Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
File:                     0ur89N6SC5zmRdbmlt8IqosFUZs.mft (raw, json)
Hash identifier:          2oUFtSWrNtXL9HIXfu4c0+/rWSJOaSCf7EApXxancbQ=
Subject key identifier:   6B:DE:37:B5:CA:16:E3:84:79:7D:64:2E:ED:2D:81:9B:73:82:AE:45
Authority key identifier: D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
Certificate issuer:       /CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Certificate serial:       01A13E94ED7B9D141465A66BEE44EAF03B8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
Manifest number:          17A6
Signing time:             Thu 15 Oct 2026 08:01:49 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:49 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:49 +0000
Files and hashes:         1: 0ur89N6SC5zmRdbmlt8IqosFUZs.crl (hash: X5PuUAh2eqStSfUpAJV4TGppx0Tyx4r4ujRJ4CBHNPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:ed:7b:9d:14:14:65:a6:6b:ee:44:ea:f0:3b:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
        Validity
            Not Before: Oct 15 08:01:49 2026 GMT
            Not After : Oct 16 08:01:49 2026 GMT
        Subject: CN=6bde37b5ca16e384797d642eed2d819b7382ae45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:61:4b:a4:e4:b2:72:f9:9d:51:05:da:cb:c1:
                    6f:3e:c9:eb:a8:f3:dc:a3:d3:0a:0a:4a:4f:da:3d:
                    02:cd:72:7a:13:0d:90:0c:d6:27:66:98:5e:54:99:
                    77:3e:fe:3d:3d:2d:e4:fb:c5:00:4f:07:99:e1:4e:
                    76:e4:32:28:f3:fe:26:82:ab:d5:0a:98:04:7f:ea:
                    71:aa:ed:89:85:a7:81:fd:98:50:28:0b:6f:79:2e:
                    70:32:43:90:3b:fe:d1:02:4f:2c:ad:33:bf:61:4e:
                    85:58:1b:c9:1b:09:be:79:85:ce:aa:8b:70:cd:98:
                    fc:a2:4a:4c:f8:9b:9e:6b:87:ce:08:05:d3:37:f4:
                    1a:67:55:f2:5a:71:a6:73:f4:12:7b:02:4b:72:41:
                    79:25:d6:db:1e:db:a0:81:b9:5a:b5:9a:4b:db:11:
                    5a:72:e2:d2:c4:9f:1d:00:5a:31:00:43:ae:0d:35:
                    ea:76:64:8c:75:31:bb:9a:a4:98:e8:88:ce:15:de:
                    1e:2b:21:e4:ae:42:77:82:76:53:8a:a3:73:72:0e:
                    19:b5:43:b1:2b:a5:62:37:2a:e2:f8:01:a5:5c:8f:
                    f2:43:7d:b8:58:d5:66:03:24:37:95:31:1c:dc:a0:
                    ee:af:88:94:27:7b:31:b0:dd:54:b6:2e:d0:fd:e4:
                    c4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DE:37:B5:CA:16:E3:84:79:7D:64:2E:ED:2D:81:9B:73:82:AE:45
            X509v3 Authority Key Identifier:
                keyid:D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:35:dd:53:c9:be:f2:18:4a:1b:8c:9e:02:3d:8e:34:55:85:
         92:3c:19:df:b0:8e:af:4c:57:08:7f:f6:f5:0e:fa:90:01:ec:
         11:00:6a:b3:ad:35:8f:8b:dc:56:01:fa:21:61:cd:81:64:54:
         63:7a:7d:b7:5a:8b:0a:35:84:c5:76:f3:2d:e2:99:a5:ba:d5:
         82:25:43:b7:57:26:1d:39:1a:23:e5:bd:03:e1:08:81:68:43:
         87:e1:98:4d:e4:5c:3e:9b:85:87:7b:87:17:e4:92:64:9d:4f:
         f4:7a:cc:69:a6:47:e7:9d:57:d6:6c:fb:59:b5:dc:05:2a:c5:
         bc:00:2d:4a:d0:23:2d:03:02:1b:ec:26:de:bd:e9:cb:e2:aa:
         c2:e7:a5:cf:57:75:fd:f3:dc:56:b4:e3:36:6d:c4:5a:15:f9:
         88:d6:95:a3:84:b9:f2:96:9b:e6:12:e3:4e:04:ff:bf:c9:c9:
         a1:cf:9b:6e:e1:a1:e0:f7:97:f4:45:ea:09:2a:b1:dd:64:da:
         3e:c1:c8:79:ba:c4:a4:d1:b4:4d:ad:74:5c:03:ab:e8:3b:c1:
         6e:fc:a1:af:90:b4:6c:5a:c3:76:9f:71:70:96:fd:7c:af:80:
         aa:36:72:b2:59:44:ca:bb:56:61:49:24:7b:dc:b3:2d:43:e5:
         4e:3a:44:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:34:45 2026 by rpki-client