Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File:                     1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier:          daIKpBHWsbYKUIcB/KOs7lU5c1GW2UnlHu7ZndYefaY=
Subject key identifier:   AB:29:0D:17:91:BF:C7:10:1F:11:C2:94:33:F4:FD:47:D6:A4:11:36
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer:       /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial:       01A14ACF6D2038D193D4BEA0B794E42B3DE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number:          1891
Signing time:             Sat 17 Oct 2026 17:01:10 +0000
Manifest this update:     Sat 17 Oct 2026 17:01:10 +0000
Manifest next update:     Sun 18 Oct 2026 17:01:10 +0000
Files and hashes:         1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: Xf1a3OMnh9SdSicRMenZRyzlJooKQE2Z6RlA2Xuu7os=)
                          2: q3vaJOTC8w8YJydcJlzdNu2t6t0.roa (hash: 6HoX9dCuUvOi7bV1+OJY+cnUcJyW0sCh4AS88KCyve8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4a:cf:6d:20:38:d1:93:d4:be:a0:b7:94:e4:2b:3d:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
        Validity
            Not Before: Oct 17 17:01:10 2026 GMT
            Not After : Oct 18 17:01:10 2026 GMT
        Subject: CN=ab290d1791bfc7101f11c29433f4fd47d6a41136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:49:05:1e:9b:fd:62:73:71:99:2e:9f:2f:
                    de:3c:7d:24:c3:0b:8a:ed:26:0b:54:18:5a:62:b1:
                    26:b4:9f:f0:9f:ff:89:5c:45:fb:3e:fd:9d:05:0a:
                    df:75:a0:dd:81:ce:1a:3f:63:02:49:05:cd:77:46:
                    80:f1:29:77:ab:ce:0c:2d:f9:08:34:1a:ea:50:e6:
                    60:56:a1:6f:c0:79:5c:e6:df:58:af:03:45:99:eb:
                    2b:95:e5:d0:04:64:0d:3b:b9:48:d5:5e:c7:6b:80:
                    82:82:46:d0:5c:3a:8f:66:0c:5a:e1:a2:d3:08:ae:
                    a7:1b:c4:5f:64:f7:b6:14:eb:72:f1:58:dd:d2:50:
                    b0:00:b7:c3:51:7b:37:58:11:db:22:d9:1d:df:88:
                    6c:2d:a5:66:f0:4d:ea:7a:cf:59:93:6a:5a:8d:4a:
                    8c:90:99:58:b4:2d:4c:a5:a2:8d:8a:09:c3:ae:63:
                    d7:e3:7d:b2:a3:12:87:bc:59:c7:39:3c:f1:cd:43:
                    b7:f1:27:af:b6:f1:ac:f4:8e:09:cf:7a:af:f3:1a:
                    b0:f6:00:a1:e9:79:11:b3:46:cb:95:63:a5:22:dc:
                    1a:a9:7a:f1:f4:90:f5:41:dd:bc:47:2e:a3:98:b0:
                    73:8c:06:5b:ef:11:46:7d:71:b2:cd:55:28:0e:04:
                    cc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:29:0D:17:91:BF:C7:10:1F:11:C2:94:33:F4:FD:47:D6:A4:11:36
            X509v3 Authority Key Identifier:
                keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:f5:4b:00:13:b5:96:92:18:15:14:b2:fb:6a:b4:a2:37:19:
         8d:ab:d9:65:39:e7:93:20:f9:50:03:bd:ec:d0:b1:5f:3c:1a:
         44:98:b9:1f:32:0d:9f:dd:5c:06:a7:4c:88:63:88:0d:c5:b1:
         c9:4d:70:84:20:4f:e4:a6:86:eb:6d:b8:f8:93:f4:24:bc:54:
         83:e2:07:0c:94:42:08:79:e8:75:30:76:4d:e6:4e:79:46:94:
         92:47:1b:60:27:87:f5:73:74:49:89:4c:9d:fa:cd:26:c1:6c:
         8f:a3:29:b3:16:de:09:17:b3:ce:65:5e:d4:49:75:38:61:17:
         de:2d:b3:4b:13:83:62:f8:8d:42:f9:ad:e0:c2:d9:8c:af:a5:
         ba:d9:9e:cc:49:67:78:81:ba:ac:41:69:da:00:9b:4d:58:ff:
         28:80:9b:70:32:27:bc:fe:7d:1d:a1:49:d4:72:85:26:5d:18:
         a6:65:1e:50:a4:dc:33:23:19:21:8a:04:62:3d:8b:67:2a:17:
         2a:b6:d9:23:2a:d2:19:39:42:e7:63:ad:8a:b8:8d:ac:10:36:
         94:6c:c1:42:8f:a1:a0:78:09:88:d7:2b:fc:33:15:11:f1:fe:
         de:0e:f9:47:27:e5:d9:16:33:40:f5:71:19:0c:9d:80:b6:9c:
         3f:68:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 02:56:34 2026 by rpki-client