Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
File:                     adA-sSuz_i5OlkUcnMPvjunTtfU.mft (raw, json)
Hash identifier:          WvD4pXIhlih4vb3y4sZAlx+FNhNf5PJuAiDKpk84Wjs=
Subject key identifier:   BE:60:BA:9F:DB:C6:FB:BB:84:5F:C9:2D:2B:AC:11:88:E4:FD:C5:DC
Authority key identifier: 69:D0:3E:B1:2B:B3:FE:2E:4E:96:45:1C:9C:C3:EF:8E:E9:D3:B5:F5
Certificate issuer:       /CN=69d03eb12bb3fe2e4e96451c9cc3ef8ee9d3b5f5
Certificate serial:       01A08A1E963CBE0954EA99A7DCC83D30F3BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
Manifest number:          16D7
Signing time:             Thu 10 Sep 2026 07:00:55 +0000
Manifest this update:     Thu 10 Sep 2026 07:00:55 +0000
Manifest next update:     Fri 11 Sep 2026 07:00:55 +0000
Files and hashes:         1: adA-sSuz_i5OlkUcnMPvjunTtfU.crl (hash: IyTfa0GmDMa9g87oQl0XkX8XAir9gJY4eLMoT7wBXZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:1e:96:3c:be:09:54:ea:99:a7:dc:c8:3d:30:f3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d03eb12bb3fe2e4e96451c9cc3ef8ee9d3b5f5
        Validity
            Not Before: Sep 10 07:00:55 2026 GMT
            Not After : Sep 11 07:00:55 2026 GMT
        Subject: CN=be60ba9fdbc6fbbb845fc92d2bac1188e4fdc5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:49:37:9d:28:57:99:6a:52:e6:1c:6d:fa:
                    18:39:70:aa:c8:b9:c6:3f:cc:9e:a4:b9:d2:5b:8d:
                    82:f6:d5:48:41:92:13:bf:fa:38:d5:87:44:62:a8:
                    c6:3d:1e:0b:0a:be:d2:de:8f:dc:ff:43:c5:ce:9e:
                    e7:48:00:ef:80:0d:ad:ed:c2:f2:a3:5d:c7:f9:27:
                    61:57:b5:8c:38:03:af:af:2e:4b:92:a6:4e:44:1a:
                    c5:4e:68:92:72:75:1e:ec:5b:e5:4f:4b:bd:48:c5:
                    26:9d:82:f7:aa:4b:d3:fa:97:60:b2:ae:46:ea:7a:
                    8b:bf:20:75:73:97:c9:ad:f6:f9:0b:60:8e:77:6e:
                    19:50:cc:9a:f6:ab:bf:47:45:e7:63:4d:b1:4e:4d:
                    d4:3c:f4:b4:d4:21:93:e2:aa:46:74:14:57:8f:74:
                    e7:2c:c3:2f:92:de:5a:e3:cd:9a:c0:7f:33:62:22:
                    26:2a:53:87:66:77:03:ab:58:0b:0a:aa:50:f4:db:
                    f1:4e:f3:a9:3a:89:0d:f9:84:c5:a3:49:17:4a:ef:
                    62:25:c6:c5:f0:88:8a:c5:97:35:a5:d6:6e:99:89:
                    dc:bd:05:b4:6d:25:54:e3:64:b0:d6:a4:c8:e4:54:
                    a5:59:3c:7e:50:6d:10:0d:66:7b:ec:c5:69:1f:83:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:60:BA:9F:DB:C6:FB:BB:84:5F:C9:2D:2B:AC:11:88:E4:FD:C5:DC
            X509v3 Authority Key Identifier:
