Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
File:                     sWOSIkDRQLZn9joYNNHaNBAI57E.mft (raw, json)
Hash identifier:          k+jJrNEFo71N7MN+3VJwHxoYVI9VW1T0G0pzFcsHGP4=
Subject key identifier:   73:88:E7:9B:46:D2:C0:4E:77:52:C3:F9:BC:43:16:8E:82:B8:77:13
Authority key identifier: B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1
Certificate issuer:       /CN=b163922240d140b667f63a1834d1da341008e7b1
Certificate serial:       01A1002324EC3F81E9A0B975F667310C686C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
Manifest number:          0211
Signing time:             Sat 03 Oct 2026 05:01:05 +0000
Manifest this update:     Sat 03 Oct 2026 05:01:05 +0000
Manifest next update:     Sun 04 Oct 2026 05:01:05 +0000
Files and hashes:         1: sWOSIkDRQLZn9joYNNHaNBAI57E.crl (hash: IAt5cAWJNWr/IT1/IrpECdh9mdxkKIFgqIqQjv9l+PM=)
                          2: uZTIBpW66ELOgsfpMVny5BNAdjo.asa (hash: RpRnt1dSYCHaXvYLR/eb+aECZD1rw5iDnpi3qizA+5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:23:24:ec:3f:81:e9:a0:b9:75:f6:67:31:0c:68:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b163922240d140b667f63a1834d1da341008e7b1
        Validity
            Not Before: Oct  3 05:01:05 2026 GMT
            Not After : Oct  4 05:01:05 2026 GMT
        Subject: CN=7388e79b46d2c04e7752c3f9bc43168e82b87713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:27:82:51:93:9c:f3:3f:62:f3:88:c1:56:9f:
                    1d:a1:5e:60:7f:88:ef:3d:cf:0e:59:07:bb:95:eb:
                    00:c0:85:79:e9:03:70:c7:f1:0b:22:21:b0:c3:bb:
                    33:80:eb:b0:da:3f:0c:5f:be:4b:33:49:ec:2e:6d:
                    c6:b5:46:3b:7c:37:fc:af:55:24:09:1c:c6:76:e0:
                    c8:ed:e2:1f:57:75:b6:95:c6:f9:c0:44:7a:c7:18:
                    5a:cd:b9:23:5a:2b:95:1f:81:c8:96:26:52:3c:41:
                    6c:af:6a:fc:7f:ad:b2:0b:7a:53:ae:44:fa:de:97:
                    43:19:4f:b3:82:c1:b3:0d:f7:15:a4:f9:d2:58:79:
                    58:e4:5f:27:0c:c9:e3:ba:fb:18:5b:6e:aa:05:6d:
                    95:06:14:64:62:c4:1e:f9:4c:0e:be:22:d2:a4:e4:
                    5d:63:f1:15:5f:8d:c6:82:62:7e:8b:49:69:d5:ac:
                    7b:53:69:7f:90:1f:77:c4:d7:08:73:59:8a:2e:cf:
                    a2:04:85:4c:30:2c:35:b5:5d:d6:3a:9f:b3:60:ca:
                    83:f3:3f:45:71:3f:60:d0:86:4a:71:cc:0f:02:ef:
                    58:21:41:bb:47:25:a5:8c:21:b0:2f:9b:0f:05:4b:
                    48:90:1e:04:81:00:75:a0:aa:49:1d:eb:ea:e1:7a:
                    95:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:88:E7:9B:46:D2:C0:4E:77:52:C3:F9:BC:43:16:8E:82:B8:77:13
            X509v3 Authority Key Identifier:
                keyid:B1:63:92:22:40:D1:40:B6:67:F6:3A:18:34:D1:DA:34:10:08:E7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWOSIkDRQLZn9joYNNHaNBAI57E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0c8052-be08-4333-a0f9-77668009b7d5/1/sWOSIkDRQLZn9joYNNHaNBAI57E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:a3:83:88:39:e1:61:8c:18:1a:4d:a9:e7:55:3d:9d:25:7a:
         0f:25:82:af:60:1e:f7:60:8d:27:5c:e9:49:6a:4b:a2:ca:fe:
         91:24:a4:d4:ff:3d:29:44:df:5c:c9:da:65:e7:a0:53:5c:bb:
         84:61:d0:cb:33:8a:69:5d:8c:9d:26:2d:6f:38:aa:eb:59:06:
         73:f3:1d:83:b3:51:93:c6:3e:a4:6b:f9:64:4c:13:71:ea:4f:
         ce:32:7a:8b:57:53:a6:63:46:91:15:56:6d:17:c6:29:ab:a0:
         14:7f:ba:8f:cf:4c:af:7e:5e:10:e1:af:cb:2f:35:39:38:0d:
         13:7a:3c:8e:c8:f8:ad:a6:bb:01:f5:42:c8:94:57:07:ee:b3:
         88:30:0f:90:ba:d7:3b:a0:bf:aa:0d:64:1d:25:e0:59:3b:19:
         f8:ee:b2:f7:2f:64:dc:2d:33:e7:4a:a7:c8:9f:01:43:ca:08:
         d9:a4:12:64:7b:7a:33:6b:b1:48:22:c6:43:22:ec:41:90:f9:
         85:e1:d7:9d:f2:b5:bf:83:c8:d1:b3:d3:a8:e3:b3:c3:34:3f:
         88:cb:bc:89:31:e1:c1:50:a9:34:b6:2b:fc:0f:4e:86:57:1a:
         66:55:09:16:7d:a9:a3:d9:2a:b2:4a:84:59:e2:94:d3:97:ab:
         4d:92:3f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:05:12 2026 by rpki-client