Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
File:                     1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft (raw, json)
Hash identifier:          gBfZXneiBSvH1yZGATi6xyV88I8Bl6Mtcl0H8HwnTfc=
Subject key identifier:   21:FE:E5:07:DF:AE:FE:21:CC:16:B3:CF:A3:3D:B4:B2:01:65:2D:D3
Authority key identifier: D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB
Certificate issuer:       /CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
Certificate serial:       01A14127EB8DE1FC3B31C5353B351FE9396D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
Manifest number:          14D2
Signing time:             Thu 15 Oct 2026 20:01:37 +0000
Manifest this update:     Thu 15 Oct 2026 20:01:37 +0000
Manifest next update:     Fri 16 Oct 2026 20:01:37 +0000
Files and hashes:         1: 1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl (hash: 660V5q9gJ92BfOyvBGszxdFt1Qx6lKNTMlg1VnS+Nvc=)
                          2: RymzVkl2GTuXhui1J5W_XhqHq48.asa (hash: 5HfIyKLmoKxLTbuxq/HgwaF++9Q0QoNQiFLFyXUCLUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:41:27:eb:8d:e1:fc:3b:31:c5:35:3b:35:1f:e9:39:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4e883b5b923678fa07321f25c18ff3a26c250fb
        Validity
            Not Before: Oct 15 20:01:37 2026 GMT
            Not After : Oct 16 20:01:37 2026 GMT
        Subject: CN=21fee507dfaefe21cc16b3cfa33db4b201652dd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:02:d9:86:0d:06:9a:5e:8a:eb:87:03:7e:
                    b9:bc:6f:2a:55:4a:91:55:9e:9d:48:08:b7:b6:8a:
                    df:82:66:8a:a4:0c:75:fc:87:90:86:9a:d8:84:46:
                    69:03:f3:95:82:45:50:41:4e:9c:b3:3b:ee:80:33:
                    25:72:bb:01:bf:f2:42:59:df:00:53:e7:2e:87:86:
                    dc:bc:37:e0:f0:79:6d:7f:39:1c:cc:1f:50:37:c3:
                    7b:4f:a0:b6:87:8a:7a:18:12:ce:8e:2d:a4:94:b2:
                    c7:d6:ad:4f:4d:05:8e:ea:f7:4a:b4:f9:20:60:9c:
                    ac:93:64:81:23:e0:ef:b5:ec:e3:9d:2c:9d:a4:ac:
                    61:a9:76:ae:5d:93:48:12:d3:b3:78:17:25:76:0e:
                    a7:c1:3c:fc:00:f9:fe:eb:77:df:56:68:3f:39:d7:
                    d9:ac:fd:fd:3e:d7:a3:7d:a8:75:2f:32:5f:80:c2:
                    65:82:ee:31:2f:f8:37:6c:00:07:b6:4b:3b:cd:e0:
                    c5:d3:b6:e9:1a:dd:2b:aa:62:f1:ce:30:96:ad:fb:
                    dd:b6:93:6f:3a:60:cc:77:f6:fe:e7:ae:55:c3:82:
                    91:39:1a:a7:a1:24:92:4f:48:4a:20:1a:2a:d0:5d:
                    77:e8:d9:9b:93:b7:ba:e0:78:24:67:c6:83:d1:41:
                    df:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FE:E5:07:DF:AE:FE:21:CC:16:B3:CF:A3:3D:B4:B2:01:65:2D:D3
            X509v3 Authority Key Identifier:
                keyid:D4:E8:83:B5:B9:23:67:8F:A0:73:21:F2:5C:18:FF:3A:26:C2:50:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OiDtbkjZ4-gcyHyXBj_OibCUPs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a1b58a-cc1c-4865-93de-2d3ef9b0ad23/1/1OiDtbkjZ4-gcyHyXBj_OibCUPs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:53:3a:12:e5:06:99:52:8b:cf:40:c8:6c:62:69:1a:c7:20:
         00:87:46:bf:d7:de:e5:56:d6:d4:2a:2c:4e:ea:64:13:d7:19:
         e8:d5:59:69:f2:18:1d:63:17:55:da:a2:de:80:77:33:bd:a9:
         c2:ac:5e:97:1a:42:c4:41:a9:70:ae:00:d0:e9:13:3a:53:53:
         c9:e6:30:7f:58:75:ed:8e:8a:4e:39:9b:57:92:e5:af:c1:8a:
         4b:59:9b:6b:de:87:8a:4c:96:8d:92:ff:72:a5:12:08:99:8a:
         0e:0b:a4:d0:cc:4e:cf:2d:cf:dc:f5:91:4d:3f:69:3d:97:07:
         f0:94:2e:c6:4b:51:a0:39:a7:18:e5:c6:ea:a8:dd:b2:09:5f:
         f3:7e:8f:5f:cd:e7:7e:19:94:bc:08:bd:75:ef:95:13:15:7f:
         ed:6f:ea:15:53:ae:6a:c9:8d:81:58:96:b1:df:52:40:47:9a:
         da:39:48:d4:da:52:15:0c:45:54:26:7f:d9:3f:56:41:fb:41:
         6f:11:79:de:fc:94:d8:51:47:63:e0:57:73:a5:39:29:e1:3c:
         22:24:5b:4b:14:aa:61:d1:eb:48:ae:d3:94:a6:26:f6:9a:17:
         65:b9:d3:f6:d0:67:1a:33:12:af:91:da:fe:2f:8f:50:73:79:
         02:fd:55:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:10:22 2026 by rpki-client