Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
File:                     1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft (raw, json)
Hash identifier:          iKwh2ziXmXqscxQIUINEiCNQq54uNELxCEvvZ/PTa5E=
Subject key identifier:   A0:59:A9:ED:8D:A4:3F:1E:75:C3:8E:DB:B4:01:20:57:A8:84:98:7E
Authority key identifier: FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82
Certificate issuer:       /CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
Certificate serial:       01A13E94A6A9FA0BDDDA4CF7B2B9CCFB317A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
Manifest number:          1A33
Signing time:             Thu 15 Oct 2026 08:01:31 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:31 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:31 +0000
Files and hashes:         1: 1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl (hash: 64LIcoJiOEV68HhBG3ZWN6nUeKqqDuE3f9VMDA4zOSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:a6:a9:fa:0b:dd:da:4c:f7:b2:b9:cc:fb:31:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb0f7ebd25f6af4637822eff48b278b18c706f82
        Validity
            Not Before: Oct 15 08:01:31 2026 GMT
            Not After : Oct 16 08:01:31 2026 GMT
        Subject: CN=a059a9ed8da43f1e75c38edbb4012057a884987e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ef:6f:ed:03:70:af:83:d5:6d:af:8f:02:1c:
                    34:b4:36:38:38:5e:f6:70:9c:d3:62:12:d9:34:b5:
                    52:c6:11:b4:d4:cd:2b:7c:1b:8b:b7:db:f9:25:f0:
                    d7:cd:95:28:52:8d:30:94:d0:ef:9a:cc:75:aa:e9:
                    5b:09:de:3d:18:ac:cc:b0:ee:aa:07:c1:4e:57:89:
                    d0:14:ad:b3:73:9b:3c:21:57:fa:fa:a6:c9:9a:73:
                    61:8c:b5:7c:00:25:da:30:48:d3:c5:0c:7e:71:86:
                    dd:83:4c:87:6f:48:46:47:61:de:72:32:15:ae:30:
                    30:bd:61:66:06:67:23:2f:4b:7f:59:5c:bd:19:4b:
                    0f:2c:ca:fb:56:3d:9c:70:cb:d1:8b:b1:ba:6e:d7:
                    84:23:4c:f1:d0:04:cc:0f:b0:ac:b0:1a:3f:4e:36:
                    95:7c:14:58:22:8e:5c:c8:56:59:c0:78:df:f0:26:
                    a6:ae:dc:03:43:c4:00:83:e2:35:7e:7c:3e:17:bd:
                    59:8a:0a:4c:be:0a:01:59:cf:14:d3:b4:92:fd:53:
                    73:46:a4:ae:2e:15:f7:9c:14:63:72:f6:30:0a:1e:
                    f7:1c:ae:9f:a0:d4:71:ad:d6:2a:c4:02:1f:b3:f6:
                    49:1a:2a:14:7e:0a:f8:3b:61:19:58:8d:01:01:af:
                    ba:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:59:A9:ED:8D:A4:3F:1E:75:C3:8E:DB:B4:01:20:57:A8:84:98:7E
            X509v3 Authority Key Identifier:
                keyid:FB:0F:7E:BD:25:F6:AF:46:37:82:2E:FF:48:B2:78:B1:8C:70:6F:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e20997-a1ee-41de-878c-21805407b90c/1/1-w9-vSX2r0Y3gi7_SLJ4sYxwb4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b2:a6:14:f5:db:23:23:2c:4e:be:ab:8f:ff:b0:a1:4f:12:
         fd:8b:51:da:fb:47:a9:aa:31:7e:0b:6e:68:fd:f7:d7:a2:b2:
         ef:25:ab:a1:84:c6:9e:39:d1:74:93:98:87:c9:d3:5c:48:73:
         2b:c4:55:16:cb:b3:d2:8b:6b:0e:fa:7a:3c:03:76:89:cf:92:
         c5:ce:39:35:8f:c0:19:af:fd:77:7d:e6:b0:e9:a6:cb:22:32:
         9b:d1:8a:12:ff:88:31:3c:ac:23:75:a1:b5:83:af:3f:ef:d4:
         6a:07:d0:85:92:ab:61:c2:58:f7:a6:7a:af:4a:f0:63:c3:c4:
         17:d1:75:88:f9:f6:f9:32:82:53:c3:ba:bc:de:8f:6e:e6:1f:
         cc:73:c6:c9:94:b4:4e:c2:d6:90:fd:40:72:97:08:55:b9:b7:
         1c:d5:1b:9b:b6:fd:96:9e:27:20:53:da:d9:67:2b:10:d6:24:
         64:02:56:6e:c8:ed:2c:1a:a2:f0:94:bf:a4:4b:da:25:21:4c:
         ad:9e:04:81:66:af:6f:1b:36:94:24:ff:ed:1c:45:5f:5f:92:
         65:e5:1b:5a:84:a4:5f:b7:67:6a:9f:56:55:e0:61:c3:35:cf:
         95:10:62:f9:a5:cc:ea:83:41:b1:ee:70:32:56:27:0b:bd:ca:
         e3:e2:a9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:26:22 2026 by rpki-client