Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
File:                     1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft (raw, json)
Hash identifier:          4EBRX2J47Hr3Ms3AL2tBEx8y6hUkHSOK3V9NtTiU9wc=
Subject key identifier:   06:CB:D8:F4:9B:AD:A3:57:83:B8:C3:18:6E:5B:3D:95:32:92:54:9A
Authority key identifier: F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7
Certificate issuer:       /CN=f879988e0f49971a326f419e5cfacbfddcc993e7
Certificate serial:       01A1841A4E50C7EB58A0A4471FA2B52C1431
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
Manifest number:          1691
Signing time:             Wed 28 Oct 2026 20:01:18 +0000
Manifest this update:     Wed 28 Oct 2026 20:01:18 +0000
Manifest next update:     Thu 29 Oct 2026 20:01:18 +0000
Files and hashes:         1: 1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl (hash: 8KcZjLtCst5BAJQh/8L1VSlqcMjJNZ6A4V0GyS3agTg=)
                          2: 4-2PHy4BbqBG4XIZeUFJyecMDB0.roa (hash: LT7qoUHsyJ1W7OMNJpNL1fgI1yxHMTvsp6/LRnCoi0Q=)
                          3: I-etTiyhzk_oS0jiw4MSDZk_e9Y.roa (hash: wSnumKCGcKJNe5X3ET8w/3ULT8RzVLmJW0letJCd4tQ=)
                          4: UcCqMTHisbto-8lkUT_tLgAeR84.roa (hash: MKKos7zvQxC3AHlxEIyIz2TorbEhj+M5Gg1Z5qYM5Vw=)
                          5: dKrxZh5eXZLlr4ulHUj3rX7iLKw.roa (hash: 3Y0TgUH+fONslolgRyWTVgCSVHlc4/LZlKQTJy+uJA8=)
                          6: rL-iVMHxtGo5kWiOEpOPkt5AYVk.roa (hash: gBSDL3GaTKepMFy7vrD/4/ZtzbB+iloDhAFlQ3Xiouc=)
                          7: zNwZgS-KWr_tdZQlJYw7r-bncj4.roa (hash: bFzYQzvtRgyI5Sf4GLvJJ0QPWEhrGxWF/aPyki12aFQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 20:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:84:1a:4e:50:c7:eb:58:a0:a4:47:1f:a2:b5:2c:14:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879988e0f49971a326f419e5cfacbfddcc993e7
        Validity
            Not Before: Oct 28 20:01:18 2026 GMT
            Not After : Oct 29 20:01:18 2026 GMT
        Subject: CN=06cbd8f49bada35783b8c3186e5b3d953292549a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ec:67:4f:97:24:93:8a:3e:40:14:0d:28:86:
                    9e:83:dd:2f:36:9d:d0:cf:f1:2b:08:33:6b:b2:b1:
                    74:39:54:76:a5:95:c4:da:0d:5d:a4:be:6c:37:ac:
                    f8:f5:78:9b:64:b6:59:66:4c:a1:e0:dd:5b:b9:29:
                    cc:3b:9c:b8:7c:a0:95:39:6c:81:92:b3:12:ad:0f:
                    81:78:33:10:06:e6:d1:09:60:e1:52:86:3f:c2:26:
                    ac:51:76:b3:2a:91:61:bb:5e:69:ec:8c:ce:67:d4:
                    bd:8c:6c:2a:dc:19:b9:86:e2:89:c9:2c:64:b9:bd:
                    6a:7d:59:1f:fb:8c:ac:e2:a9:73:ac:2c:42:60:86:
                    38:53:4b:f1:bd:c7:ac:5b:19:a2:e1:c7:92:d5:ce:
                    60:a8:bf:12:b2:90:97:7b:ba:32:6d:da:35:5a:45:
                    f8:4b:e0:a3:bc:05:d0:85:c3:ff:f8:c4:d6:27:2c:
                    8d:88:0e:0c:7c:42:9d:b3:7c:18:27:98:9e:98:d1:
                    fd:7d:3b:1f:41:ee:a2:c6:72:79:0a:1d:60:aa:c6:
                    f3:ef:57:f6:f1:32:4a:0c:3a:a5:57:f9:f0:df:a1:
                    82:d4:9c:18:48:b9:ba:3e:09:27:5c:04:f2:7f:6e:
                    45:da:81:1d:1c:91:bc:c9:06:63:9f:c6:38:b5:b3:
                    8c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:CB:D8:F4:9B:AD:A3:57:83:B8:C3:18:6E:5B:3D:95:32:92:54:9A
            X509v3 Authority Key Identifier:
                keyid:F8:79:98:8E:0F:49:97:1A:32:6F:41:9E:5C:FA:CB:FD:DC:C9:93:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/af3d81-0047-413c-91f4-0470b4bb30db/1/1-HmYjg9Jlxoyb0GeXPrL_dzJk-c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:c7:61:8f:b6:a4:8c:70:fa:a2:aa:c0:6b:5e:e5:e9:9b:ee:
         54:51:8d:98:d5:f0:48:32:18:40:54:bf:36:ac:ea:59:28:0f:
         9e:d0:94:0a:8c:28:cc:8e:56:9a:d9:0d:c0:32:a5:72:2d:c7:
         07:73:89:f0:62:77:59:14:a3:24:4b:ed:76:1a:62:ac:8c:88:
         8a:3c:89:59:fa:89:56:d8:ed:32:76:3a:9c:52:6c:60:c6:2b:
         a4:a1:3d:5f:fe:fc:5f:d8:6a:57:a5:55:70:88:da:11:b3:42:
         5f:bc:8a:d8:22:04:9a:65:25:40:2c:71:37:15:7f:ad:d8:3d:
         90:5d:a2:d4:a6:da:ed:c6:91:6e:68:a1:e5:48:71:2f:ba:08:
         88:26:ad:c2:37:ac:e0:38:47:56:86:5f:46:b0:d3:81:27:ef:
         2f:c9:43:b2:1d:76:ab:ab:18:5e:ad:6f:d3:4a:07:81:58:ea:
         c0:f7:f8:12:01:af:47:f3:a3:ff:d1:9d:10:27:35:59:e8:fb:
         c5:78:4e:19:3a:3b:a7:fb:29:79:f1:bd:9b:20:f9:75:4c:05:
         a1:6f:12:10:8d:22:cf:e4:d8:94:d1:8e:7b:fe:2f:47:e8:46:
         3a:54:73:15:f4:26:5e:40:61:f6:d4:00:5f:1e:9c:9c:c0:ac:
         0e:6e:8e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 06:02:28 2026 by rpki-client