:cb:bf:da:0d:66:02:6a:69:6c:10:03:50:
                    93:86:2e:61:a8:20:9d:7d:9c:a0:1f:60:78:b7:26:
                    8d:cb:02:a9:2c:2a:28:8e:c6:f3:95:a2:24:89:0f:
                    ce:d0:48:da:00:95:90:3e:02:6e:c6:40:d0:98:7a:
                    c2:6f:d7:ab:13:ae:78:2e:c1:a9:39:a0:be:fa:d6:
                    f8:cb:08:cf:8d:84:5f:d2:25:56:d7:75:e1:e2:50:
                    30:e6:4b:5e:04:52:32:cf:c3:83:46:53:db:b6:be:
                    9a:0b:2c:37:fd:9f:04:c4:35:3e:c3:ed:bd:1c:c9:
                    69:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3E:BB:72:79:43:53:B4:B3:45:67:4D:0A:55:AF:75:F6:4A:02:1D
            X509v3 Authority Key Identifier:
                keyid:6A:8B:5A:37:4F:14:6D:7B:6A:6D:C7:D3:16:E8:EB:B1:2D:EE:A6:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aotaN08UbXtqbcfTFujrsS3upnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/f6c862-af8b-43f3-98ad-44241fec1a9f/1/aotaN08UbXtqbcfTFujrsS3upnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:0b:99:e5:a5:77:24:a5:7c:a9:c7:b8:26:b4:d1:37:c4:1b:
         b2:16:d0:be:fb:d1:9f:fb:15:0b:87:01:fb:08:41:0c:a9:d6:
         dc:9f:1e:38:e8:5f:c8:dc:e4:33:de:c6:92:71:95:6f:ec:19:
         ce:d7:79:74:be:d5:cc:6e:65:13:13:79:fe:38:e8:d9:12:df:
         31:8c:22:d0:7e:5e:32:35:27:03:a9:47:51:7e:e0:7e:77:97:
         c7:30:a9:99:58:c6:51:7f:38:c6:ae:6c:77:bd:e5:4f:5d:a7:
         47:ce:44:8f:17:9d:fd:22:81:59:8d:a9:81:77:63:70:da:da:
         cf:4e:15:fb:92:70:42:8d:e3:26:8c:3c:d0:5d:90:14:a8:47:
         0b:73:45:5b:70:40:55:32:df:de:a0:ac:cd:c9:6a:e3:62:9b:
         3b:80:a2:e9:6a:d3:3e:eb:e2:72:07:83:26:a1:b8:39:fa:6a:
         a3:4a:41:f1:64:e0:67:46:4d:37:1e:13:b2:78:78:b9:f0:9d:
         17:c0:7a:ab:ad:c1:c7:10:fd:60:fb:b2:72:40:02:35:aa:eb:
         1c:a7:9f:49:35:86:b0:ac:1f:f4:52:be:1f:25:4c:0a:99:27:
         45:f1:18:1e:ce:52:db:42:b5:7c:51:c6:76:70:0a:87:0c:3f:
         a3:11:3f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 20:24:36 2026 by rpki-client