Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
File:                     8W6j8DMLITLQ33UvUfDgv-89G64.mft (raw, json)
Hash identifier:          d5y63lmZ/AgTi2S3Od7WS6yxQVb4bDqPhtWsQqJkXBs=
Subject key identifier:   67:EA:FE:C8:52:36:8C:64:7D:A8:44:89:FA:09:D7:B9:68:7B:79:41
Authority key identifier: F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE
Certificate issuer:       /CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
Certificate serial:       01A13D80F0737746F6DDCC61BCEDA78A2197
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
Manifest number:          1AA6
Signing time:             Thu 15 Oct 2026 03:00:22 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:22 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:22 +0000
Files and hashes:         1: 8W6j8DMLITLQ33UvUfDgv-89G64.crl (hash: Sfjh28PGDMfrB56OqBRrIqBf9Z+HmdLnyEfUsQVfk40=)
                          2: wwgOSiyDJCbc4Dd25-hiHFFVydI.roa (hash: 5sAIyPhih2yo/oCUdeqXVJ32SO2GS5hm7rjgamDiLJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 03:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:80:f0:73:77:46:f6:dd:cc:61:bc:ed:a7:8a:21:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16ea3f0330b2132d0df752f51f0e0bfef3d1bae
        Validity
            Not Before: Oct 15 03:00:22 2026 GMT
            Not After : Oct 16 03:00:22 2026 GMT
        Subject: CN=67eafec852368c647da84489fa09d7b9687b7941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:1d:2a:96:5c:0c:ac:5d:5d:e3:83:1f:47:
                    88:f3:27:87:ab:dc:67:2e:eb:4d:bd:9a:a4:69:e0:
                    dd:ab:3a:80:7b:3a:c7:7a:17:21:3a:2e:1c:2d:07:
                    6d:63:e1:22:6a:1f:40:41:d1:bb:42:57:03:66:a9:
                    82:98:6e:3d:e8:5b:d2:50:c6:1d:61:3b:9c:a1:a6:
                    1f:1d:40:be:40:79:26:d6:31:f9:c3:03:ff:25:99:
                    fd:0e:43:ed:d7:fb:ba:43:3b:67:66:09:71:cf:ba:
                    4e:b9:db:cb:3f:96:04:9a:be:13:85:2b:4d:53:32:
                    e7:6d:65:9f:c3:0f:b6:f4:82:99:ba:6b:ae:69:c3:
                    12:a4:78:13:43:98:8e:27:2a:4d:bc:09:c4:2e:d3:
                    3c:98:f2:e9:ed:11:22:6b:a4:79:f7:00:b7:6c:d0:
                    e2:37:a4:61:cd:38:51:71:34:e9:81:d4:a4:8b:ca:
                    a9:7b:09:55:43:02:55:6c:90:31:f7:e8:69:70:20:
                    59:68:ce:7f:35:6a:a1:65:6f:b2:98:bd:6b:c0:83:
                    87:9a:26:9e:ad:05:8a:4b:0c:38:67:5f:eb:a9:3f:
                    3a:a8:25:ad:a9:92:c4:df:8d:f6:60:32:27:25:12:
                    96:d0:37:ff:64:98:df:bf:d7:26:4d:a6:36:57:10:
                    9d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:EA:FE:C8:52:36:8C:64:7D:A8:44:89:FA:09:D7:B9:68:7B:79:41
            X509v3 Authority Key Identifier:
                keyid:F1:6E:A3:F0:33:0B:21:32:D0:DF:75:2F:51:F0:E0:BF:EF:3D:1B:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8W6j8DMLITLQ33UvUfDgv-89G64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e8667a-b7fd-4ea8-bae9-6007bbad86d6/1/8W6j8DMLITLQ33UvUfDgv-89G64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:61:46:d5:b5:74:99:e0:89:a6:90:bf:d6:83:a3:9b:0e:81:
         1d:cc:81:12:1a:73:d0:5a:ce:95:3e:6d:ce:d8:7e:5d:b3:58:
         a9:ce:81:dc:58:3b:b6:16:f8:b0:82:0d:0e:eb:3a:b8:57:b5:
         bf:25:bc:39:75:9b:05:81:5c:9b:70:fc:8d:c3:5c:61:92:bd:
         a1:8e:53:4c:df:b5:d5:b6:6a:9a:07:0e:93:00:4c:45:5e:2c:
         0d:1a:82:45:85:e3:72:b3:7e:6b:25:b5:64:67:3a:fe:1b:04:
         a3:22:1c:28:8d:fb:03:c2:82:39:90:30:3d:6c:26:91:c4:5f:
         19:76:72:bf:0f:9f:ed:20:ad:a0:f9:ac:15:7e:3f:66:d8:78:
         fd:6a:bd:04:37:95:85:26:59:51:fb:d8:fc:ac:1b:48:da:37:
         e2:a5:e8:c7:fe:ab:b5:80:ad:8e:8a:12:91:7a:72:86:e9:aa:
         95:1b:3b:bd:9b:4e:dd:d7:c3:4f:76:7b:b7:e7:2e:ca:2e:17:
         3c:47:e1:df:09:a4:e5:90:ed:5d:19:be:3b:59:a7:3f:51:b1:
         d9:dc:cf:2b:85:02:6d:ca:e4:7f:21:dd:93:99:15:0d:90:cb:
         4d:03:45:3e:ab:5e:3e:14:d7:02:fe:2e:cb:aa:29:63:a6:eb:
         66:0d:9a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:18:52 2026 by rpki-client