Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
File:                     Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json)
Hash identifier:          uLahusbGx4f0UAXcY4DUUFJoIVM8Z6u5RthjDgyV8d8=
Subject key identifier:   80:E3:F3:C5:B6:0F:2F:80:1D:BE:16:72:61:43:1F:23:45:61:72:64
Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93
Certificate issuer:       /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
Certificate serial:       01A13D4A3D536C5DCBAFFA5223DF9FF6B348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
Manifest number:          0983
Signing time:             Thu 15 Oct 2026 02:00:37 +0000
Manifest this update:     Thu 15 Oct 2026 02:00:37 +0000
Manifest next update:     Fri 16 Oct 2026 02:00:37 +0000
Files and hashes:         1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: m+9OaITXDDpLD99zWbRBtmX8lx90jhsZ2Tj2/WKv+Eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 02:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:4a:3d:53:6c:5d:cb:af:fa:52:23:df:9f:f6:b3:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193
        Validity
            Not Before: Oct 15 02:00:37 2026 GMT
            Not After : Oct 16 02:00:37 2026 GMT
        Subject: CN=80e3f3c5b60f2f801dbe167261431f2345617264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1e:d0:fb:76:5a:b0:2e:76:0d:ac:4e:bf:d9:
                    b0:fe:58:00:06:9d:2b:79:d1:d7:00:ef:60:d8:51:
                    85:98:58:c0:af:52:4d:11:95:57:08:70:b4:07:5a:
                    ea:25:f1:ba:32:e5:ac:b8:90:97:94:ce:e4:ad:9d:
                    2b:f0:2d:a3:48:43:31:a0:63:b1:ae:46:a2:36:42:
                    1f:dc:a3:99:31:4f:bb:ba:4a:44:a8:ac:dd:be:5f:
                    51:94:3e:28:7b:2e:39:5a:92:30:1f:0b:b5:93:f1:
                    5f:fb:85:1d:7c:31:fe:26:05:3d:d8:66:80:ff:ae:
                    24:66:27:db:a4:31:3d:c4:65:fb:65:08:77:36:96:
                    9c:17:12:21:fb:4f:9f:61:bf:3b:2f:3f:45:46:31:
                    50:7f:87:97:71:5d:7d:df:de:87:e0:69:9f:db:e9:
                    90:8a:15:fc:b6:ef:b2:9f:7d:ad:95:92:71:e1:cc:
                    68:24:19:43:e0:ad:8d:1e:77:cd:5a:ae:2c:54:bc:
                    3f:62:14:7a:a7:02:ed:d4:bb:0e:ed:cc:dc:12:19:
                    1d:38:f5:01:7a:a4:c9:5b:66:06:cb:55:34:f8:f9:
                    b0:5d:bd:12:b6:31:a8:82:fd:8e:17:69:97:3c:99:
                    45:96:a9:86:7c:70:3b:e4:33:a7:12:65:53:98:0d:
                    cc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E3:F3:C5:B6:0F:2F:80:1D:BE:16:72:61:43:1F:23:45:61:72:64
            X509v3 Authority Key Identifier:
                keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e1:64:d4:f3:29:06:44:c3:ed:4e:34:97:e4:61:3c:bb:67:
         b5:ec:d4:c6:7c:93:b1:69:8b:ee:4d:55:7a:2e:77:20:e5:ce:
         c3:03:14:18:41:5e:02:56:81:6a:ef:b9:5d:f2:90:0d:37:ea:
         35:33:c4:12:8d:73:67:48:41:16:6f:a1:37:d6:78:c8:39:c7:
         5d:93:01:0b:9c:f6:da:8f:93:52:6b:dd:9c:12:cf:4e:b7:3a:
         45:c2:fb:9c:94:75:2b:b3:95:7a:5d:b5:6d:4f:6e:27:4e:6b:
         30:c8:ac:06:40:45:ca:5c:27:9b:c5:a1:e4:2b:1c:ad:a4:49:
         99:b6:9d:fe:01:34:f9:18:3d:6d:39:89:07:54:d8:d5:0a:73:
         eb:12:d0:84:ab:ab:d5:62:5e:0c:c9:93:8c:bd:97:72:9d:c7:
         99:a0:12:90:2d:e0:28:1c:f5:19:72:cb:a8:08:a8:36:17:94:
         65:5d:8f:9a:91:57:34:75:71:81:90:6f:87:09:2b:ef:a2:d0:
         30:3b:b4:a1:c9:84:1b:a2:35:32:89:56:77:d4:74:a6:ff:78:
         3b:b3:05:cc:d6:96:4d:b7:35:71:8b:c8:88:db:b4:ad:9a:46:
         e9:d9:2d:53:a7:1e:1c:a5:e7:24:20:2e:60:9a:33:b0:af:7a:
         a0:ce:13:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:27:10 2026 by rpki-client