Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/I5wyd5VdISnzfZWzOHrwH5QoWro.mft
File:                     I5wyd5VdISnzfZWzOHrwH5QoWro.mft (raw, json)
Hash identifier:          0XZLhMKbSfs/BCRHUYQm5zL68g6g74OWpRdYWQvLwhA=
Subject key identifier:   DF:42:3E:B7:28:61:5B:40:6F:5A:AB:BA:83:66:64:E8:8C:88:BE:6B
Authority key identifier: 23:9C:32:77:95:5D:21:29:F3:7D:95:B3:38:7A:F0:1F:94:28:5A:BA
Certificate issuer:       /CN=239c3277955d2129f37d95b3387af01f94285aba
Certificate serial:       01A155532ABDC9F88CCFAF677E2EB7EBEB95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I5wyd5VdISnzfZWzOHrwH5QoWro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/I5wyd5VdISnzfZWzOHrwH5QoWro.mft
Manifest number:          01B4
Signing time:             Mon 19 Oct 2026 18:01:15 +0000
Manifest this update:     Mon 19 Oct 2026 18:01:15 +0000
Manifest next update:     Tue 20 Oct 2026 18:01:15 +0000
Files and hashes:         1: I5wyd5VdISnzfZWzOHrwH5QoWro.crl (hash: qh+Qx/rM2gH1fRomQaf/6CYhziBKVdgZY7OwA3WcWOg=)
                          2: dawXrsUI5VoXEeeh_RVuGDv4Fz8.roa (hash: jp98Wf7Qp6+Q0/2pZIoZVBb8LFPuRhDFQGbxotaXYXs=)
                          3: j5PdswPRw0r-X0brKQYTKhX2oZ0.roa (hash: mfpp0PAqEAN+9Lp257J9eHWJGEX4y+6pNV/Wx81bBK4=)
                          4: oVC2WjCo5L8WluqUyHGn8Ti5Wnc.roa (hash: wi1CkB7FNq7klnJrL/W9uocGj6fqQ3/gZDNcfh9S8go=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/I5wyd5VdISnzfZWzOHrwH5QoWro.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/I5wyd5VdISnzfZWzOHrwH5QoWro.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I5wyd5VdISnzfZWzOHrwH5QoWro.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 17:30:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:55:53:2a:bd:c9:f8:8c:cf:af:67:7e:2e:b7:eb:eb:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=239c3277955d2129f37d95b3387af01f94285aba
        Validity
            Not Before: Oct 19 18:01:15 2026 GMT
            Not After : Oct 20 18:01:15 2026 GMT
        Subject: CN=df423eb728615b406f5aabba836664e88c88be6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:66:bb:4a:fa:50:71:50:bb:ce:f3:a2:9f:f8:
                    12:d7:08:d5:48:a6:6a:49:64:a4:29:62:cb:03:80:
                    83:40:6e:6a:9b:44:41:c5:f1:7d:72:c4:52:cd:51:
                    fd:8a:e7:08:79:c1:89:c3:6c:85:77:bc:60:5d:47:
                    d2:6d:80:50:3f:11:2d:39:4d:ce:50:d5:50:bf:92:
                    96:7f:10:32:88:ab:e2:99:e4:d9:d5:17:db:a0:4e:
                    25:9d:18:10:5e:46:a8:ce:a4:10:0c:46:cf:e3:64:
                    de:81:bd:00:a2:c7:8e:c6:2c:7b:2b:e4:b7:76:46:
                    79:9c:bc:56:5d:07:f0:65:ff:8b:23:80:7f:1e:84:
                    91:0e:8f:e1:5b:62:06:86:e0:33:28:9f:45:33:ec:
                    53:e3:8b:4f:b4:3f:3a:eb:35:38:34:cb:a3:d4:c6:
                    d4:6b:60:8c:94:e4:19:6a:c6:ae:d7:bf:44:b7:d5:
                    bf:ec:81:20:92:15:04:48:4a:3b:ac:02:df:bc:39:
                    3c:61:24:17:c1:29:25:e7:75:a5:f1:95:e4:ee:06:
                    01:25:b6:ba:c3:4a:f8:84:50:3f:f2:37:07:f8:3a:
                    25:d2:69:64:f5:7e:b7:88:40:4f:cd:e3:26:63:f0:
                    4a:11:12:4f:ab:a6:56:48:09:e9:38:b2:c1:bd:06:
                    7b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:42:3E:B7:28:61:5B:40:6F:5A:AB:BA:83:66:64:E8:8C:88:BE:6B
            X509v3 Authority Key Identifier:
                keyid:23:9C:32:77:95:5D:21:29:F3:7D:95:B3:38:7A:F0:1F:94:28:5A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I5wyd5VdISnzfZWzOHrwH5QoWro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/I5wyd5VdISnzfZWzOHrwH5QoWro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ac7b34-93eb-44f0-8816-c96eb9acbd3b/1/I5wyd5VdISnzfZWzOHrwH5QoWro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:56:27:70:0f:63:df:3d:0b:c5:f6:5f:4b:dd:73:a8:1a:b3:
         54:45:cb:32:ea:ce:fe:ef:3b:8f:ec:05:68:08:91:a5:a9:09:
         ac:d8:a4:40:78:be:f1:45:78:35:fe:b9:47:74:be:e6:87:77:
         27:15:cc:db:8b:07:27:0a:2e:80:a0:f1:54:ee:53:fb:a4:05:
         8c:e5:62:c5:bb:11:5c:26:47:e9:37:fc:3e:da:f3:b5:16:76:
         23:e6:b9:a7:f7:51:e1:ab:1e:f0:c0:fd:d2:c0:5f:d7:02:42:
         7f:99:5e:e7:60:59:57:98:d1:37:5c:21:5e:6f:eb:84:56:16:
         4b:9b:22:1b:2a:dd:9c:68:c5:dd:8f:ac:a3:ad:59:54:9e:d3:
         1f:9e:90:31:28:ca:3d:b9:9d:24:c2:52:5f:54:3e:8e:fe:ac:
         90:4e:68:51:98:e3:16:5a:d6:05:60:81:a2:6f:1e:26:2f:34:
         fa:dc:a5:b8:35:58:24:e3:fd:1e:80:26:53:7b:4d:78:98:8b:
         d5:44:ff:59:31:c3:cd:3b:63:cd:b1:dd:6a:2b:64:8f:84:4c:
         76:d7:eb:89:66:46:d5:d2:a5:a3:f3:d7:3a:0f:ee:19:b7:0c:
         48:68:8e:78:a9:f4:59:e0:50:c4:9f:ad:97:8d:2e:20:90:47:
         d3:6d:3f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 03:03:06 2026 by rpki-client