                keyid:69:D0:3E:B1:2B:B3:FE:2E:4E:96:45:1C:9C:C3:EF:8E:E9:D3:B5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adA-sSuz_i5OlkUcnMPvjunTtfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/829bc6-ee1c-45a3-bcdd-057cee05e0e3/1/adA-sSuz_i5OlkUcnMPvjunTtfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:42:42:33:8a:34:f2:2d:47:98:26:43:ce:d1:74:ec:90:bf:
         63:2e:50:c6:e4:87:b1:cf:10:ce:90:6b:30:dd:7e:23:e2:51:
         35:1e:48:23:3d:a0:c1:c4:4a:64:5f:1f:60:59:fd:56:6b:da:
         e7:83:e4:70:68:ea:c4:1d:19:10:1e:0f:63:8e:1b:f6:03:73:
         58:b3:ce:da:f1:75:e1:8b:62:87:58:ed:2d:ca:0f:89:8d:76:
         41:2c:30:c9:8a:e6:d9:ed:9b:38:28:47:28:24:39:42:54:b8:
         90:42:e0:16:02:39:74:d9:70:c9:a7:d5:9f:ca:4b:a0:55:c3:
         40:5f:e3:80:c3:8e:81:bf:31:49:cc:4e:e9:31:78:82:23:cd:
         ff:c2:f6:cc:91:5a:44:19:4b:aa:53:f6:e6:21:c9:fe:f4:38:
         20:bf:30:6c:01:c2:37:49:6d:cf:7a:a2:b4:11:56:aa:02:22:
         f9:fc:21:0e:b1:be:27:5e:ca:4d:35:4b:e1:4e:53:0e:c7:a6:
         36:73:ea:eb:56:82:c8:96:a9:e7:7d:d0:e7:b5:be:74:6e:6d:
         2c:9c:52:86:5a:0a:9d:82:2a:65:17:37:ce:c0:2e:f6:27:75:
         55:0a:f2:b2:d6:4f:33:1b:29:05:95:5d:39:fb:8a:22:74:46:
         5f:31:99:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKHpY8vglU6pmn3Mg9MPO7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDAzZWIxMmJiM2ZlMmU0ZTk2NDUxYzljYzNlZjhlZTlk
M2I1ZjUwHhcNMjYwOTEwMDcwMDU1WhcNMjYwOTExMDcwMDU1WjAzMTEwLwYDVQQD
EyhiZTYwYmE5ZmRiYzZmYmJiODQ1ZmM5MmQyYmFjMTE4OGU0ZmRjNWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFFJN50oV5lqUuYcbfoYOXCqyLnG
P8yepLnSW42C9tVIQZITv/o41YdEYqjGPR4LCr7S3o/c/0PFzp7nSADvgA2t7cLy
o13H+SdhV7WMOAOvry5LkqZORBrFTmiScnUe7FvlT0u9SMUmnYL3qkvT+pdgsq5G
6nqLvyB1c5fJrfb5C2COd24ZUMya9qu/R0XnY02xTk3UPPS01CGT4qpGdBRXj3Tn
LMMvkt5a482awH8zYiImKlOHZncDq1gLCqpQ9NvxTvOpOokN+YTFo0kXSu9iJcbF
8IiKxZc1pdZumYncvQW0bSVU42Sw1qTI5FSlWTx+UG0QDWZ77MVpH4PKhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5gup/bxvu7hF/JLSusEYjk/cXcMB8GA1UdIwQY
MBaAFGnQPrErs/4uTpZFHJzD747p07X1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRBLXNTdXpfaTVPbGtVY25NUHZqdW5UdGZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84MjliYzYtZWUxYy00NWEzLWJjZGQt
MDU3Y2VlMDVlMGUzLzEvYWRBLXNTdXpfaTVPbGtVY25NUHZqdW5UdGZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy84MjliYzYtZWUxYy00NWEzLWJjZGQtMDU3Y2VlMDVlMGUz
LzEvYWRBLXNTdXpfaTVPbGtVY25NUHZqdW5UdGZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjUJCM4o0
8i1HmCZDztF07JC/Yy5QxuSHsc8QzpBrMN1+I+JRNR5IIz2gwcRKZF8fYFn9Vmva
54PkcGjqxB0ZEB4PY44b9gNzWLPO2vF14Ytih1jtLcoPiY12QSwwyYrm2e2bOChH
KCQ5QlS4kELgFgI5dNlwyafVn8pLoFXDQF/jgMOOgb8xScxO6TF4giPN/8L2zJFa
RBlLqlP25iHJ/vQ4IL8wbAHCN0ltz3qitBFWqgIi+fwhDrG+J17KTTVL4U5TDsem
NnPq61aCyJap533Q57W+dG5tLJxShloKnYIqZRc3zsAu9id1VQrystZPMxspBZVd
OfuKInRGXzGZsw==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:48:54 2026 by rpki-client