Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
File:                     0VoQmMXIU1yXWPEo2KCC33z4UQs.mft (raw, json)
Hash identifier:          SkjQThhYjvuq99HubIG6sFNkAbTn6P4hk85Y0ITb1kM=
Subject key identifier:   90:60:89:A9:40:D0:FB:83:C1:3B:1A:8B:15:8E:B4:F4:44:A7:07:84
Authority key identifier: D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B
Certificate issuer:       /CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
Certificate serial:       01A000CA34DB7AA7736F6C3D8A4AD0581AA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
Manifest number:          0CB9
Signing time:             Fri 14 Aug 2026 15:00:46 +0000
Manifest this update:     Fri 14 Aug 2026 15:00:46 +0000
Manifest next update:     Sat 15 Aug 2026 15:00:46 +0000
Files and hashes:         1: 0VoQmMXIU1yXWPEo2KCC33z4UQs.crl (hash: omhWssVZPACrn3ikIXxfne3Pswt7XQR5XFUhAOITZKk=)
                          2: wivMN35KuEgnCPJ_N1vF1kAwlHQ.roa (hash: TSOrmsI98t/QypJ+zbHvGanluRz5oq6NnUNRBbmcaMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:34:db:7a:a7:73:6f:6c:3d:8a:4a:d0:58:1a:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
        Validity
            Not Before: Aug 14 15:00:46 2026 GMT
            Not After : Aug 15 15:00:46 2026 GMT
        Subject: CN=906089a940d0fb83c13b1a8b158eb4f444a70784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:87:ba:64:2f:aa:0d:29:e7:40:15:d6:1b:4b:
                    46:10:53:45:35:b7:67:8f:6b:10:23:bc:50:3b:47:
                    4b:e0:3c:98:f5:77:a8:e5:83:c8:b4:40:5d:7e:bc:
                    b8:af:61:48:f4:36:31:0e:a3:e1:dc:fb:5e:85:89:
                    48:e2:05:1b:53:0f:a8:64:56:5a:cb:f9:50:65:b5:
                    c3:2b:62:62:cf:91:3c:3b:44:a9:d2:e0:45:06:8a:
                    67:2a:0e:5d:f7:a7:27:64:fb:31:9d:93:d6:4e:eb:
                    7d:b2:1c:ba:98:ae:9d:c4:e7:67:cf:97:4e:b9:79:
                    8d:19:d3:69:bf:78:a3:50:1a:60:8a:d4:1a:68:bc:
                    ce:8c:30:db:a2:e6:1b:63:3f:9b:9f:77:58:b8:49:
                    02:af:eb:ba:c4:4d:a4:4a:b9:00:11:9f:07:f3:e5:
                    2f:7a:34:77:65:c5:f0:ce:68:ca:13:21:44:40:a1:
                    3a:a4:ea:a8:bb:07:86:52:91:6a:83:e6:00:95:81:
                    69:a3:7f:bf:e3:8e:88:bd:60:99:d7:84:75:34:9d:
                    db:70:8e:2f:e4:bf:dc:eb:75:d6:c0:7b:fd:3e:b5:
                    0a:4b:4a:63:f7:7a:1a:98:d3:5a:23:5b:ef:0c:58:
                    43:53:6a:52:ab:74:35:d4:65:e1:7b:71:a3:4c:c8:
                    d1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:60:89:A9:40:D0:FB:83:C1:3B:1A:8B:15:8E:B4:F4:44:A7:07:84
            X509v3 Authority Key Identifier:
                keyid:D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:fb:cc:23:b0:ab:43:d1:dc:f0:4a:fb:c4:f5:6d:34:e7:4d:
         17:62:aa:13:d4:5b:70:8f:b4:7f:cc:c2:86:ac:ff:de:74:48:
         ab:6f:fe:fb:b9:e1:dd:92:e0:59:c1:4c:38:9d:3b:67:6b:fc:
         c4:e6:d8:00:e2:d8:1b:b2:f9:0e:e1:dc:b2:52:bf:9c:cf:85:
         87:29:16:28:cd:30:a3:9f:bd:c9:6d:5b:0b:5f:24:f8:84:9c:
         a2:09:43:ad:ac:19:52:17:85:9c:65:ad:fc:7e:1f:b3:2c:c8:
         71:e1:39:f8:17:67:49:17:57:eb:58:3c:86:14:bc:0b:68:17:
         b9:9d:6f:b5:2a:5a:93:b2:92:bf:0b:25:80:f1:19:f4:36:e9:
         9e:b7:1d:c9:d9:fa:61:5b:ad:df:70:db:9b:21:2f:21:42:1a:
         e2:23:f1:25:f0:3e:28:df:8c:b3:83:de:25:8f:90:a7:11:23:
         48:d7:70:ce:55:0b:d6:34:0f:ee:29:11:8b:0b:f3:26:9e:dc:
         3d:5f:27:b3:97:c9:da:e7:69:a8:ea:15:4d:78:be:85:67:b0:
         97:61:1d:a9:4b:19:cd:20:0b:53:8d:4e:f5:2f:cc:d0:6d:22:
         64:24:84:40:c1:01:a0:50:50:b6:40:a7:8e:c1:4b:d4:38:6b:
         54:17:d1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:27:07 2026 by rpki-client