Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
File:                     m-du9KpJjCFSTdftrRbeHT2wAuM.mft (raw, json)
Hash identifier:          +PTfbOZQO0xl21qBmNWBajOi3dZPhvJyJEPID4TrhfE=
Subject key identifier:   E7:BD:1B:6A:0A:D7:59:7F:91:E4:79:FB:D4:DB:10:0C:B2:2B:E4:36
Authority key identifier: 9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3
Certificate issuer:       /CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
Certificate serial:       01A1525247B9DD47FA247721628959DCD344
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
Manifest number:          1AB0
Signing time:             Mon 19 Oct 2026 04:01:26 +0000
Manifest this update:     Mon 19 Oct 2026 04:01:26 +0000
Manifest next update:     Tue 20 Oct 2026 04:01:26 +0000
Files and hashes:         1: m-du9KpJjCFSTdftrRbeHT2wAuM.crl (hash: YRj0o5ed62g4l968g5tk+Im0Rw3teuvUhT74HLKDgYU=)
                          2: uqRQxH9qEjG0hA9B3Ap6knKry0I.roa (hash: aVZsCZDmcN6Rpr0mzKedChfzxWEnLoXai4QxhXhqgNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:52:52:47:b9:dd:47:fa:24:77:21:62:89:59:dc:d3:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9be76ef4aa498c21524dd7edad16de1d3db002e3
        Validity
            Not Before: Oct 19 04:01:26 2026 GMT
            Not After : Oct 20 04:01:26 2026 GMT
        Subject: CN=e7bd1b6a0ad7597f91e479fbd4db100cb22be436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:38:a9:d1:a3:ce:1f:89:7d:a5:cf:95:cd:71:
                    5a:36:80:35:0f:32:e6:37:46:65:a9:b6:7c:2a:85:
                    d3:c9:69:ae:a3:53:d2:26:f1:29:51:84:df:00:33:
                    cc:32:1c:37:2d:de:99:d0:53:19:ab:54:29:c1:e4:
                    ef:d8:9e:d0:fe:ef:96:72:15:27:57:36:2e:9a:55:
                    30:57:d1:21:1a:b5:83:e0:aa:fd:f8:4b:ef:4c:2c:
                    34:23:15:c2:c4:a3:92:37:4e:19:c5:73:2a:fb:87:
                    74:d5:0b:c7:cc:d1:74:35:96:4a:e7:6b:89:d0:67:
                    2d:3f:b1:97:f4:9d:9f:c6:cc:b3:0d:a3:09:cf:94:
                    20:f2:83:a3:6a:73:2c:b1:7f:9d:45:27:f2:52:dc:
                    40:88:f4:49:8e:98:8d:54:1f:dc:42:4b:f6:d2:1a:
                    f1:dc:be:ff:51:82:52:d7:9d:e0:ec:13:7d:50:6b:
                    b6:c7:40:47:0a:dc:80:ba:ca:9b:41:c6:22:7f:e8:
                    e0:68:0d:7d:9d:62:9e:3e:6e:35:18:ea:7b:37:43:
                    6e:65:85:31:0a:49:ad:09:d7:56:f9:78:8c:81:ee:
                    00:49:34:a3:96:2f:3c:ab:ff:d5:ed:b5:e8:b8:a1:
                    bf:87:28:a2:45:a1:ec:f6:d0:f8:cc:f5:49:12:b7:
                    8a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BD:1B:6A:0A:D7:59:7F:91:E4:79:FB:D4:DB:10:0C:B2:2B:E4:36
            X509v3 Authority Key Identifier:
                keyid:9B:E7:6E:F4:AA:49:8C:21:52:4D:D7:ED:AD:16:DE:1D:3D:B0:02:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-du9KpJjCFSTdftrRbeHT2wAuM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eb301d-ab50-4c3e-8c78-9df37109c81d/1/m-du9KpJjCFSTdftrRbeHT2wAuM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:af:99:89:b7:23:ae:cb:81:f7:be:8d:76:3f:b9:16:61:0b:
         86:e8:bf:fc:e0:2a:55:85:c1:4a:5b:6e:ca:77:96:ea:48:94:
         ea:bd:61:b4:a6:55:bd:2f:5e:9b:9e:8d:4b:06:e5:a0:48:6e:
         b5:a4:a3:f4:c3:36:77:03:df:f5:8f:08:6c:b5:d0:b2:35:7d:
         4d:6d:aa:d0:b5:9c:c4:bc:29:c9:cf:cd:07:18:0c:7f:66:67:
         8f:2b:a0:a5:06:d0:24:65:13:c1:6a:0b:f9:f8:4b:2b:75:48:
         d2:83:86:4e:1d:e9:8a:67:2b:70:fe:91:40:4e:95:d9:6c:45:
         17:79:53:c9:b6:c8:29:1a:74:07:51:66:35:20:8a:a1:41:25:
         63:38:7c:be:f7:3b:3b:74:39:31:ec:85:57:45:c0:9c:bb:fa:
         c5:8e:e6:20:af:c1:64:b1:f6:55:da:de:d1:41:35:a9:47:11:
         91:c2:f5:1e:74:15:d6:e9:c3:a6:d2:ef:1e:66:a7:7d:3d:e6:
         71:05:d6:58:89:19:6a:4f:ee:09:81:23:f2:f3:fd:44:62:c7:
         b7:22:1c:c1:3b:72:9e:93:1c:4b:8d:ca:3e:b2:cb:bf:bf:dc:
         96:30:b5:26:bc:c1:fa:48:6a:69:52:44:75:e0:7b:b6:7a:c2:
         38:56:3d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:22:19 2026 by rpki-client