Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
File:                     CccUYOpB0-ZWXEtBCybJ54zhb58.mft (raw, json)
Hash identifier:          L1U7Alh5BXV6MBqpxGvpMINTtcawpiYEq2Z0wX2CCq4=
Subject key identifier:   6B:7E:84:4E:55:50:D1:08:C7:85:A7:DB:03:A3:D9:04:79:06:A7:64
Authority key identifier: 09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F
Certificate issuer:       /CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
Certificate serial:       01A11FAE6A5DC00B92D86B070C23FF1D48C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
Manifest number:          1A25
Signing time:             Fri 09 Oct 2026 08:01:26 +0000
Manifest this update:     Fri 09 Oct 2026 08:01:26 +0000
Manifest next update:     Sat 10 Oct 2026 08:01:26 +0000
Files and hashes:         1: CccUYOpB0-ZWXEtBCybJ54zhb58.crl (hash: wR0Y2YSV11Lyt0xis8ETQIocRVV+dXAh6w1BPUE8VlY=)
                          2: utqV7JvD2fPW5q4tE2tywy7q_gU.roa (hash: rBBPe7YgsDv+7/FRm135TSdCTknOZAtf1EPjWsG38hY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 08:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1f:ae:6a:5d:c0:0b:92:d8:6b:07:0c:23:ff:1d:48:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09c71460ea41d3e6565c4b410b26c9e78ce16f9f
        Validity
            Not Before: Oct  9 08:01:26 2026 GMT
            Not After : Oct 10 08:01:26 2026 GMT
        Subject: CN=6b7e844e5550d108c785a7db03a3d9047906a764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:81:1b:91:ad:65:5e:dd:6c:3c:30:32:92:fe:
                    40:ea:83:eb:b7:6a:5d:5e:ba:46:57:39:41:a7:e9:
                    e2:a1:6e:fc:94:99:05:04:c8:5d:34:38:e3:5d:57:
                    9a:42:83:d2:86:5e:6b:10:cf:3a:78:35:d7:40:3c:
                    eb:c1:09:60:3b:58:b1:e9:51:9e:12:90:92:1a:af:
                    98:c6:1a:b7:ea:f1:ea:02:2d:ed:40:28:83:b1:cf:
                    b3:52:5f:9a:d9:f0:bd:13:94:26:82:d3:34:68:1b:
                    ee:ae:6b:60:8c:b2:c1:01:da:16:af:27:a0:66:d4:
                    eb:e2:26:08:7a:cb:ea:22:26:6a:5f:cd:b7:98:84:
                    6e:49:82:44:1d:5a:4c:26:a9:12:d9:e5:a9:75:06:
                    1f:18:d8:56:f8:95:ae:04:e4:2a:91:58:c2:6c:64:
                    5b:48:da:9c:2f:43:01:f1:37:6a:13:c2:f8:2b:d9:
                    88:e7:8f:d0:14:95:b8:89:47:ff:42:4f:43:0c:1f:
                    73:6a:03:4c:10:24:fb:eb:24:f5:a6:db:07:3d:ce:
                    53:b0:6f:aa:7c:fa:dc:15:07:b5:b9:1d:e1:c6:41:
                    17:ab:b1:ac:64:dd:3c:3f:65:3b:a0:c8:d9:81:9a:
                    e3:e1:30:db:13:e8:fa:e7:7d:76:26:03:8b:74:f1:
                    15:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7E:84:4E:55:50:D1:08:C7:85:A7:DB:03:A3:D9:04:79:06:A7:64
            X509v3 Authority Key Identifier:
                keyid:09:C7:14:60:EA:41:D3:E6:56:5C:4B:41:0B:26:C9:E7:8C:E1:6F:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CccUYOpB0-ZWXEtBCybJ54zhb58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/115703-920b-4c51-b340-86cf06acbf41/1/CccUYOpB0-ZWXEtBCybJ54zhb58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b7:f0:13:1d:76:4e:a5:89:6a:dd:eb:e3:63:a9:3b:71:09:
         ab:c4:4d:cb:3a:d9:0f:64:e6:7e:e9:50:82:e2:5e:00:2f:7a:
         56:45:28:ab:f1:a4:b7:47:d3:52:de:e5:c8:a3:ff:72:e7:53:
         8a:f7:b6:94:f8:1e:a6:94:dc:56:8f:cf:24:04:37:17:7c:82:
         42:ab:18:a4:40:bf:db:fe:db:7d:5b:87:6a:c7:bf:92:ea:9f:
         c2:e6:87:e7:ff:e4:62:6f:62:15:5a:80:e1:59:bc:20:43:1e:
         41:72:9c:ac:41:2f:96:aa:0f:75:3b:ab:13:ca:3c:37:a2:03:
         c8:c1:9d:1d:83:e7:bf:d7:da:a0:90:2c:2f:5e:0d:55:d2:8d:
         61:3d:7c:10:3d:0c:cf:9a:de:e7:fe:94:f7:c5:52:15:b3:11:
         91:62:bf:32:12:b0:4a:17:72:53:cc:85:92:ec:c5:35:82:ed:
         2e:1a:8d:61:06:d3:38:d5:f7:b5:f2:c6:7a:e3:54:84:96:2d:
         84:fd:f9:52:0d:a4:df:58:79:dc:fd:6a:ff:d2:c0:96:f2:b9:
         1c:9f:b9:2e:b2:d4:fd:01:2e:58:23:15:cc:f8:2d:36:0d:bc:
         aa:d0:ec:e6:89:aa:16:f9:a4:dc:73:ec:28:e0:b9:72:f0:de:
         73:2d:ef:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 17:42:35 2026 by rpki-client