Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
File:                     0WLUzQwan_4krVFT0Zzpwx3LTH0.mft (raw, json)
Hash identifier:          PqHL13xZ7w/CAOiWRSYwyA1TbQsy0oq5+d7FpMrj118=
Subject key identifier:   7A:9C:1C:11:84:CC:F6:33:BB:AE:7E:8D:B2:C5:45:EC:03:4F:78:2C
Authority key identifier: D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D
Certificate issuer:       /CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
Certificate serial:       01A13E94E489E29BE61CCDEDA67BB8F8833A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
Manifest number:          1A9F
Signing time:             Thu 15 Oct 2026 08:01:47 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:47 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:47 +0000
Files and hashes:         1: 0WLUzQwan_4krVFT0Zzpwx3LTH0.crl (hash: jBTq22V4A4lt453Cg26oXRGJXrxK4NKE7M8pY6dDp2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:e4:89:e2:9b:e6:1c:cd:ed:a6:7b:b8:f8:83:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d162d4cd0c1a9ffe24ad5153d19ce9c31dcb4c7d
        Validity
            Not Before: Oct 15 08:01:47 2026 GMT
            Not After : Oct 16 08:01:47 2026 GMT
        Subject: CN=7a9c1c1184ccf633bbae7e8db2c545ec034f782c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:96:7c:1c:4a:9c:74:36:ba:57:35:ae:94:da:
                    31:0a:68:5c:98:80:5c:3e:4c:88:41:11:21:be:7a:
                    95:3c:5c:4e:9e:ff:d5:e6:37:8f:d6:22:76:4d:3b:
                    4a:24:a7:5e:be:39:b8:7b:1f:97:93:42:89:5f:9f:
                    5c:51:b3:63:c4:50:ce:96:55:df:23:7e:c3:fc:a8:
                    39:0b:03:68:23:76:a5:a1:83:af:1b:dc:d5:7b:ff:
                    f4:6e:ea:4a:cc:d9:88:57:26:0e:0e:54:19:65:03:
                    ec:e8:d4:10:53:d2:33:3b:01:12:ef:06:f4:a5:4b:
                    26:ab:78:5b:dd:3a:63:c3:95:e8:1e:21:e2:84:95:
                    24:f4:61:ef:f8:46:60:c8:2a:67:2a:95:a2:0e:50:
                    39:5e:67:79:b9:18:fd:18:2e:24:3a:86:f6:cf:4f:
                    a2:8a:83:5b:8c:b9:37:4b:05:ab:7a:fb:b6:26:14:
                    af:54:7a:36:2a:25:aa:78:2a:de:60:b7:47:f5:05:
                    75:5e:fa:a8:eb:80:c0:87:19:d5:12:12:60:5a:b3:
                    91:b0:fd:df:6e:ad:9b:d4:a4:7a:4f:26:2e:8b:49:
                    08:5d:ce:41:6e:93:d7:7c:8c:80:95:29:59:f2:0b:
                    af:72:b6:06:67:13:f8:35:98:69:bb:06:36:80:a6:
                    c1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9C:1C:11:84:CC:F6:33:BB:AE:7E:8D:B2:C5:45:EC:03:4F:78:2C
            X509v3 Authority Key Identifier:
                keyid:D1:62:D4:CD:0C:1A:9F:FE:24:AD:51:53:D1:9C:E9:C3:1D:CB:4C:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0WLUzQwan_4krVFT0Zzpwx3LTH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5f84a1-e8dc-4115-a645-e81720a3978d/1/0WLUzQwan_4krVFT0Zzpwx3LTH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:6f:91:06:44:73:5c:a6:8b:74:bb:5e:23:65:13:cc:8a:42:
         99:6f:ba:d7:e4:fd:11:90:af:10:ea:60:0f:df:e7:31:9e:d4:
         c1:1a:be:e1:cd:5f:d4:0e:a0:94:57:42:2c:2e:09:5c:3e:72:
         51:d1:17:80:b4:59:ec:d3:27:54:f8:88:54:0f:87:82:fe:f9:
         5e:56:90:18:d1:af:f3:f6:a8:40:be:5e:1a:4d:cf:f3:bb:65:
         b2:93:56:f4:06:9c:81:e9:cb:14:19:49:e4:c1:8e:bb:8b:a3:
         79:1f:a9:ea:1e:ca:13:20:9a:24:d3:2c:a8:f3:52:3a:25:7a:
         3c:01:5b:a3:72:e5:f9:06:7f:2a:ea:4c:f0:73:20:76:33:53:
         32:99:dc:8c:3a:e9:6e:87:a3:a9:ab:aa:f6:2c:68:29:02:87:
         ba:ef:92:e7:fa:92:6c:0d:b1:ec:4c:81:88:43:dd:a2:c4:14:
         6c:3e:fb:a3:1c:46:57:e1:f9:34:03:4e:05:ea:96:08:28:c8:
         42:4f:0c:d7:18:a4:08:7d:fe:63:93:8d:d9:05:ef:2a:eb:83:
         cf:67:f1:91:61:de:2e:ed:e8:c4:e7:d9:8f:40:f1:0c:8e:be:
         dd:4f:8b:71:c6:5b:45:51:25:41:68:bf:56:6d:fe:c2:16:ba:
         e5:31:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:23:30 2026 by rpki-client