Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File:                     1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier:          DLVYmTkIDXdHyXvZ9OAwa/6VqnP97rhKalU9z3BVhdw=
Subject key identifier:   E0:27:5E:E4:28:3B:C1:71:E5:C4:B9:48:D8:0C:56:C1:91:39:67:6C
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer:       /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial:       01A13FA6D2DBDEDBB4C920AC930064C59E15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number:          0FEB
Signing time:             Thu 15 Oct 2026 13:00:59 +0000
Manifest this update:     Thu 15 Oct 2026 13:00:59 +0000
Manifest next update:     Fri 16 Oct 2026 13:00:59 +0000
Files and hashes:         1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: M/MovyoV+FPfYO0vz7hYASU7krM5yjQoVMn8nZK3i4g=)
                          2: QZaZGDE-cuakmV83Cz5Lef8Azck.roa (hash: 2PUB2C+ejT//n1dG/GiuAYrRsrfPippeNMItlWaifDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a6:d2:db:de:db:b4:c9:20:ac:93:00:64:c5:9e:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
        Validity
            Not Before: Oct 15 13:00:59 2026 GMT
            Not After : Oct 16 13:00:59 2026 GMT
        Subject: CN=e0275ee4283bc171e5c4b948d80c56c19139676c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:e2:5b:a6:9c:9e:69:d8:57:02:1c:5f:54:
                    1e:63:6b:6b:f2:ef:6b:db:d8:ea:40:5d:32:d4:84:
                    dc:98:68:d4:9b:27:45:94:2c:06:ea:16:d9:69:01:
                    e7:40:00:94:c4:3c:32:ef:d3:1f:e5:c9:3e:56:2f:
                    f8:40:a0:cc:40:ab:d1:f5:47:bb:78:42:31:00:fc:
                    e7:1e:31:ad:f2:0f:8d:61:45:bd:47:54:1a:b2:af:
                    c9:6e:1a:0f:12:ea:e2:cd:f6:3b:0e:0f:b4:28:62:
                    70:3d:f0:93:3f:c2:81:96:40:c4:bd:79:09:c0:e8:
                    7d:f5:12:1b:22:74:56:6b:fd:0e:1e:d3:bd:eb:4c:
                    ca:c3:f4:d7:f8:b0:1c:9c:84:75:a0:b5:cb:09:75:
                    a6:13:f3:01:c9:8d:c2:71:3e:84:e2:21:87:a0:3d:
                    b3:25:60:42:6a:e8:d5:2a:e2:67:af:01:50:3d:89:
                    17:62:1c:71:ac:95:91:eb:3a:4a:b2:b0:6a:c3:c9:
                    7c:31:c1:5d:01:1d:86:93:82:e8:27:c6:f0:18:98:
                    b4:d7:3f:15:d4:8b:82:04:6f:19:c5:ae:73:bd:f8:
                    c3:ee:88:6d:b0:7c:a1:53:ba:f0:06:db:50:c7:2d:
                    c8:ae:17:4f:4c:ce:15:ee:80:37:56:f5:51:c8:bc:
                    47:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:27:5E:E4:28:3B:C1:71:E5:C4:B9:48:D8:0C:56:C1:91:39:67:6C
            X509v3 Authority Key Identifier:
                keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:c0:6b:93:a5:f3:20:fd:1a:00:b1:6e:d2:fc:12:b9:22:dc:
         34:4b:81:26:26:d7:fd:ef:1f:86:2d:c7:0b:df:f2:f1:43:f1:
         bb:bd:9f:87:64:05:18:d5:aa:09:fc:01:46:0c:76:4d:65:bd:
         c5:bd:c9:58:11:d7:00:26:91:ff:73:1d:6d:d1:f9:f6:2d:dd:
         04:6f:75:73:07:1a:65:59:56:fc:af:73:98:21:55:30:c7:a3:
         33:00:8a:77:1a:06:f2:55:12:59:b8:90:cb:b0:ad:30:06:49:
         b2:fb:61:8a:98:c3:9e:31:09:07:b5:1e:60:15:d6:6f:2f:26:
         5d:06:6a:83:50:4a:b1:98:c5:65:33:a6:40:b7:80:62:d1:35:
         72:84:3d:90:8b:f9:62:b2:5f:84:ec:20:47:44:0d:e0:1a:ef:
         1a:96:d4:bb:a4:30:ce:72:bb:74:48:af:62:d1:3c:46:b6:6c:
         98:4f:7a:e2:e2:eb:df:67:be:01:67:c7:6c:df:09:5a:1d:69:
         70:7b:e4:cd:c4:b9:d0:0c:b0:97:8e:cc:e2:a7:e1:e0:dd:aa:
         00:42:b9:35:f7:3b:cf:ad:a1:b1:28:10:29:bb:fc:82:7c:ab:
         8d:f7:ac:d1:59:f1:a7:2f:b8:36:74:23:a8:48:be:e0:50:1f:
         3b:24:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:20:18 2026 by rpki-client