Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
File:                     9OAY_d_UIlF8MGnnVlhle0DnNgE.mft (raw, json)
Hash identifier:          NeZYurKMpFsk9LdhM2Q51rp+scM/I3M0nMnRjtSjWac=
Subject key identifier:   C6:9E:D2:99:0D:65:42:16:2B:9E:E6:FC:76:B7:87:1E:CD:74:B7:10
Authority key identifier: F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01
Certificate issuer:       /CN=f4e018fddfd422517c3069e75658657b40e73601
Certificate serial:       01A13F022F6F78931D83BD12543C8E03332A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
Manifest number:          1AA8
Signing time:             Thu 15 Oct 2026 10:01:10 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:10 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:10 +0000
Files and hashes:         1: 9OAY_d_UIlF8MGnnVlhle0DnNgE.crl (hash: gjPb0xDI15kg0YDcfF7HrYF8lWYZ14j7W1qrmT6GYMQ=)
                          2: C4r9_4LMNZyXrJrExvRTXCrazjo.roa (hash: I0l1JrLTqSKZ4rSbNS1J06hQR75J/+SJ8by7D4fg+Kw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 10:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:2f:6f:78:93:1d:83:bd:12:54:3c:8e:03:33:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4e018fddfd422517c3069e75658657b40e73601
        Validity
            Not Before: Oct 15 10:01:10 2026 GMT
            Not After : Oct 16 10:01:10 2026 GMT
        Subject: CN=c69ed2990d6542162b9ee6fc76b7871ecd74b710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5f:9c:75:79:bd:7d:51:c1:20:ee:a8:c3:a6:
                    db:c0:32:06:07:9e:d5:0e:3a:f4:22:58:48:33:d1:
                    66:c9:81:0d:50:e2:21:fd:3a:c8:2a:a2:4d:12:8c:
                    90:4c:8e:9d:75:dc:ad:0f:25:15:af:60:74:3b:ca:
                    2e:40:5e:3f:14:e0:af:eb:1d:35:29:5e:2b:dd:f6:
                    54:9d:ff:9e:8f:7d:17:a9:91:f8:e1:8f:fe:3c:c8:
                    97:52:4d:0c:5c:1b:f0:7c:25:71:22:ab:c4:3a:05:
                    d9:e1:2b:0b:b9:7c:3e:34:1c:e0:50:29:7f:35:db:
                    53:6a:f2:68:68:3c:76:2e:41:cc:04:d0:76:5b:aa:
                    c4:03:7e:cf:ab:5d:a4:0d:c6:42:53:63:87:b0:0b:
                    c1:5f:a2:b3:71:ed:61:01:e3:6f:be:74:63:9d:ea:
                    ad:03:51:34:e0:b2:d1:88:14:4e:eb:f2:1d:23:26:
                    cb:d4:12:cf:80:3a:12:f8:5e:45:ea:0d:44:7c:4d:
                    40:27:49:ab:cf:fb:8e:4d:56:4d:8d:47:21:ec:0d:
                    61:5a:05:bc:13:4e:88:0f:0f:10:3f:7d:2b:5c:f8:
                    69:e7:bb:18:4a:d5:11:72:52:52:ff:03:45:5f:16:
                    41:97:57:93:77:ea:0d:26:cb:8b:3d:30:96:24:67:
                    32:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:9E:D2:99:0D:65:42:16:2B:9E:E6:FC:76:B7:87:1E:CD:74:B7:10
            X509v3 Authority Key Identifier:
                keyid:F4:E0:18:FD:DF:D4:22:51:7C:30:69:E7:56:58:65:7B:40:E7:36:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OAY_d_UIlF8MGnnVlhle0DnNgE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ad6f5f-53b5-4e07-94b4-70f94d5ee5fc/1/9OAY_d_UIlF8MGnnVlhle0DnNgE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:d6:2b:32:b6:52:bf:34:9f:fe:c4:04:16:d3:5e:57:c2:82:
         5b:4d:e9:a4:e8:46:81:e3:7e:a9:31:c5:f5:2c:44:d1:41:7d:
         e6:42:09:26:23:68:a4:7c:7f:91:f4:db:54:af:a1:58:d1:c9:
         6b:db:c5:51:35:14:25:1c:f1:85:86:e4:da:02:3d:ab:82:6a:
         49:b0:b2:a6:81:db:80:a3:fb:9f:87:c1:1d:7a:00:e5:c4:fe:
         62:7a:05:ce:81:77:1f:2b:8c:d6:d6:19:f0:fa:01:dc:f2:4b:
         eb:70:0f:a6:05:6c:75:2f:e3:19:a7:f6:51:bf:e0:14:dc:56:
         69:0c:23:10:71:a0:16:20:53:d9:54:d9:a8:01:8d:3e:b1:da:
         78:b6:89:66:de:9b:f4:8a:ac:06:9b:15:6f:8a:3a:63:71:a6:
         ef:09:b5:ff:3b:3c:6f:b9:36:ac:c4:49:12:e3:7e:5a:6e:9e:
         c9:00:f2:30:d9:53:32:d5:1a:ab:c9:0a:6a:39:b8:dc:52:ac:
         44:6e:48:72:f0:72:54:8d:4c:b1:59:76:8b:21:6b:b5:f0:1b:
         74:c9:ae:c4:5f:ec:25:c7:5d:0b:69:11:a6:4c:d1:f0:44:e6:
         92:ce:38:d0:65:0a:52:9e:5a:43:58:3c:e8:6b:dd:a2:aa:8c:
         57:58:7f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:51:22 2026 by rpki-client