Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
File:                     pOuetVR8f18ar8CtoUCAVBlhhyY.mft (raw, json)
Hash identifier:          jL5gZkedx1AAvlFRvG6fcEQsA7SswJHdAdVhpeckzbo=
Subject key identifier:   07:FC:9E:26:CA:63:6C:0B:F8:F4:B0:06:91:2E:B6:5C:F1:21:78:4D
Authority key identifier: A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26
Certificate issuer:       /CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
Certificate serial:       01A084F85E2C8183FDEA76E1F111451DCA8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
Manifest number:          0E36
Signing time:             Wed 09 Sep 2026 07:01:04 +0000
Manifest this update:     Wed 09 Sep 2026 07:01:04 +0000
Manifest next update:     Thu 10 Sep 2026 07:01:04 +0000
Files and hashes:         1: RZZbXwpHPue2NW4m459EoqMZKyE.roa (hash: v17nBO3LbcF/rH9ckA2KnZ23x5seOdWkK+ByqrSeon0=)
                          2: pOuetVR8f18ar8CtoUCAVBlhhyY.crl (hash: MVmR3aShtdjt109t8ph0r6Z/RrpwnDUimCE2O7cLM6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 10 Sep 2026 06:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:84:f8:5e:2c:81:83:fd:ea:76:e1:f1:11:45:1d:ca:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4eb9eb5547c7f5f1aafc0ada140805419618726
        Validity
            Not Before: Sep  9 07:01:04 2026 GMT
            Not After : Sep 10 07:01:04 2026 GMT
        Subject: CN=07fc9e26ca636c0bf8f4b006912eb65cf121784d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d5:fd:a9:91:7f:06:b5:58:b8:0d:41:6a:9a:
                    7a:8e:53:63:05:d2:d2:42:c1:81:c1:8c:b2:0f:da:
                    bd:2e:93:80:25:18:a1:50:1f:ad:a3:bc:d7:d1:ce:
                    a3:6c:ab:d5:ec:e3:ff:bb:b4:e7:77:f6:03:2f:7f:
                    ff:3c:cc:37:15:00:76:ee:ff:02:5b:97:21:af:72:
                    dc:fd:67:30:c3:f8:c3:40:89:cd:66:04:b0:9f:b9:
                    9f:e8:b5:8f:7e:e1:fb:8a:e7:c8:0b:3a:da:bd:c2:
                    1e:55:d5:dc:ea:8d:7c:47:bd:0c:27:05:f3:d0:d7:
                    d2:90:e8:87:58:32:f4:c7:3a:b1:a1:23:a3:4f:51:
                    ef:d8:aa:69:9c:89:4e:74:11:57:dc:ab:51:77:c3:
                    f4:5c:d7:cd:80:b6:e1:ae:0d:42:27:78:63:db:4c:
                    43:33:cc:2b:aa:88:68:3d:e4:bf:8e:48:54:53:1c:
                    15:30:ae:d4:82:f0:74:ff:75:26:d2:68:a6:ef:c4:
                    7f:1a:42:2a:ad:4d:21:f8:fd:ea:84:3a:2c:3b:9d:
                    72:fa:5d:ff:98:d0:92:f7:8e:46:98:07:47:16:11:
                    b4:0a:8b:49:f5:cb:b0:99:de:b7:f5:aa:b0:3b:7c:
                    b5:4e:c4:5c:ca:4b:4f:89:47:22:66:c9:c9:b4:8a:
                    58:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FC:9E:26:CA:63:6C:0B:F8:F4:B0:06:91:2E:B6:5C:F1:21:78:4D
            X509v3 Authority Key Identifier:
                keyid:A4:EB:9E:B5:54:7C:7F:5F:1A:AF:C0:AD:A1:40:80:54:19:61:87:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOuetVR8f18ar8CtoUCAVBlhhyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/4cd72d-d8a5-46ce-8674-0d22232c34a0/1/pOuetVR8f18ar8CtoUCAVBlhhyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:31:88:5a:b4:37:3c:b5:84:e7:8f:bc:b5:95:3a:36:a4:ab:
         f8:a3:de:0d:eb:7e:77:87:6d:69:01:2f:70:e2:b8:58:68:8d:
         e4:a3:35:c0:c7:2c:93:aa:16:0d:1c:1d:9c:bf:e9:a9:b4:21:
         d8:34:3d:de:dc:fd:28:38:0b:c8:83:92:29:82:92:8b:9c:66:
         c0:31:66:30:73:8a:1c:d6:58:6a:93:93:35:bf:57:b1:64:62:
         c3:12:7d:ce:85:dc:ad:b6:36:f1:7d:06:a9:38:4c:f3:72:7d:
         14:e3:d2:3b:15:ad:89:e4:bc:fa:ec:47:25:ac:e7:37:90:5a:
         ec:13:cc:53:3d:3e:ef:95:a8:d0:9c:5c:50:f3:66:e4:c9:11:
         87:2d:08:61:7f:e0:d0:b2:6c:df:c9:94:10:10:95:fc:7f:45:
         40:5b:62:cc:8b:02:09:ea:12:69:df:cd:90:4d:c8:93:52:21:
         19:39:08:5d:7a:a9:00:3f:21:53:40:de:eb:e0:1e:b0:75:c6:
         13:46:8a:3b:b3:1c:7c:ef:3b:25:04:2c:42:55:5a:23:31:a3:
         74:90:6e:d8:a8:64:c7:d2:6c:73:6e:17:45:96:0c:df:fe:12:
         d3:3d:00:a5:3d:84:ca:72:89:64:e9:c3:38:7e:c9:c1:9c:e0:
         51:8f:f5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 08:38:44 2026 by rpki-client