Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
File:                     31OmtxkZem51F1dNOYfzHrnp1Mk.mft (raw, json)
Hash identifier:          6Kqh/FdD3K08Bh2kpKxVM9f5BBS64EAQ0iBjHLVutw0=
Subject key identifier:   CA:F8:FC:8A:B8:F9:37:B8:E6:99:22:81:3D:34:95:B7:72:BC:48:50
Authority key identifier: DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9
Certificate issuer:       /CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
Certificate serial:       01A13E9524379F1510F9440623B20E1B8346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
Manifest number:          1A37
Signing time:             Thu 15 Oct 2026 08:02:03 +0000
Manifest this update:     Thu 15 Oct 2026 08:02:03 +0000
Manifest next update:     Fri 16 Oct 2026 08:02:03 +0000
Files and hashes:         1: 31OmtxkZem51F1dNOYfzHrnp1Mk.crl (hash: J6X0nWDqVmdmDB97nVeHWHhy98RcbBdsgLvVfuEKrho=)
                          2: jRSx240EFvikEXOWUrVqRyU2b0s.roa (hash: bVFXm7wLR7zi83z8MQIWEvOELjneGFr/AACpBxvKs98=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:95:24:37:9f:15:10:f9:44:06:23:b2:0e:1b:83:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df53a6b719197a6e7517574d3987f31eb9e9d4c9
        Validity
            Not Before: Oct 15 08:02:03 2026 GMT
            Not After : Oct 16 08:02:03 2026 GMT
        Subject: CN=caf8fc8ab8f937b8e69922813d3495b772bc4850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:76:91:c1:a9:4c:05:14:65:00:65:dc:b3:36:
                    34:53:75:74:1e:eb:c5:9c:19:e7:dc:f9:fe:f6:e4:
                    84:12:db:c0:99:e9:9d:bf:9f:7b:ee:89:30:f1:92:
                    01:89:44:9f:fd:2b:fd:c4:59:a6:c0:22:ae:c9:54:
                    e8:3f:2b:40:f9:da:cb:34:d0:b8:e1:24:07:da:41:
                    a2:be:c0:43:53:88:68:fd:4b:f8:dc:51:a9:cb:5e:
                    97:94:38:c7:7a:79:bc:88:0a:2a:fc:1d:6c:22:79:
                    84:56:7c:6a:ba:52:f1:ad:88:42:bb:6e:48:17:d0:
                    a4:31:59:cd:54:34:b7:d3:79:8c:b7:74:c9:6f:94:
                    41:d3:8e:52:7a:79:ea:b9:dc:24:10:89:2e:14:9d:
                    b2:af:e2:12:36:8c:91:8a:30:d1:52:b4:23:b2:e3:
                    37:3a:4c:2f:8e:61:7b:8c:c2:e9:57:a4:06:9c:cf:
                    2d:c9:c6:0a:93:22:d5:cd:a9:d3:37:50:e8:9d:68:
                    6d:b4:68:9e:bc:1b:5a:cc:ee:92:d8:64:a4:ef:b5:
                    58:23:7f:eb:0d:ad:e8:0d:58:94:57:8e:ea:fe:a5:
                    17:f1:98:62:f9:7b:a0:83:3d:9f:21:bd:68:cf:00:
                    b1:97:42:8b:a0:dc:aa:69:a5:e2:e5:17:8b:e2:ee:
                    c8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F8:FC:8A:B8:F9:37:B8:E6:99:22:81:3D:34:95:B7:72:BC:48:50
            X509v3 Authority Key Identifier:
                keyid:DF:53:A6:B7:19:19:7A:6E:75:17:57:4D:39:87:F3:1E:B9:E9:D4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31OmtxkZem51F1dNOYfzHrnp1Mk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5f38a6-a97e-4861-ab3e-85212b9d159b/1/31OmtxkZem51F1dNOYfzHrnp1Mk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:cb:b9:94:e5:0c:e9:d9:ed:8b:65:3b:07:4f:a4:44:9e:2c:
         18:f6:ef:8e:d6:87:b6:54:f3:52:9d:1f:8b:fb:63:3d:1b:7c:
         d7:d0:4c:ad:f5:d3:58:25:b0:db:4d:20:c3:0f:73:a8:73:3f:
         2d:02:59:e6:41:3d:1e:a0:cb:1f:88:ab:a7:22:80:b7:a2:8a:
         02:f6:0f:6f:17:6c:c7:10:c7:8a:22:50:8d:a8:86:31:78:e2:
         d1:ad:6a:db:04:fe:18:3b:d8:35:26:10:e6:ec:73:92:ad:3e:
         f8:ea:5b:b5:5b:a7:da:19:6b:9b:f0:57:a5:ee:34:47:53:ba:
         ef:0f:ab:ad:0b:da:0e:15:4a:be:bb:90:a5:66:4a:90:11:11:
         ee:d1:f5:27:83:c6:47:f6:f8:08:5a:f7:33:7a:0f:bf:ab:31:
         c8:0d:05:32:03:b1:77:2c:96:58:82:40:6a:79:b6:40:70:9f:
         ba:5e:63:1f:6b:6c:0b:b6:a1:08:03:bc:2a:18:cb:b8:ae:a9:
         e3:0b:f1:1d:ee:de:e1:fd:19:1e:eb:19:23:31:a2:d0:a7:5b:
         44:ac:4d:0e:27:0c:bb:43:8e:d2:24:03:c8:51:86:44:e0:ff:
         ba:13:e5:8f:a1:2e:e2:b8:0c:91:a7:2a:1c:97:aa:7e:d1:64:
         97:26:ce:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:22:04 2026 by rpki-client