Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
File:                     AdIyzG-yu_d4bZLGxq66oO2aceQ.mft (raw, json)
Hash identifier:          yL7UFdiDlwnzwrcpoN+xPxSzF7GRZspuTL6McMwwWQc=
Subject key identifier:   A1:AD:CF:A5:B2:BF:E3:DB:E7:22:36:3E:65:56:15:F1:CB:A1:63:C0
Authority key identifier: 01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
Certificate issuer:       /CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Certificate serial:       01A13FA7261F279749DDB06093BBBE152B9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
Manifest number:          1A9F
Signing time:             Thu 15 Oct 2026 13:01:21 +0000
Manifest this update:     Thu 15 Oct 2026 13:01:21 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:21 +0000
Files and hashes:         1: AdIyzG-yu_d4bZLGxq66oO2aceQ.crl (hash: Vf5KLZIb75RcfdoTWLQnrpAWpGP/7UJkd9LwSki+/jM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:26:1f:27:97:49:dd:b0:60:93:bb:be:15:2b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
        Validity
            Not Before: Oct 15 13:01:21 2026 GMT
            Not After : Oct 16 13:01:21 2026 GMT
        Subject: CN=a1adcfa5b2bfe3dbe722363e655615f1cba163c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:39:cd:0b:11:9b:82:c8:7a:c4:66:05:c3:3a:
                    eb:aa:ec:16:9e:26:b9:ac:f8:a4:b1:03:61:b7:5b:
                    e1:e3:30:f8:02:87:82:81:59:64:71:7c:2f:49:e6:
                    ed:4a:27:cc:20:b2:5a:9b:4a:24:47:8c:fd:56:65:
                    e6:68:8d:4e:3e:fa:f7:fc:7d:b7:b2:e3:c2:02:fa:
                    07:5a:c2:38:d8:86:76:4a:31:6a:87:fd:76:7f:14:
                    1d:4f:7e:f9:4b:9a:2e:45:80:36:23:64:29:ac:da:
                    c8:c8:dd:18:53:72:5c:a3:9f:6d:87:f6:be:18:4f:
                    d4:4a:c1:01:dd:2d:44:b3:0a:16:ac:9d:24:3a:48:
                    e1:10:dd:8a:ea:b4:17:68:62:9f:a6:86:43:53:18:
                    d6:0c:cf:14:40:bd:3b:a4:3d:04:b3:09:28:32:d5:
                    35:d9:06:4f:8f:af:28:22:a2:b7:ff:46:e1:2f:45:
                    39:a2:52:37:6f:fb:f0:73:2c:4c:53:55:9f:a1:b6:
                    69:9a:95:4f:dd:f5:39:55:00:bf:fb:34:43:c7:4e:
                    60:46:36:f9:88:c8:55:23:08:12:40:ab:55:70:36:
                    f2:df:34:64:69:1b:d7:4b:25:ff:e3:23:93:7b:b2:
                    45:fb:e3:6f:a9:4c:76:6a:d8:d1:69:3a:b3:45:ac:
                    b1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AD:CF:A5:B2:BF:E3:DB:E7:22:36:3E:65:56:15:F1:CB:A1:63:C0
            X509v3 Authority Key Identifier:
