Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
File:                     5wb8lykDS_sEZN1MmF8UuiEOgeM.mft (raw, json)
Hash identifier:          0Eymkj6eOIiB0MhVRnBkMHJ8epRbUe2EG4R4qXpgY2Y=
Subject key identifier:   AF:9E:2F:30:C9:1A:27:9A:5A:66:CC:7F:EF:56:E3:5B:48:42:42:70
Authority key identifier: E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3
Certificate issuer:       /CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
Certificate serial:       01A1401529288A1A0C433D4A43714DC929B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
Manifest number:          1863
Signing time:             Thu 15 Oct 2026 15:01:30 +0000
Manifest this update:     Thu 15 Oct 2026 15:01:30 +0000
Manifest next update:     Fri 16 Oct 2026 15:01:30 +0000
Files and hashes:         1: 5wb8lykDS_sEZN1MmF8UuiEOgeM.crl (hash: RLS0Fh6kyDFREpgoikxwzJOGp02MQVSKz7hhUPHOwvo=)
                          2: GzLunkiuJrZT29GjfYzrNoKzi0o.roa (hash: z0qcndllBOvCrIDRa+Y5b8LPZSiodfnEHp+s+Xs1Z38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 15:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:15:29:28:8a:1a:0c:43:3d:4a:43:71:4d:c9:29:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e706fc9729034bfb0464dd4c985f14ba210e81e3
        Validity
            Not Before: Oct 15 15:01:30 2026 GMT
            Not After : Oct 16 15:01:30 2026 GMT
        Subject: CN=af9e2f30c91a279a5a66cc7fef56e35b48424270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8b:a5:52:e8:73:0e:47:61:0c:c1:2f:29:5a:
                    be:c8:7a:7c:40:e9:2a:3b:9f:84:b4:2a:11:45:f7:
                    9e:8b:8c:b9:3f:4d:24:64:c7:4b:b5:93:67:2b:6d:
                    79:70:7b:ab:84:6d:14:19:1d:f4:7c:72:89:5a:dc:
                    77:6b:bb:92:29:f9:98:67:d8:b4:79:a3:49:d6:a6:
                    c7:5e:74:3e:e8:b6:9a:ae:98:0d:d8:ba:e8:ec:47:
                    aa:14:ba:e3:60:09:ed:9c:6b:45:ae:f0:4d:95:ac:
                    b1:ce:b7:c6:d1:1a:b3:8b:1a:13:73:b2:ff:b7:ab:
                    02:ff:43:c2:e8:61:53:83:1b:d6:f3:02:f1:78:cc:
                    6b:52:5a:f4:0e:aa:68:a4:6f:c9:1e:dd:1e:f2:33:
                    cb:6a:d6:e5:6b:09:d2:da:ad:67:57:70:d4:35:24:
                    1c:13:1c:f3:e9:31:63:3b:34:b3:d5:8a:cd:d8:aa:
                    0f:19:d4:99:32:6e:e9:a9:61:fc:d0:6d:5a:aa:6c:
                    72:07:3a:71:72:1a:9f:1d:db:ec:95:04:b1:78:00:
                    39:e6:43:31:fb:d1:1f:80:65:ce:96:06:2a:ee:5b:
                    ec:14:b4:7c:39:b2:9e:75:d0:4c:65:95:44:f9:ab:
                    9c:35:9f:dc:f8:3e:8d:a0:99:31:dc:07:d6:5c:64:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9E:2F:30:C9:1A:27:9A:5A:66:CC:7F:EF:56:E3:5B:48:42:42:70
            X509v3 Authority Key Identifier:
                keyid:E7:06:FC:97:29:03:4B:FB:04:64:DD:4C:98:5F:14:BA:21:0E:81:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5wb8lykDS_sEZN1MmF8UuiEOgeM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/476383-f6da-4e0e-8e12-d2dcf05d3376/1/5wb8lykDS_sEZN1MmF8UuiEOgeM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:77:bd:a1:3e:a6:39:4a:7a:95:67:97:45:9d:12:fc:c5:bc:
         5c:b9:21:ec:49:07:8f:d3:41:e0:32:c2:8d:07:a1:69:86:19:
         de:11:da:cf:c0:b5:c8:32:5b:73:0b:9a:ea:20:93:50:94:06:
         63:fd:ac:be:13:c6:17:de:80:91:b8:cb:e2:23:fb:50:38:c9:
         72:bf:ef:33:01:d9:18:6d:39:89:e5:f0:07:40:f4:7e:98:ae:
         0d:a6:e9:d3:c9:d2:60:97:9f:08:b6:cc:6c:fb:77:ed:43:34:
         0d:fa:03:26:a7:ec:7c:38:96:ae:e7:73:26:51:46:fc:34:f7:
         1e:96:b5:c0:12:fc:a8:97:dc:67:6a:ce:8d:6d:54:95:be:06:
         ab:2f:4b:35:91:0b:db:2d:92:b9:b7:5a:f8:5a:f4:5e:0b:a2:
         a3:e1:08:29:98:05:8b:a6:b1:f7:f5:8d:c1:b2:c0:b3:7a:52:
         45:92:19:03:86:e4:42:8e:76:8b:aa:2f:39:2d:a0:d8:65:3d:
         ab:51:fa:34:4b:1e:4f:64:5c:4e:2b:4f:6b:28:d2:5c:ee:70:
         85:ba:99:05:78:07:d9:3c:69:a0:ab:f8:11:5a:08:45:0a:90:
         ce:a4:2e:84:ea:a2:f6:47:e2:d1:3f:c2:f0:40:b1:8d:73:95:
         4e:33:01:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:33:37 2026 by rpki-client