Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File:                     1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier:          a91AiDaK1FOztNdfhI55gDzDxUetjqIE6XeWmqY/hf4=
Subject key identifier:   F8:B2:E7:4C:C9:AF:5F:BC:69:11:C5:4C:55:10:3E:EB:13:5C:EC:79
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer:       /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial:       01A13FA77CFAE8686980458443463F176554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number:          072B
Signing time:             Thu 15 Oct 2026 13:01:43 +0000
Manifest this update:     Thu 15 Oct 2026 13:01:43 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:43 +0000
Files and hashes:         1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: eWzX+bLP6X4J6uPT2kssrMFdkLEqoeuvhJqPDprvxIg=)
                          2: wELXb2upKDUk9ug1VUWo0G60EVg.roa (hash: tEEqGfojVYh3aK4OosjlDUvbLIy7wKvl+V1lWIlr7hk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 13:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:7c:fa:e8:68:69:80:45:84:43:46:3f:17:65:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
        Validity
            Not Before: Oct 15 13:01:43 2026 GMT
            Not After : Oct 16 13:01:43 2026 GMT
        Subject: CN=f8b2e74cc9af5fbc6911c54c55103eeb135cec79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b2:31:ac:50:7d:3e:c9:fe:70:88:49:94:e4:
                    21:37:70:d0:0a:f4:8c:bc:e7:b3:f5:47:80:e8:33:
                    25:76:ad:9c:a7:c7:38:3c:71:3f:7e:34:f8:f1:8e:
                    1a:36:ac:28:b5:eb:22:98:d3:c0:d1:e5:36:dd:1c:
                    f0:8e:75:db:cd:34:10:14:1a:d9:e9:ee:3b:e3:82:
                    c6:91:d1:5b:8b:f7:e1:26:ad:c6:25:09:db:8e:1d:
                    fe:7d:1c:4e:b9:48:23:3a:95:70:92:aa:0c:c6:d0:
                    3d:e2:92:8b:20:19:18:66:0f:e9:6d:be:b8:7a:f6:
                    86:2f:6c:b1:02:09:17:28:5d:a6:e4:68:60:03:ec:
                    9a:1f:a1:f8:0f:d2:21:a2:97:2b:d3:72:98:47:d3:
                    9b:29:46:28:a5:6b:ae:89:d0:1f:11:65:cf:36:09:
                    56:9f:ed:93:ce:e9:67:45:e9:39:07:f7:1e:43:47:
                    2a:4c:14:93:4d:00:9c:ef:4e:e6:cc:7e:b0:47:7a:
                    9b:0e:d5:67:1d:1f:1b:96:39:9e:fd:42:b1:09:70:
                    0d:23:c6:33:51:40:7a:4f:d0:91:01:00:bf:e5:f4:
                    73:51:aa:93:32:4e:25:13:a1:47:e9:2d:6d:ba:17:
                    5f:9a:01:2d:a5:e2:27:62:d0:58:61:29:d2:f3:aa:
                    c6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B2:E7:4C:C9:AF:5F:BC:69:11:C5:4C:55:10:3E:EB:13:5C:EC:79
            X509v3 Authority Key Identifier:
                keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:a9:56:1f:18:5f:bd:d8:34:a0:5f:e5:c1:b0:3f:ff:e1:e5:
         e6:89:1e:2a:62:e0:e7:24:03:2c:29:38:42:70:e8:d9:29:8a:
         53:90:3c:3a:59:ff:1e:f5:af:19:dd:16:0a:a3:26:74:6b:2d:
         6f:6d:51:d4:a2:0f:28:d9:ea:96:9b:9e:a8:02:de:9d:94:e2:
         6f:25:01:7c:25:0c:72:be:cc:fe:99:e9:0e:73:f4:25:7a:e0:
         e1:cb:9a:87:64:34:e0:f4:f0:36:13:b1:1d:df:89:c1:c6:dd:
         51:70:ea:48:0e:b9:2b:d1:78:1f:a9:d8:7d:b3:63:19:91:74:
         e6:dd:a0:06:bb:b1:c4:be:e9:a6:7c:ce:81:d1:8a:c2:48:81:
         37:7a:20:6f:19:45:f4:e1:43:bc:82:5f:6e:f9:91:b3:43:aa:
         14:bd:78:d8:9b:96:61:36:08:df:cd:32:8a:44:97:17:10:fc:
         26:df:0b:30:1e:ea:6a:3a:33:ec:d4:69:a9:d7:f7:b9:09:46:
         60:e3:da:9e:89:fc:74:c3:c7:d4:f2:be:1d:3e:09:f5:c9:83:
         9f:86:e4:58:58:26:bb:fb:79:d1:82:27:40:bb:7d:a1:2c:52:
         f0:72:f7:45:95:ae:d4:a5:59:66:d4:45:ce:56:85:a9:cb:a3:
         62:43:89:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:06:31 2026 by rpki-client