Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
File:                     mRLZRawqSfO02iIhwnuCmq_MsvI.mft (raw, json)
Hash identifier:          JAwAhsUTWJGnYHx5aRKMO5Iy6OnuyGvPioSvy1YMOYg=
Subject key identifier:   8D:99:9A:C7:B5:FC:E4:D6:46:D2:D9:78:FF:67:C6:62:FD:91:18:36
Authority key identifier: 99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2
Certificate issuer:       /CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
Certificate serial:       01A149181351479FF86D0B3A9ACEFFF25F37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
Manifest number:          18C6
Signing time:             Sat 17 Oct 2026 09:01:16 +0000
Manifest this update:     Sat 17 Oct 2026 09:01:16 +0000
Manifest next update:     Sun 18 Oct 2026 09:01:16 +0000
Files and hashes:         1: K3IkaDvOsxRDnW5ivwAMwt2TUdw.roa (hash: 4pub90rA78k1OuNqh4u/EQwhdsIyW78nZyVBnumMV8E=)
                          2: mRLZRawqSfO02iIhwnuCmq_MsvI.crl (hash: Ky+AXFUvbwSxfrJ/V8p/KqNBIaKwwLQLUwBWpKiytXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 09:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:49:18:13:51:47:9f:f8:6d:0b:3a:9a:ce:ff:f2:5f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9912d945ac2a49f3b4da2221c27b829aafccb2f2
        Validity
            Not Before: Oct 17 09:01:16 2026 GMT
            Not After : Oct 18 09:01:16 2026 GMT
        Subject: CN=8d999ac7b5fce4d646d2d978ff67c662fd911836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:07:5c:2c:4e:3d:88:a2:5f:a6:02:e6:c8:dd:
                    bc:49:60:cc:ea:5d:bf:34:20:5d:74:ca:b5:6c:2f:
                    6c:94:64:41:7f:17:a8:bc:50:97:13:7e:c3:56:4b:
                    28:73:5e:e2:8c:ac:81:cc:63:1b:63:2b:7d:82:1c:
                    58:26:75:4b:38:53:28:60:83:12:d4:03:ee:b8:f6:
                    9e:e3:01:a7:8c:4b:f4:c8:11:1a:12:40:a5:73:70:
                    4c:d9:30:3f:74:bb:09:01:3f:2b:08:e9:7b:eb:8a:
                    89:f3:f8:99:f2:82:b2:62:82:b5:d7:a7:f4:60:51:
                    dc:d7:1e:b3:e5:6e:8e:09:4d:65:75:13:a5:ed:c2:
                    f6:bf:03:ce:dd:35:2c:d5:39:71:f8:9b:ac:79:a9:
                    63:9a:28:fd:f5:5a:59:5a:be:ec:41:db:fa:cf:87:
                    65:66:cb:16:b5:c1:1a:98:dd:08:43:26:7b:f5:3c:
                    38:1e:96:d2:b1:ea:5f:97:01:53:2c:be:18:56:3d:
                    0e:87:84:e3:96:bb:5f:84:a4:18:a4:1a:d9:47:8e:
                    4d:04:53:9a:50:eb:4d:22:11:58:5b:5c:64:3d:b2:
                    83:28:7e:2e:fc:27:a9:d2:a7:fb:91:56:20:ae:04:
                    47:a0:3f:16:2b:8a:93:7c:83:20:9e:ee:05:5a:cb:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:99:9A:C7:B5:FC:E4:D6:46:D2:D9:78:FF:67:C6:62:FD:91:18:36
            X509v3 Authority Key Identifier:
                keyid:99:12:D9:45:AC:2A:49:F3:B4:DA:22:21:C2:7B:82:9A:AF:CC:B2:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRLZRawqSfO02iIhwnuCmq_MsvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/79ab76-9bf9-47cd-b544-5ee09fead561/1/mRLZRawqSfO02iIhwnuCmq_MsvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b4:32:92:bb:5e:cf:b9:37:0f:69:b3:a9:4e:32:1d:a9:ab:
         a8:f2:17:24:d1:b3:85:2f:09:92:8c:f0:33:d6:61:fa:bf:d6:
         7d:b3:36:2f:bd:e2:41:a3:45:60:ff:70:49:a0:13:2a:8a:a2:
         2c:ab:9e:18:64:23:fe:3c:c4:c3:4d:92:fc:85:dd:c4:b6:8d:
         f1:63:cb:b0:33:04:a8:48:cc:5a:62:3d:0e:0c:de:5b:85:a7:
         45:70:fa:5f:ab:d6:ab:29:b8:3a:59:d5:92:6a:70:48:12:d4:
         d7:3e:41:69:be:84:80:b1:8a:67:8b:2f:01:bd:6f:33:96:76:
         38:85:9b:69:f4:68:6c:5b:5d:1a:d5:d8:7b:86:b6:56:94:29:
         25:10:b4:6e:d7:02:45:91:5c:67:c9:d4:67:17:de:c3:cc:45:
         90:3c:13:5a:6b:9d:1b:f4:2d:2d:f4:c3:00:bb:90:a5:2a:bd:
         54:9d:64:90:7e:93:94:da:a7:bf:a8:32:a1:73:5d:31:4d:64:
         6e:f6:8b:21:cb:6c:50:19:48:1b:37:a7:da:a0:00:08:9b:7a:
         a8:ea:5c:38:0f:03:d5:80:46:40:c4:39:cd:a8:88:71:49:b2:
         c3:ac:9a:64:3b:90:a5:46:8f:f9:39:89:e3:23:14:71:b3:d1:
         91:b5:12:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:27:08 2026 by rpki-client