Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File:                     1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier:          wPjAZLxHYyxlzkFLGwe2dkJGgmQLaRroQhcMjCGFqig=
Subject key identifier:   6D:A9:7F:46:1F:80:73:75:5F:FF:F2:CB:B8:F5:3E:C3:2D:1C:4C:E6
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer:       /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial:       01A13F7065A3FB20DF371AB4243B6533CDF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number:          1AA7
Signing time:             Thu 15 Oct 2026 12:01:32 +0000
Manifest this update:     Thu 15 Oct 2026 12:01:32 +0000
Manifest next update:     Fri 16 Oct 2026 12:01:32 +0000
Files and hashes:         1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: 6kGt0JnhkP8BKlWfzMzkOqFNBagohw+SGD2dbWrxmCM=)
                          2: RBLs6_JEMpJ2-E4f-zbgq3OA94g.roa (hash: YtzTgnRD0gPLAxf3Gvly0Fh3NIAfS3kf5OMJ5xYDEXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:70:65:a3:fb:20:df:37:1a:b4:24:3b:65:33:cd:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
        Validity
            Not Before: Oct 15 12:01:32 2026 GMT
            Not After : Oct 16 12:01:32 2026 GMT
        Subject: CN=6da97f461f8073755ffff2cbb8f53ec32d1c4ce6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f2:c0:5c:81:ca:1d:4d:62:b8:e6:ed:e8:63:
                    34:ea:16:ef:71:20:0a:fd:e4:1a:16:6d:9d:fb:d2:
                    b1:86:be:9a:93:f1:cc:fd:a8:41:f6:44:80:61:a4:
                    27:44:e2:ba:8a:bf:04:94:db:ff:4e:ca:61:0f:c8:
                    13:0b:7f:41:e3:64:e1:9c:9c:e7:91:3f:98:7c:0c:
                    63:77:a3:4a:87:4e:02:91:08:2f:0e:53:68:af:a1:
                    f5:e8:7d:b2:b5:69:2b:0a:4b:41:ef:47:e8:45:c2:
                    28:08:a7:5e:46:7b:c3:26:53:f0:b6:01:a8:6b:9b:
                    34:b4:4f:03:41:08:47:b4:87:96:5b:85:92:c5:09:
                    c8:42:0a:3c:0c:ed:af:c0:96:07:3c:d7:05:8f:80:
                    bf:7d:0f:03:3b:3f:74:44:d5:8b:ef:eb:1b:61:0e:
                    76:af:6a:66:b5:6b:6e:fe:9c:3d:48:ab:2f:36:3c:
                    37:be:04:dc:83:47:8b:29:a8:29:69:cf:1c:f9:dd:
                    67:1c:86:e5:1b:9a:f0:9d:12:5e:45:07:30:57:89:
                    be:03:28:65:45:8b:72:ac:87:30:08:d3:ed:9f:be:
                    4f:1f:d0:b8:86:b2:16:16:6d:5a:02:59:fa:59:7e:
                    45:f5:6e:ef:19:84:14:a4:8b:a6:98:cf:01:60:db:
                    a8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A9:7F:46:1F:80:73:75:5F:FF:F2:CB:B8:F5:3E:C3:2D:1C:4C:E6
            X509v3 Authority Key Identifier:
                keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:c9:ef:8a:f5:2e:2b:c1:c5:47:33:76:8c:15:02:1e:b0:3e:
         36:a5:2e:cf:3f:d2:2d:3b:3d:8b:28:94:fb:86:9a:94:fc:d4:
         08:53:1a:4f:75:58:17:19:6b:4f:ae:98:0c:56:2d:e6:9f:c4:
         7e:d7:96:2f:ef:78:20:86:c5:f4:b1:42:9f:01:33:ea:df:2f:
         91:6f:36:74:a9:fe:42:c3:11:65:88:44:67:8b:86:b4:6d:3b:
         b9:fc:12:10:9b:ad:36:9e:9a:8f:8e:d5:c1:6d:13:c6:38:60:
         f9:b3:03:23:d7:52:b2:40:a3:5e:e6:4c:80:25:61:cb:bc:ca:
         d4:bd:6f:25:93:3b:3b:8a:ac:42:92:fc:22:44:39:38:2a:6f:
         17:44:48:3a:14:32:f0:70:8e:35:7e:5b:95:9b:63:5f:8a:6e:
         2e:b8:0d:ad:b6:11:5c:ff:a1:06:87:a3:b6:b6:a4:e5:25:0f:
         f4:a6:2d:b7:d3:63:30:93:86:8e:fc:50:41:9e:9d:a8:3b:ad:
         f8:b6:bb:10:83:d2:b7:d1:d8:82:b3:fa:b4:89:dc:06:5e:c5:
         42:71:ea:18:e5:64:9c:a8:de:da:aa:23:50:89:63:fe:0d:ab:
         ac:43:d3:c3:01:d7:9a:65:3d:1b:b2:4d:4a:2c:8a:3a:07:bf:
         5e:a4:e5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:25:53 2026 by rpki-client