                keyid:01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:a3:c4:29:55:9f:56:39:00:5f:34:36:38:a6:8d:14:9e:8e:
         c3:f4:f1:b9:e3:58:98:b2:3a:c0:3a:0d:08:45:a7:4b:99:d6:
         2a:64:4c:5c:23:6e:b1:d9:12:6e:71:70:da:42:3e:56:b7:81:
         24:85:99:2b:a4:73:aa:1f:ca:ab:07:6d:c9:2f:97:76:66:5d:
         eb:46:1d:2c:a8:ee:5e:25:6d:5f:24:d0:b7:da:e3:19:91:04:
         02:9e:ac:78:cf:4b:f4:7d:40:4c:de:ee:fd:6d:45:61:8e:3f:
         15:e3:24:62:70:51:70:33:55:67:37:4f:f7:e6:cc:0f:17:47:
         c5:ec:9e:5a:42:97:c0:49:2a:4e:2a:e0:7f:d4:d1:2a:f2:26:
         81:8d:2e:c4:45:38:41:d3:06:b4:dd:a3:56:fb:51:58:49:7c:
         08:27:c5:59:4b:a8:a6:96:de:07:5f:4f:dc:35:73:1b:ce:45:
         4c:01:2d:28:0e:a9:12:a0:6b:df:ae:f2:21:30:c0:57:36:bb:
         7e:48:d1:97:ea:c6:07:98:13:88:26:2a:1c:b1:5a:33:41:2c:
         69:aa:16:f6:87:ce:b6:a3:72:c5:e5:2d:85:ca:8b:b3:1d:98:
         bd:63:84:c8:6b:17:dd:77:39:d4:f6:e9:8c:f2:13:7f:37:41:
         f4:16:15:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE/pyYfJ5dJ3bBgk7u+FSucMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDIzMmNjNmZiMmJiZjc3ODZkOTJjNmM2YWViYWEwZWQ5
YTcxZTQwHhcNMjYxMDE1MTMwMTIxWhcNMjYxMDE2MTMwMTIxWjAzMTEwLwYDVQQD
EyhhMWFkY2ZhNWIyYmZlM2RiZTcyMjM2M2U2NTU2MTVmMWNiYTE2M2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DnNCxGbgsh6xGYFwzrrquwWnia5
rPiksQNht1vh4zD4AoeCgVlkcXwvSebtSifMILJam0okR4z9VmXmaI1OPvr3/H23
suPCAvoHWsI42IZ2SjFqh/12fxQdT375S5ouRYA2I2QprNrIyN0YU3Jco59th/a+
GE/USsEB3S1EswoWrJ0kOkjhEN2K6rQXaGKfpoZDUxjWDM8UQL07pD0EswkoMtU1
2QZPj68oIqK3/0bhL0U5olI3b/vwcyxMU1WfobZpmpVP3fU5VQC/+zRDx05gRjb5
iMhVIwgSQKtVcDby3zRkaRvXSyX/4yOTe7JF++NvqUx2atjRaTqzRayx7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKGtz6Wyv+Pb5yI2PmVWFfHLoWPAMB8GA1UdIwQY
MBaAFAHSMsxvsrv3eG2SxsauuqDtmnHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRJeXpHLXl1X2Q0YlpMR3hxNjZvTzJhY2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lYTZmZWQtMTk0Yi00MzMxLTgxZGEt
ZDEwYTk3NzFkNzliLzEvQWRJeXpHLXl1X2Q0YlpMR3hxNjZvTzJhY2VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lYTZmZWQtMTk0Yi00MzMxLTgxZGEtZDEwYTk3NzFkNzli
LzEvQWRJeXpHLXl1X2Q0YlpMR3hxNjZvTzJhY2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACaPEKVWf
VjkAXzQ2OKaNFJ6Ow/TxueNYmLI6wDoNCEWnS5nWKmRMXCNusdkSbnFw2kI+VreB
JIWZK6Rzqh/KqwdtyS+XdmZd60YdLKjuXiVtXyTQt9rjGZEEAp6seM9L9H1ATN7u
/W1FYY4/FeMkYnBRcDNVZzdP9+bMDxdHxeyeWkKXwEkqTirgf9TRKvImgY0uxEU4
QdMGtN2jVvtRWEl8CCfFWUuoppbeB19P3DVzG85FTAEtKA6pEqBr367yITDAVza7
fkjRl+rGB5gTiCYqHLFaM0EsaaoW9ofOtqNyxeUthcqLsx2YvWOEyGsX3Xc51Pbp
jPITfzdB9BYVxQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:56:57 2026 by rpki-client