Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
File:                     0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft (raw, json)
Hash identifier:          BZx54IJsfC2eXbNzoqYeito+fWiClR4osgR1EjoLhO8=
Subject key identifier:   11:D8:16:E5:2C:73:8A:40:2D:E6:42:8E:72:4E:01:EE:36:C3:28:9F
Authority key identifier: D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97
Certificate issuer:       /CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
Certificate serial:       01A1464DA388AE90A78DD83267C3099B4E88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
Manifest number:          1096
Signing time:             Fri 16 Oct 2026 20:00:55 +0000
Manifest this update:     Fri 16 Oct 2026 20:00:55 +0000
Manifest next update:     Sat 17 Oct 2026 20:00:55 +0000
Files and hashes:         1: 0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl (hash: Gcvo7Y35EkQ/vgKboepE01NIbFOi13rXslM42ykihk0=)
                          2: gmvIshISRNirz3J-s4-1ehrXUDk.roa (hash: Io3sSeSvgkiOhA1EF6OANQ4yd9bXS2k4hv1hWFjIVO0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:46:4d:a3:88:ae:90:a7:8d:d8:32:67:c3:09:9b:4e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0b7fc8b058d1f499901a8c2f86e62ae95136797
        Validity
            Not Before: Oct 16 20:00:55 2026 GMT
            Not After : Oct 17 20:00:55 2026 GMT
        Subject: CN=11d816e52c738a402de6428e724e01ee36c3289f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9f:63:7a:6a:ae:eb:9c:2a:35:35:fe:80:d6:
                    6f:9e:8f:57:7d:95:46:5f:7c:9b:4d:d5:d6:ef:7e:
                    8a:f6:8b:1b:80:8c:a3:b5:35:e1:f7:4c:0e:ed:91:
                    b8:85:04:90:c2:00:1d:65:30:ed:71:f1:45:60:10:
                    c2:86:75:e4:ef:0f:2f:c7:47:06:d5:8c:5b:20:8d:
                    18:aa:fb:19:71:c1:b0:b0:ec:4a:3d:7a:c5:62:df:
                    0e:d5:ee:a8:70:58:5a:0e:e3:43:fb:94:62:24:0e:
                    90:97:18:26:27:82:ee:f8:3e:84:83:1e:87:09:a4:
                    df:56:7b:65:f7:0a:5e:5d:a0:b4:b3:f2:d2:c6:5c:
                    86:b1:39:88:6f:80:60:2f:5f:7e:67:5f:89:74:1f:
                    03:51:45:b0:83:62:be:0e:97:1b:46:ee:7b:d9:5c:
                    2f:d2:6a:6c:9e:c8:55:bb:f0:00:41:c0:ea:4c:55:
                    dc:de:83:44:50:5c:63:09:a6:40:bb:0b:b9:eb:81:
                    06:4e:6d:e7:2a:fe:4b:b2:a5:db:97:92:55:76:99:
                    91:be:77:40:2b:bc:e0:e8:b7:8d:23:9c:e0:b8:cc:
                    1b:f4:3b:ac:9b:72:af:99:72:eb:97:17:25:66:c9:
                    8a:f3:82:b7:fb:54:d4:f5:54:84:b2:40:d8:d6:c8:
                    eb:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:D8:16:E5:2C:73:8A:40:2D:E6:42:8E:72:4E:01:EE:36:C3:28:9F
            X509v3 Authority Key Identifier:
                keyid:D0:B7:FC:8B:05:8D:1F:49:99:01:A8:C2:F8:6E:62:AE:95:13:67:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Lf8iwWNH0mZAajC-G5irpUTZ5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9cb34a-c372-482e-81ca-8f639c5a1a72/1/0Lf8iwWNH0mZAajC-G5irpUTZ5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:6f:f3:28:68:79:00:56:02:ea:57:3a:97:a1:59:fa:e6:c8:
         18:dc:98:0e:5f:a7:be:99:be:50:81:5f:c0:00:e5:23:a7:d3:
         4e:6f:f7:fb:bc:70:a2:30:48:42:0a:d0:88:c7:26:42:ce:09:
         9f:75:f5:f5:14:92:f5:d5:87:98:c3:a8:aa:3a:dc:e0:46:d4:
         a9:2a:db:fb:a5:65:48:7c:18:87:fe:6a:a0:e3:7f:02:96:2f:
         0c:8e:6f:7c:ec:c0:38:ec:03:67:05:25:cb:81:b6:6d:4e:cb:
         7e:90:be:82:63:87:d4:e8:7f:84:b8:8f:d0:1e:5a:4e:c2:f7:
         d9:23:0e:c5:62:d5:23:63:21:7f:5e:50:bd:9b:5f:2f:74:a8:
         9b:79:6c:3c:11:fa:64:08:90:b3:be:57:df:34:e7:33:12:6e:
         e2:76:f5:df:45:ad:9b:bb:7b:05:e5:c4:fd:c2:d5:34:9f:6d:
         22:6c:86:dc:a5:c8:81:06:be:78:03:d1:52:aa:f3:21:5c:12:
         cc:af:cc:82:7b:83:41:53:47:7a:17:c2:d5:9f:96:93:72:bc:
         0a:5a:c8:fd:a3:81:ec:43:a1:2d:35:f3:59:d7:29:40:80:d5:
         f8:8e:04:13:34:a3:d3:9e:ad:97:15:b2:d0:1e:fa:1e:dc:66:
         5b:dc:69:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:54:52 2026 by rpki-client