Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
File:                     cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft (raw, json)
Hash identifier:          nT9xvt6YhZjJAHNoVhlfejTPWcore6+qsSwctv91D4k=
Subject key identifier:   C1:A1:B9:6E:99:94:72:43:F7:FC:4D:F8:83:22:52:6A:B6:9F:2A:3B
Authority key identifier: 70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2
Certificate issuer:       /CN=703c48ed46cb79490e1662db01c31d02d02effe2
Certificate serial:       01A0FF7ECD584F522D5550692C2D118BF094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
Manifest number:          15C8
Signing time:             Sat 03 Oct 2026 02:01:35 +0000
Manifest this update:     Sat 03 Oct 2026 02:01:35 +0000
Manifest next update:     Sun 04 Oct 2026 02:01:35 +0000
Files and hashes:         1: cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl (hash: rTiclRe02oPoZCaeFK1ugetGxKpurBK8ENVnBxns9tQ=)
                          2: yUw1rcOt6TgtCelm2VNWDvkzOK4.roa (hash: 5OTxcGZtOq1eyipgogSlqCsPUOaG4WknyJnVBJaz5Nc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ff:7e:cd:58:4f:52:2d:55:50:69:2c:2d:11:8b:f0:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=703c48ed46cb79490e1662db01c31d02d02effe2
        Validity
            Not Before: Oct  3 02:01:35 2026 GMT
            Not After : Oct  4 02:01:35 2026 GMT
        Subject: CN=c1a1b96e99947243f7fc4df88322526ab69f2a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:bb:d3:c5:1d:9a:db:78:b2:39:98:31:c7:
                    93:bf:8a:16:7a:36:9a:b9:ff:fd:de:18:e3:4e:38:
                    2c:95:b8:77:d2:cb:2f:31:d0:7a:7d:b2:ce:c2:f2:
                    51:61:3f:41:5a:e6:24:8f:52:ab:51:1f:dd:89:1e:
                    18:dd:d6:e7:ec:0a:13:47:78:9b:02:e0:62:06:b8:
                    a5:8b:52:d0:59:56:e2:ae:08:8d:7e:d1:a0:8f:08:
                    bb:b4:02:83:25:28:0d:c9:11:22:c3:04:59:e5:17:
                    59:e8:70:a7:64:ff:59:c5:9d:db:3a:b9:11:b7:48:
                    aa:37:03:88:63:9f:41:5d:d9:7c:9c:ff:dc:08:80:
                    e2:5e:90:98:ff:1a:3f:af:ba:80:23:71:a6:c7:11:
                    a6:56:1e:b2:c4:76:18:51:9d:e4:df:7d:e2:b5:39:
                    2f:cc:9d:7f:f4:37:1e:84:86:c9:a0:03:05:f5:b9:
                    10:07:ef:a0:6b:80:3f:85:9b:da:65:73:b1:9b:05:
                    4b:b3:d9:c8:0f:08:7d:e3:4f:80:f6:57:94:b7:cf:
                    dd:c1:8e:d1:79:34:9d:3f:7b:16:19:cd:a7:f6:4d:
                    d6:a9:3d:c5:e2:11:2d:ab:5f:fc:a6:90:d6:9a:2e:
                    4d:5a:1a:d8:36:fd:64:86:18:0d:1c:7b:11:04:d7:
                    de:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A1:B9:6E:99:94:72:43:F7:FC:4D:F8:83:22:52:6A:B6:9F:2A:3B
            X509v3 Authority Key Identifier:
                keyid:70:3C:48:ED:46:CB:79:49:0E:16:62:DB:01:C3:1D:02:D0:2E:FF:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDxI7UbLeUkOFmLbAcMdAtAu_-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/da1c43-1916-46ae-8491-35883af9a323/1/cDxI7UbLeUkOFmLbAcMdAtAu_-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:81:fb:7d:40:93:61:4f:10:87:56:a0:5d:89:a0:4b:6f:b8:
         27:ec:f3:ba:1d:bc:22:73:32:d4:9d:ba:37:d6:82:ce:ef:35:
         13:4b:5f:48:be:d3:00:7a:c5:19:64:6f:bf:73:72:9f:26:23:
         75:07:e8:04:29:87:f7:f8:3c:95:0b:06:6a:e1:3c:84:3d:36:
         93:c1:67:2e:a7:ee:b0:93:80:57:a2:bf:18:36:04:3a:e7:2d:
         68:94:b4:b9:2f:0f:9a:48:16:3c:8f:5e:11:b3:1c:3f:ac:40:
         72:0b:01:a5:d2:d1:63:cd:99:05:25:5b:48:73:b1:ee:8c:b1:
         cf:92:6e:4e:13:c9:85:0c:32:34:94:69:08:aa:7a:bb:fe:7b:
         ec:fc:11:02:d2:94:fe:63:86:a6:a9:a8:63:cb:2c:b1:7f:00:
         1a:64:63:e5:55:a0:51:af:a2:1f:bb:ed:82:70:a2:e6:b4:86:
         fc:26:80:70:07:4e:27:97:52:e0:dc:03:9d:36:31:43:85:72:
         aa:58:c7:4f:d4:3f:64:01:e9:52:d4:5f:37:e2:49:33:7b:b9:
         53:25:b0:13:b0:0e:1c:4c:c0:1f:8e:a2:39:eb:a1:43:c6:35:
         d6:e3:0e:c3:c4:91:d8:4d:8f:5e:ca:5c:2e:78:f5:50:af:14:
         61:bf:5e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:26:22 2026 by rpki-client