Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
File:                     56lS7y1xM0iHgHhFONttuGLsBAg.mft (raw, json)
Hash identifier:          oZILr8LC1xIkjxwxe5beq5WnCUfKeem0W98q622XyA0=
Subject key identifier:   BF:16:F7:E2:0A:EB:EE:9F:D6:71:66:12:3C:72:D4:22:94:63:8B:1C
Authority key identifier: E7:A9:52:EF:2D:71:33:48:87:80:78:45:38:DB:6D:B8:62:EC:04:08
Certificate issuer:       /CN=e7a952ef2d7133488780784538db6db862ec0408
Certificate serial:       01A16C7FBC177D4BF08812C6F901C9CA4EB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
Manifest number:          0136
Signing time:             Sat 24 Oct 2026 06:01:12 +0000
Manifest this update:     Sat 24 Oct 2026 06:01:12 +0000
Manifest next update:     Sun 25 Oct 2026 06:01:12 +0000
Files and hashes:         1: 56lS7y1xM0iHgHhFONttuGLsBAg.crl (hash: 2Q54sm9LzhuVh+DTLHBEav2wkST8vsMW6O3QB+y3PT8=)
                          2: f1R_KVw6pDr-4luASuZxDgTRs54.roa (hash: pyivi44WDU8Xyy/kj2UqLPdU3p7h7jqHwHgFp3gleyc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 04:42:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6c:7f:bc:17:7d:4b:f0:88:12:c6:f9:01:c9:ca:4e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a952ef2d7133488780784538db6db862ec0408
        Validity
            Not Before: Oct 24 06:01:12 2026 GMT
            Not After : Oct 25 06:01:12 2026 GMT
        Subject: CN=bf16f7e20aebee9fd67166123c72d42294638b1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c6:a2:4a:59:67:1b:31:31:21:b6:31:14:88:
                    39:00:cb:2a:b2:9c:c8:71:ee:5b:2f:18:cd:44:d8:
                    f6:8f:02:ae:76:f5:0b:55:99:4c:78:0b:83:55:0e:
                    cc:ca:77:ec:af:51:62:1a:bf:ea:55:eb:ea:03:f9:
                    15:3e:29:a6:b4:ef:d8:73:fb:f0:31:6f:b7:67:7f:
                    a6:9e:3a:fa:1c:56:4e:48:8f:ad:5e:80:97:75:84:
                    40:da:79:3a:c4:cf:10:3e:c5:62:7a:c0:35:9d:3c:
                    8d:42:72:d7:f2:03:8e:3f:90:ab:e7:cf:22:75:67:
                    a5:80:1d:70:da:e6:dc:0e:93:77:41:f8:1c:94:29:
                    86:d2:49:99:61:bc:55:8a:2a:08:6d:6b:7b:e5:6b:
                    2f:7f:e3:01:71:cd:02:b8:a8:4e:f4:7c:d1:1f:2b:
                    f8:bb:ab:dd:2c:37:d9:97:2c:c3:48:77:9b:7e:e8:
                    45:ca:34:f3:4a:79:6f:cd:12:72:86:8a:b8:f2:41:
                    d7:b6:cd:2e:f5:a1:df:2c:f7:95:9b:cc:e7:e4:60:
                    ed:7d:2e:af:fc:f1:d2:62:5e:49:5c:2e:5b:29:ea:
                    88:d2:af:3f:d4:95:fd:35:53:b9:87:6d:74:57:4a:
                    ef:a9:32:c3:36:f4:be:82:1d:1f:74:bf:65:2e:54:
                    15:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:16:F7:E2:0A:EB:EE:9F:D6:71:66:12:3C:72:D4:22:94:63:8B:1C
            X509v3 Authority Key Identifier:
                keyid:E7:A9:52:EF:2D:71:33:48:87:80:78:45:38:DB:6D:B8:62:EC:04:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/56lS7y1xM0iHgHhFONttuGLsBAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8513cd-aac7-466d-a031-84ccf3420286/1/56lS7y1xM0iHgHhFONttuGLsBAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e9:5a:f9:e6:d5:4c:76:62:97:b9:be:35:9a:db:92:b1:47:
         1e:f0:00:dd:2c:6f:1e:d5:8d:f2:db:3b:92:23:ef:b1:c9:27:
         52:c2:2d:0d:a7:e1:ef:3d:04:c6:bc:bc:b2:7c:b7:c4:c7:ac:
         5f:1a:70:df:99:6b:ab:ac:c0:e8:1d:50:c6:14:5c:28:73:fd:
         5e:f2:46:39:6e:c8:fc:8c:bd:c6:96:e2:77:65:a4:39:10:ed:
         2a:69:cc:a6:c8:9d:95:f7:69:a3:26:27:72:c8:42:77:43:14:
         31:f5:55:f3:7f:0d:7b:49:80:58:1b:21:53:b5:3e:65:71:5b:
         a7:f6:2e:5a:43:88:84:4b:37:05:2d:9f:b4:80:bb:d8:01:15:
         5c:59:12:8a:04:bb:10:f7:38:55:3d:53:99:04:7b:05:93:e0:
         b8:42:ca:42:14:a3:86:ec:ad:20:3e:5e:9a:32:d9:03:62:c4:
         e8:ba:42:37:32:c2:f3:5f:92:19:fe:95:b0:bd:c4:1e:d1:d8:
         9a:8b:c7:f6:7e:02:e4:e2:a5:62:eb:c0:0c:61:40:5c:f8:b8:
         7a:54:b7:87:1b:dd:58:98:18:43:34:a9:10:e9:2d:71:6a:b5:
         24:e6:ea:61:ef:d0:ef:ad:50:be:52:c0:67:2e:64:a9:68:bd:
         e3:43:45:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:08:29 2026 by rpki-client