Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
File:                     l8AN4AfUqkpAMdR2ELObd0kIv0k.mft (raw, json)
Hash identifier:          pBjv2EAH7irdZ+rbz10qdxUsO0vehJnVvPjep36TpPE=
Subject key identifier:   0F:E9:89:09:AE:75:0E:70:73:6A:8F:F3:BD:6D:20:9A:62:66:A9:C4
Authority key identifier: 97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49
Certificate issuer:       /CN=97c00de007d4aa4a4031d47610b39b774908bf49
Certificate serial:       01A183752E4BA7182BA8BF09103B0AA30661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
Manifest number:          06AE
Signing time:             Wed 28 Oct 2026 17:00:57 +0000
Manifest this update:     Wed 28 Oct 2026 17:00:57 +0000
Manifest next update:     Thu 29 Oct 2026 17:00:57 +0000
Files and hashes:         1: l8AN4AfUqkpAMdR2ELObd0kIv0k.crl (hash: oUXbuFShoutKIsZYcPdc1lvVh6acW9apPR79PjPoumc=)
                          2: odYIvbxaJeYmOjoyzYcsw6tdRBQ.roa (hash: gjz6TPRGymxJ3q8bit5/XLbB9ysikFUi3nJ/upxA8J0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 14:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:83:75:2e:4b:a7:18:2b:a8:bf:09:10:3b:0a:a3:06:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97c00de007d4aa4a4031d47610b39b774908bf49
        Validity
            Not Before: Oct 28 17:00:57 2026 GMT
            Not After : Oct 29 17:00:57 2026 GMT
        Subject: CN=0fe98909ae750e70736a8ff3bd6d209a6266a9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2b:e0:01:0b:33:26:f2:84:66:5d:5c:90:44:
                    98:70:73:4a:49:be:46:3e:55:4f:49:fa:dd:98:eb:
                    dc:94:0a:0f:75:56:94:b2:62:b7:59:f2:19:9d:46:
                    bb:05:f1:20:5e:88:b3:2f:54:f5:6c:06:f5:6f:b6:
                    9b:70:9a:a1:65:5a:a6:4c:80:ea:b8:32:af:a7:26:
                    b8:05:97:fd:09:f2:1b:1b:75:37:42:ea:92:1a:fe:
                    92:af:e1:09:80:ab:8c:e5:0b:43:bc:b3:bf:c9:a9:
                    8c:35:b8:72:ce:53:8b:38:dd:f7:63:ff:14:cc:71:
                    87:a2:69:98:2a:9d:42:5e:19:11:0a:c5:80:b8:21:
                    da:f8:99:50:da:92:c4:78:74:70:47:a4:e1:c9:d9:
                    56:3a:af:5e:81:06:60:14:d9:57:8f:ab:67:78:5e:
                    7a:59:33:1c:38:43:07:df:c3:e2:54:db:84:55:bc:
                    40:f7:34:80:3a:14:51:8a:0b:62:30:36:48:7d:89:
                    32:2d:e2:e6:ae:c0:62:28:05:50:f0:11:c7:42:f1:
                    7a:b1:48:52:c3:70:e3:76:80:b7:db:8e:14:ed:32:
                    3d:25:ad:f0:31:07:e7:2a:76:f5:60:ba:3c:90:4a:
                    64:c1:3e:1f:66:8b:97:bc:01:bf:a0:ee:0f:a0:7c:
                    2a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E9:89:09:AE:75:0E:70:73:6A:8F:F3:BD:6D:20:9A:62:66:A9:C4
            X509v3 Authority Key Identifier:
                keyid:97:C0:0D:E0:07:D4:AA:4A:40:31:D4:76:10:B3:9B:77:49:08:BF:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l8AN4AfUqkpAMdR2ELObd0kIv0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0077c5-f0be-463f-ab75-8c3dcc459026/1/l8AN4AfUqkpAMdR2ELObd0kIv0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:69:9d:e3:5d:fb:46:cb:98:d0:72:45:82:3e:25:05:42:c3:
         22:9b:e0:d2:45:ac:f2:48:13:ef:36:fc:c0:a7:3a:ab:b2:4d:
         48:ea:12:a2:2d:ea:c7:7e:16:1c:1d:42:95:01:d8:b8:23:5a:
         9b:0b:66:6a:06:d8:cc:fc:3d:82:58:f7:10:01:cb:a6:f9:0b:
         f0:d1:2f:e2:6e:17:36:b2:c8:a7:78:06:d3:e4:04:0d:35:2e:
         d9:7c:20:e9:88:f9:e3:fc:7b:c9:d4:82:b5:6c:e3:87:77:06:
         2c:12:83:e6:b4:89:48:57:4c:de:b7:6d:4a:e4:e1:c5:f4:6e:
         f8:84:3f:6b:59:2f:ad:d2:f1:1c:8c:4b:03:7c:52:4a:83:30:
         d4:98:c3:bb:71:48:93:ad:b8:77:65:cb:e7:1d:a3:6c:54:dc:
         d2:64:f3:a4:16:fe:b2:83:7d:19:5e:53:b7:38:16:c6:4a:f1:
         f2:a0:8f:b7:99:77:27:50:17:60:8b:a1:c5:e9:fb:b0:85:5d:
         1d:39:ad:7d:af:c9:a4:03:b4:66:d3:45:b2:58:0a:2a:05:cd:
         74:33:11:45:bc:8d:46:fa:2c:f0:c4:49:ae:61:f1:75:ed:90:
         b0:28:a7:37:f1:4e:6b:c5:3c:d6:40:f0:fb:c0:12:da:68:ee:
         42:4e:bf:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:50:37 2026 by rpki-client