Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
File:                     Ad0iu63J75fJwaOGG21rTE3dhoc.mft (raw, json)
Hash identifier:          IpHPmKfjJEctysVcvSQtZC7qML9Qq/ojwCSc2+2o+vY=
Subject key identifier:   DF:EF:C5:0D:0F:8E:BF:CA:68:0B:EB:82:85:BB:BB:61:D8:E5:29:44
Authority key identifier: 01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87
Certificate issuer:       /CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
Certificate serial:       01A13DB86BC8D5539E87879BECBF14038F40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
Manifest number:          1495
Signing time:             Thu 15 Oct 2026 04:00:58 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:58 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:58 +0000
Files and hashes:         1: Ad0iu63J75fJwaOGG21rTE3dhoc.crl (hash: x9NZdgOVN4eIavSmiMOTep4B9+dQCGyrjwOL5GL8OOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:6b:c8:d5:53:9e:87:87:9b:ec:bf:14:03:8f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01dd22bbadc9ef97c9c1a3861b6d6b4c4ddd8687
        Validity
            Not Before: Oct 15 04:00:58 2026 GMT
            Not After : Oct 16 04:00:58 2026 GMT
        Subject: CN=dfefc50d0f8ebfca680beb8285bbbb61d8e52944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ec:e0:2d:96:34:8c:02:e8:50:4e:c6:b6:56:
                    ee:f5:54:e5:cd:e1:41:90:75:bb:2d:a5:c0:8c:e1:
                    d0:62:ae:89:05:07:a4:56:db:7b:a0:7c:14:d0:44:
                    c1:02:ef:3e:1e:ca:1f:b5:31:63:fb:3e:6a:12:44:
                    37:da:ad:f7:b0:fd:e5:7f:9a:d9:54:29:07:4e:8b:
                    07:a0:0c:0d:a8:15:83:00:e1:48:28:20:cf:f8:c1:
                    3c:2b:2e:eb:b8:e3:85:45:51:22:87:4d:30:7d:06:
                    b8:9c:4a:81:61:5e:79:d9:f9:17:76:a5:85:ea:2b:
                    ba:ef:c6:81:be:93:7b:8c:81:21:1e:6b:60:a3:17:
                    4b:93:74:dc:fd:11:53:66:13:a8:56:6f:d3:57:69:
                    f3:f6:fc:79:12:21:83:48:3d:37:8c:d2:51:ec:fb:
                    b6:ed:1e:1d:be:43:7e:59:0b:72:56:f9:f1:f3:2f:
                    47:ed:85:ee:37:c4:e6:b7:72:ec:ef:92:3e:7b:24:
                    de:9c:ec:83:6f:8b:5e:a6:ae:27:d3:7a:b6:c7:da:
                    61:7e:b6:b1:02:c2:a4:77:10:67:4b:51:f3:c1:07:
                    55:c5:93:8f:10:79:03:39:90:01:6f:b1:70:b8:71:
                    42:0f:1f:63:87:13:32:ab:29:78:81:35:dd:07:22:
                    06:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:EF:C5:0D:0F:8E:BF:CA:68:0B:EB:82:85:BB:BB:61:D8:E5:29:44
            X509v3 Authority Key Identifier:
                keyid:01:DD:22:BB:AD:C9:EF:97:C9:C1:A3:86:1B:6D:6B:4C:4D:DD:86:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ad0iu63J75fJwaOGG21rTE3dhoc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/857a83-6ed0-41c6-bdd6-707db2524e6b/1/Ad0iu63J75fJwaOGG21rTE3dhoc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:fc:91:5b:38:69:01:cf:dd:f8:be:8b:a3:fd:dc:50:5c:70:
         04:d6:38:38:7c:ca:ea:14:ab:d4:8e:2a:80:0b:fc:f6:eb:cd:
         82:e9:92:7f:bc:d2:29:54:27:e0:24:f0:63:86:4b:ad:80:c1:
         f4:d2:69:b3:4b:b9:a9:84:65:7a:d5:31:35:94:73:6d:64:86:
         2b:75:0d:49:e2:be:b0:0d:4c:33:e7:21:5a:3d:e0:b8:49:8b:
         34:16:47:e8:17:05:fb:e2:43:7b:26:99:10:14:be:c4:61:8c:
         a8:e1:a8:f6:12:a9:de:ec:c2:da:c1:4e:0a:88:02:09:a7:66:
         5c:90:f0:47:e7:a5:2c:e7:0a:f9:df:c8:5d:a2:86:a2:b5:b1:
         5b:9d:f7:33:3f:38:16:b8:b6:27:e0:26:28:a2:11:2c:22:ee:
         0a:18:4d:d7:3a:e2:7d:7c:7b:01:1b:85:74:2e:28:dc:fd:f0:
         a7:8f:2d:26:2f:9b:c7:77:b5:f4:29:e9:4f:69:4e:73:28:ce:
         2c:07:20:0c:0d:e2:3f:40:ce:1c:1b:f7:d4:61:70:6c:97:a1:
         64:dd:ee:2e:41:d2:ad:d4:6b:10:aa:fc:64:26:f5:32:d9:e4:
         4b:d7:1c:94:87:49:54:78:f7:cf:82:24:3d:1d:c7:c4:2a:5c:
         b0:88:fd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:38:14 2026 by rpki-client