Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
File:                     95FxTraksq_vgC6cF53Cz8LRzOU.mft (raw, json)
Hash identifier:          sfwAcvuOzjDu1R5h0ChhDPMQ5TPTTsbuWb/p4eqRWcs=
Subject key identifier:   0A:99:ED:6B:B2:FB:13:65:0D:8E:F5:10:30:57:8F:DF:1B:72:E8:5B
Authority key identifier: F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5
Certificate issuer:       /CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
Certificate serial:       01A13ECBAB8D85F754C33B70749694823FCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
Manifest number:          1AA5
Signing time:             Thu 15 Oct 2026 09:01:37 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:37 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:37 +0000
Files and hashes:         1: 95FxTraksq_vgC6cF53Cz8LRzOU.crl (hash: QJzcQ7Thlk9QvZZdP82ZvNwI2El1MKKQmSaSE/RryUw=)
                          2: wcTBVnf35_NIZbe8iI9wOnq94MM.roa (hash: cNxB2jzcwkyyFD+d0tJNZcO3QM57Dig2ypBOPVIdUQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:ab:8d:85:f7:54:c3:3b:70:74:96:94:82:3f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f791714eb6a4b2afef802e9c179dc2cfc2d1cce5
        Validity
            Not Before: Oct 15 09:01:37 2026 GMT
            Not After : Oct 16 09:01:37 2026 GMT
        Subject: CN=0a99ed6bb2fb13650d8ef51030578fdf1b72e85b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a0:d7:e2:b0:cd:4a:4d:37:40:50:43:b4:14:
                    19:d1:f0:3e:b6:b1:de:88:99:a5:4a:b6:16:c9:25:
                    ec:96:a5:70:08:f6:dc:d9:77:9a:12:d7:7b:f5:14:
                    9a:f3:6d:56:be:63:cc:d3:4a:bd:64:9d:6f:a6:33:
                    8a:ea:ec:17:90:35:68:ed:c5:22:8f:44:74:e7:e0:
                    82:f6:c8:17:8d:aa:68:e5:24:6c:27:bf:b1:98:67:
                    37:51:f1:db:8f:6b:6d:91:32:53:85:a5:0c:af:29:
                    d7:87:e7:da:72:12:8f:96:88:8a:75:25:6a:9d:ab:
                    23:28:7c:1f:12:9a:23:09:18:98:1d:fb:36:e9:a7:
                    08:cd:56:8f:bc:b5:60:81:02:41:99:3f:e4:1b:10:
                    87:61:58:ca:97:91:6b:ec:65:d5:bc:9b:6b:d1:46:
                    4d:62:68:c1:5a:64:63:86:03:98:32:90:8b:26:ed:
                    38:6f:30:9f:02:d1:30:c5:10:35:e5:f1:fe:ff:96:
                    2e:64:51:85:48:de:8e:21:8a:48:2b:72:2c:33:4f:
                    7b:1b:09:81:da:f4:10:5d:aa:35:08:1e:fa:5d:81:
                    fb:0c:a2:a6:8c:1b:0c:52:00:0d:43:87:08:82:91:
                    7c:aa:32:a4:05:03:7b:c2:67:f8:9a:78:10:e8:a4:
                    93:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:99:ED:6B:B2:FB:13:65:0D:8E:F5:10:30:57:8F:DF:1B:72:E8:5B
            X509v3 Authority Key Identifier:
                keyid:F7:91:71:4E:B6:A4:B2:AF:EF:80:2E:9C:17:9D:C2:CF:C2:D1:CC:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95FxTraksq_vgC6cF53Cz8LRzOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/862fc0-5cbe-4ca7-a445-3aee4087b56f/1/95FxTraksq_vgC6cF53Cz8LRzOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:06:60:91:29:7e:5e:be:99:59:ee:5a:85:fe:a4:e7:cf:ee:
         62:5a:8e:f7:56:3a:05:6d:83:b6:00:b7:be:9a:d8:46:d7:32:
         ef:43:8f:b8:cd:4e:57:95:34:2c:46:76:94:5b:0d:25:a6:d1:
         17:d6:f0:15:fa:53:1a:8a:04:4b:7e:73:ff:26:6d:e1:61:86:
         70:8f:72:f2:46:e0:a5:d4:d0:e1:11:1f:55:20:98:c3:de:cd:
         99:28:39:5f:9a:e5:28:1b:75:59:74:9e:31:7b:a8:90:cc:d5:
         35:d4:17:8d:30:4c:9f:06:a4:6e:10:b1:f8:36:1a:5f:42:7d:
         fc:0b:48:b7:8c:54:24:c2:5e:87:a1:9c:73:6b:6e:1f:8a:af:
         16:5f:1e:52:06:6d:80:61:de:f0:29:5a:d4:0c:c5:2e:b9:ae:
         3d:34:ba:48:96:a0:76:20:e1:0a:ba:a4:38:1c:94:54:a3:5f:
         3f:e2:dd:d7:3c:13:aa:8a:a6:d5:0c:c2:ce:0a:56:93:93:9e:
         ce:0c:ab:b0:87:34:db:ba:c6:37:42:9a:4d:55:48:8a:dd:a1:
         83:59:82:62:f8:c8:ce:99:65:8d:6d:80:c0:ca:1f:ed:67:45:
         df:51:31:60:37:dc:1a:53:df:16:d7:0f:7c:92:5b:43:e1:a6:
         72:bb:69:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:26:42 2026 by rpki-client