Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
File:                     0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft (raw, json)
Hash identifier:          vvV6KYyTkzwH1FIs50OIkNmMvLtMaK551xdP+h8+vSA=
Subject key identifier:   BC:7D:05:58:4B:2A:2B:93:DA:13:28:0F:1D:CD:2A:6F:3A:96:A1:6B
Authority key identifier: D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5
Certificate issuer:       /CN=d32d000368c1d54f08a7782c07673b68a93edfc5
Certificate serial:       01A14195E001699285D1516772E8D763224F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
Manifest number:          16B0
Signing time:             Thu 15 Oct 2026 22:01:43 +0000
Manifest this update:     Thu 15 Oct 2026 22:01:43 +0000
Manifest next update:     Fri 16 Oct 2026 22:01:43 +0000
Files and hashes:         1: 0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl (hash: kYDLtPHVA1vSCOwYbAnpVMt8UJ5hrTKTJAWEpeB772Q=)
                          2: NAgn565m5aap-BvH6b7uai7oQu8.roa (hash: sVoFbF/ETtOTSxUYmFp7LqVomo1dzfB9MV68jg3sCdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:41:95:e0:01:69:92:85:d1:51:67:72:e8:d7:63:22:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32d000368c1d54f08a7782c07673b68a93edfc5
        Validity
            Not Before: Oct 15 22:01:43 2026 GMT
            Not After : Oct 16 22:01:43 2026 GMT
        Subject: CN=bc7d05584b2a2b93da13280f1dcd2a6f3a96a16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:dc:73:fd:dd:7f:2d:1e:75:a9:fd:fe:94:ff:
                    09:a1:1b:bf:61:23:29:1e:5c:da:a8:87:61:fa:ca:
                    66:64:43:02:e8:71:48:67:f5:df:e5:c9:47:2a:c8:
                    f3:b3:ec:ca:be:4d:61:d9:26:80:29:b8:0e:4f:f6:
                    4d:9b:da:f6:a4:bc:25:7b:02:94:c3:c5:0b:57:7c:
                    86:a4:d6:53:0c:37:f6:b6:9d:ed:01:80:57:b9:75:
                    f4:ec:48:38:2f:70:62:a4:71:40:bc:39:53:14:fd:
                    80:31:4d:5f:e9:10:1b:f0:90:fe:e5:95:82:19:a5:
                    14:bd:08:92:1f:81:a2:81:02:4d:fc:b5:91:f0:f1:
                    a7:da:7b:06:93:a3:e8:20:e9:e2:19:39:42:e0:f6:
                    bb:a3:7b:51:68:6d:45:f8:8f:b4:57:aa:4e:13:23:
                    9d:0c:cc:97:19:8c:bf:9a:e2:69:37:15:c4:e0:ae:
                    02:ec:d0:71:20:f8:a2:65:96:b7:ce:25:ee:6b:c2:
                    2a:ed:32:d0:b1:1e:20:37:6a:c4:5c:05:4e:4b:97:
                    7a:b6:37:45:9b:59:50:9f:1e:bd:67:25:11:b1:2f:
                    03:43:e7:da:75:c4:36:d2:cf:68:5a:a0:ff:99:d6:
                    61:55:51:c8:64:87:c2:a0:cd:c5:8c:c2:3b:59:30:
                    f9:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7D:05:58:4B:2A:2B:93:DA:13:28:0F:1D:CD:2A:6F:3A:96:A1:6B
            X509v3 Authority Key Identifier:
                keyid:D3:2D:00:03:68:C1:D5:4F:08:A7:78:2C:07:67:3B:68:A9:3E:DF:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0y0AA2jB1U8Ip3gsB2c7aKk-38U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/468065-2233-4dc7-b95c-a7bb38a1a53d/1/0y0AA2jB1U8Ip3gsB2c7aKk-38U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8b:25:45:4c:1d:b7:4c:e8:75:63:f3:ad:9b:a1:fd:16:1c:
         0b:0e:49:4d:30:ac:c5:de:6c:ee:7b:e9:2a:e8:a6:ba:a9:7d:
         92:ea:ca:4c:5b:df:58:26:e6:84:35:62:57:77:13:6c:6c:b5:
         a0:5a:6c:e6:c9:e2:9b:61:e3:17:6f:e3:c4:d6:23:2b:40:e5:
         78:c6:7e:04:a8:41:d8:f7:2f:eb:4b:55:13:99:42:05:7b:bc:
         d1:b6:02:c2:3c:71:3c:57:c0:1f:78:14:e3:ee:12:fb:0d:67:
         70:fb:c6:27:fb:06:a0:9b:c1:ce:fd:19:bc:40:ac:79:ce:4c:
         7c:46:ea:f4:97:19:8c:50:c0:b6:e2:c0:0e:b3:2e:e7:9f:7b:
         8e:e7:06:01:52:ea:3f:38:86:2b:ad:47:0f:d9:a5:fc:68:e6:
         e7:8b:ec:62:67:0e:0b:80:5b:71:c2:dc:a0:86:9c:78:98:ec:
         82:de:3b:54:2a:b6:b6:cf:cf:f1:dd:2d:ee:bb:7a:a0:63:49:
         d5:ce:e5:f0:96:0a:88:fc:af:a1:e2:c3:e8:d6:a2:a5:8e:21:
         2c:87:41:e1:1a:61:c6:be:85:d0:17:29:a6:2b:3b:7f:83:18:
         f1:7f:84:5d:40:68:4a:b5:e0:1a:08:ae:9e:6c:e3:4b:86:70:
         a1:14:2a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:10:30 2026 by rpki-client