Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.mft
File:                     fhxn8ySb-H1syWulL_G9wOeJtBk.mft (raw, json)
Hash identifier:          AWFsdkWxWP4FUEcXB60Mq3iR6ElF8peL7jGEAbAlVXQ=
Subject key identifier:   01:C0:EA:95:5C:17:A6:CB:38:1B:DD:3B:09:24:FA:B3:6E:AE:04:61
Authority key identifier: 7E:1C:67:F3:24:9B:F8:7D:6C:C9:6B:A5:2F:F1:BD:C0:E7:89:B4:19
Certificate issuer:       /CN=7e1c67f3249bf87d6cc96ba52ff1bdc0e789b419
Certificate serial:       01A1212F309BC45C2DCD796C9E442C2EA59C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fhxn8ySb-H1syWulL_G9wOeJtBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.mft
Manifest number:          010F
Signing time:             Fri 09 Oct 2026 15:01:43 +0000
Manifest this update:     Fri 09 Oct 2026 15:01:43 +0000
Manifest next update:     Sat 10 Oct 2026 15:01:43 +0000
Files and hashes:         1: fhxn8ySb-H1syWulL_G9wOeJtBk.crl (hash: u/g7FWVOE8dtqkn8iriY0KO7zO7hDAbqtwaOtI6MwFQ=)
                          2: uhJ9E2xHD6VE0XyeXFxt9rFbjbs.roa (hash: ByrmQQLK2SZe1G5CS63vjY0S33+wHwZPNkpO65iKwLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fhxn8ySb-H1syWulL_G9wOeJtBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:21:2f:30:9b:c4:5c:2d:cd:79:6c:9e:44:2c:2e:a5:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e1c67f3249bf87d6cc96ba52ff1bdc0e789b419
        Validity
            Not Before: Oct  9 15:01:43 2026 GMT
            Not After : Oct 10 15:01:43 2026 GMT
        Subject: CN=01c0ea955c17a6cb381bdd3b0924fab36eae0461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:94:94:d2:98:5a:ad:7e:0e:5d:ac:37:4b:d9:
                    42:39:df:e3:02:a3:01:c6:e0:3b:76:18:8e:b7:e5:
                    69:52:b8:f7:7d:5b:f4:f4:e6:f3:1e:cb:fc:b7:89:
                    08:99:89:5b:bc:f1:7a:28:1d:86:9f:e2:31:f0:30:
                    23:ad:91:a5:b9:1a:90:99:39:57:5a:ae:f1:42:1a:
                    5a:14:ea:ad:80:d4:95:45:da:78:ba:55:98:2d:4c:
                    16:83:b9:6a:a8:d8:9d:36:24:74:02:a2:0d:70:bf:
                    26:5c:fd:02:11:47:a0:61:f0:5a:9e:c0:72:c9:1e:
                    f9:f5:ac:76:97:31:31:aa:3a:08:a6:9e:16:14:e3:
                    ef:d6:bd:7b:6a:f3:ba:45:36:39:9c:b6:3e:1a:a5:
                    bc:4a:3a:a2:e3:7c:f4:59:d4:3f:06:2f:81:e8:db:
                    97:d8:2f:48:cd:db:8e:ce:f4:13:a9:f2:34:0a:1b:
                    f0:b6:be:6a:01:2b:ee:20:63:58:26:94:66:eb:16:
                    ea:28:db:cd:6a:e7:96:c3:ae:f4:d8:e4:12:cc:98:
                    08:c1:3f:54:58:22:5a:25:e6:91:cf:fd:51:4b:04:
                    fe:4f:6f:21:b2:96:37:dd:01:1f:da:3a:aa:7a:a2:
                    41:d2:76:e7:27:b3:15:cc:54:b2:d7:57:f4:50:aa:
                    0b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C0:EA:95:5C:17:A6:CB:38:1B:DD:3B:09:24:FA:B3:6E:AE:04:61
            X509v3 Authority Key Identifier:
                keyid:7E:1C:67:F3:24:9B:F8:7D:6C:C9:6B:A5:2F:F1:BD:C0:E7:89:B4:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhxn8ySb-H1syWulL_G9wOeJtBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/fhxn8ySb-H1syWulL_G9wOeJtBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:07:13:a8:31:4b:e4:93:3f:c9:b7:cf:aa:eb:8d:34:59:9a:
         31:c9:8e:ba:8e:51:88:43:21:17:94:57:07:2e:ef:16:1c:bf:
         8f:22:df:67:0e:99:37:34:e7:e4:22:d4:80:af:5e:3d:20:5a:
         d2:6f:9f:ff:e1:41:cb:80:ae:82:b9:60:2a:0d:0a:49:bc:30:
         c1:fc:bd:01:79:66:3f:96:e7:1d:ca:aa:95:f4:dc:b2:6b:1f:
         45:1e:a7:c7:55:87:b7:ca:a5:e4:7b:1d:55:61:86:bc:07:f1:
         91:ea:0c:59:81:d8:3d:b0:d0:30:34:04:15:30:2b:15:64:3e:
         34:0b:e1:98:22:b9:39:4e:89:bf:cd:d8:89:76:d3:18:7a:af:
         bd:22:de:b9:e4:85:04:fa:1f:c8:b3:01:78:99:27:1e:82:1f:
         16:30:16:eb:b1:cd:2e:a5:ac:11:a9:e8:a7:6b:15:de:99:b5:
         a1:20:fe:a3:86:6d:8f:d0:27:52:89:ba:88:21:bd:dd:1b:19:
         19:44:2c:97:54:2d:51:85:07:a6:a9:94:58:ac:d9:e8:9a:b7:
         c4:c4:49:c2:5e:37:ba:88:65:84:67:ec:c7:d4:05:63:f4:c2:
         c9:77:e6:d0:5a:63:47:2f:a8:bf:a2:8e:6f:c3:e4:3e:49:f0:
         90:40:26:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 20:40:13 2026 by rpki-client