Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
File:                     pOcgX11BJXpruV-QDuwKESPnUWQ.mft (raw, json)
Hash identifier:          W29v5IBYoSgVTGt0B3IJ7BilXxOE7s+d14RsJr9VmVA=
Subject key identifier:   2D:78:2A:BE:2B:6E:54:B3:E3:27:85:A1:93:B4:54:06:12:AB:34:BA
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Certificate issuer:       /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial:       01A08E31F9146C902DB6A7C97076FF653573
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
Manifest number:          1A65
Signing time:             Fri 11 Sep 2026 02:00:34 +0000
Manifest this update:     Fri 11 Sep 2026 02:00:34 +0000
Manifest next update:     Sat 12 Sep 2026 02:00:34 +0000
Files and hashes:         1: C6PWZ8_5DZEQJ-WdAPLUUo8r5zk.roa (hash: 2616q49H8Nc+KWVaYeBfxtlq1SYHaISQ/1DfyDg7sPY=)
                          2: EyR92aUa1YmyikBuKCPnhyQ6dQc.roa (hash: 7q/CmNDf+Nlfn++5VpeQfpPGbf0jec81JQlzO3KTrAc=)
                          3: OhtO9gQuXsBPS-Q3O3FN8E4x348.roa (hash: o+Nr9wOEwTpH2Y6JMdDgtincCGDhZv31TNiZL0Hk3Bs=)
                          4: dSJlaCjFuYDBOJIJw5vLziFG1uU.roa (hash: nej4liEik7v+gIS3TpTB1V+1cfOzTtgee4Q4bmAbVjg=)
                          5: jL7QdWjDXB9JW6f9-Q9ZstSxp6U.roa (hash: LOg/Dt0W3pYHYeSmEl6aami7s1ai7PjIohxmCU72EI4=)
                          6: pOcgX11BJXpruV-QDuwKESPnUWQ.crl (hash: P4bFQ7imm/Cn5YXVDkwcu0sr2nLv0ZDDwDDJOuECme4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 23:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:31:f9:14:6c:90:2d:b6:a7:c9:70:76:ff:65:35:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
        Validity
            Not Before: Sep 11 02:00:34 2026 GMT
            Not After : Sep 12 02:00:34 2026 GMT
        Subject: CN=2d782abe2b6e54b3e32785a193b4540612ab34ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e5:4d:95:a4:96:79:b7:98:9b:8d:08:4c:44:
                    82:d8:22:e9:f2:89:32:28:e2:b9:47:71:00:03:a6:
                    ff:88:c2:71:32:d8:e3:ab:93:66:18:90:1a:d1:5a:
                    5d:1c:8d:45:52:ff:2f:b3:14:e0:69:1f:27:8b:5a:
                    4e:a8:f2:8e:a5:80:0a:9b:2a:e7:10:cc:85:27:f9:
                    c7:93:25:58:5d:d1:4d:94:5d:54:aa:1a:b2:a8:a5:
                    01:16:4f:85:e9:18:9c:64:26:1d:88:c5:ef:74:0c:
                    39:a7:ec:d4:63:3e:34:f9:db:be:c4:63:20:ec:4d:
                    ca:f1:fb:0b:cf:fb:2f:cc:50:1b:01:d3:3d:6b:b4:
                    a0:d8:bc:4d:d1:8c:20:96:d8:88:3d:5c:11:45:75:
                    69:0e:22:4f:42:d9:3a:3e:d1:fd:a4:d3:70:ac:c5:
                    7f:b8:31:87:61:42:d0:cd:29:01:94:19:df:95:c1:
                    ea:87:97:f1:2a:87:e4:f9:32:ab:97:1f:ae:64:10:
                    68:b0:9c:ce:56:1d:36:68:b3:4c:6c:52:06:53:a9:
                    12:c1:72:7d:b3:ba:1e:3b:01:ac:42:9d:32:8f:fb:
                    90:7e:cd:89:c9:86:83:05:63:69:60:62:cb:4c:dd:
                    31:9d:73:3d:30:9e:d8:c3:37:4b:4a:c4:c9:e2:18:
                    77:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:78:2A:BE:2B:6E:54:B3:E3:27:85:A1:93:B4:54:06:12:AB:34:BA
            X509v3 Authority Key Identifier:
                keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:18:9f:27:8d:7f:ff:b1:0f:a2:a8:b7:68:34:20:04:55:2a:
         af:6b:9e:90:01:f0:90:3d:a0:7f:2e:56:57:ce:15:9f:b9:07:
         00:da:a7:9e:3e:77:1f:bd:53:c7:7a:a9:3e:9b:ad:24:5f:b6:
         d7:f0:64:e5:a8:fd:66:36:22:66:56:35:bb:ac:5c:c9:5b:98:
         1a:17:4c:78:af:d6:91:fb:92:cb:4b:f2:1f:43:45:b1:23:d8:
         43:3c:43:3c:66:53:c0:14:3f:66:0e:3c:ae:b7:56:fa:d7:e2:
         3a:0c:f5:a7:84:f1:7e:0d:aa:0b:40:ec:85:c8:42:6a:cc:a6:
         7d:dd:a0:c6:a8:08:e9:62:6f:b3:55:3f:bb:c1:2c:83:e3:78:
         9a:db:9a:73:ae:e5:5d:54:62:6f:35:d1:ba:e2:4c:94:e7:0e:
         3c:c2:91:37:a3:a4:b7:cb:a1:8d:c3:eb:01:4a:28:30:e5:c3:
         b3:f2:1c:91:bd:b1:ac:12:13:f8:30:ae:a4:a4:35:40:e9:27:
         5f:e6:ba:6f:b1:85:74:a6:be:f5:a3:1d:6b:dd:e9:91:2f:21:
         3b:24:79:ff:d1:9c:a9:ba:51:d4:ee:28:a6:64:68:1e:97:be:
         a8:88:d1:b4:29:a8:10:d3:7b:12:ec:bc:83:cf:64:c8:58:81:
         5e:42:71:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:38:41 2026 by rpki-client