Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
File:                     AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json)
Hash identifier:          Q8cV3F0/yk15Do32ccBTsjisWfM7IlDsxoa65vG/Cpc=
Subject key identifier:   61:28:25:6E:A9:24:A5:43:15:99:FD:B6:81:98:6B:32:98:73:76:97
Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Certificate issuer:       /CN=0280d5aab8ee72daa352871fba72eca451a70edc
Certificate serial:       01A13F021B428156ECF18B4E0E7C686AD4CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
Manifest number:          0D5E
Signing time:             Thu 15 Oct 2026 10:01:04 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:04 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:04 +0000
Files and hashes:         1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: VDfdbss0J5QL05AdgzoaVnzSlHnfm6EMbqbcQMNgQNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:1b:42:81:56:ec:f1:8b:4e:0e:7c:68:6a:d4:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc
        Validity
            Not Before: Oct 15 10:01:04 2026 GMT
            Not After : Oct 16 10:01:04 2026 GMT
        Subject: CN=6128256ea924a5431599fdb681986b3298737697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:fd:36:38:2d:1c:02:03:3c:0a:4a:d0:f5:
                    4e:e3:b7:e3:47:69:df:4f:0e:7e:f2:b2:9c:77:3c:
                    d7:7b:f7:b5:ec:a3:44:0a:88:13:c7:41:b9:17:1b:
                    d5:db:03:f0:17:dd:5b:a8:05:ab:a3:0d:ae:56:d6:
                    19:7c:38:27:25:d6:e0:75:8b:c6:0d:e3:4d:c1:5f:
                    a5:0d:43:c7:38:72:c5:fe:11:4a:72:e0:c4:21:3c:
                    9a:fe:48:45:27:27:61:1c:6a:e5:84:dd:74:fb:61:
                    35:6b:2c:53:2d:8a:49:b8:8b:49:11:06:0c:46:7d:
                    dc:69:cb:47:39:3d:72:b2:b4:b5:fe:e0:9b:7e:41:
                    aa:c9:8f:88:89:40:45:58:5a:81:72:1a:cd:a4:50:
                    3a:58:20:3a:7d:d2:c1:02:20:d1:71:b8:a6:de:cc:
                    5b:80:bc:1e:09:38:ee:19:e2:d7:82:22:22:65:04:
                    95:b8:4a:6b:8c:5f:e3:60:af:b2:45:b1:59:8d:fc:
                    a7:27:26:2c:dc:0c:2d:18:aa:e6:ac:f7:ed:5b:f8:
                    72:a1:b5:f0:2d:f1:53:ea:c1:c5:83:48:06:aa:7a:
                    27:a6:ab:45:0d:41:7d:7b:49:a8:10:6c:17:f7:fe:
                    2a:64:e1:5a:67:28:19:b7:91:07:aa:c6:07:ee:f0:
                    a7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:28:25:6E:A9:24:A5:43:15:99:FD:B6:81:98:6B:32:98:73:76:97
            X509v3 Authority Key Identifier:
                keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e1:26:55:31:52:41:4a:1f:b7:ec:6d:88:ce:6e:62:cd:f7:
         33:17:0f:f1:d8:17:1b:85:36:3e:ef:b1:ff:f9:99:fc:b5:9d:
         1b:02:9a:b1:73:91:88:e0:fb:30:be:53:8d:ea:ed:08:1b:34:
         8e:69:ac:07:ef:f8:1a:6c:7e:23:09:50:d8:95:ee:50:34:ba:
         1f:ff:e1:74:0b:76:17:e5:2e:f4:aa:36:16:d4:b8:f1:97:92:
         cb:9c:db:7b:46:be:63:29:d5:d6:30:f4:4d:f8:ab:f1:ac:2c:
         07:89:e6:6c:fc:e5:84:32:8f:d4:fc:35:2e:6e:44:fa:54:7f:
         b2:c4:b3:4c:76:71:9f:1c:2a:1d:ea:fd:18:a4:82:86:77:99:
         b5:fa:74:5b:00:fa:3d:a4:ed:af:d4:17:da:58:da:8c:b9:83:
         ad:e6:4f:a0:21:b6:a2:97:c0:bf:8f:a4:04:99:2f:4b:80:be:
         3c:2a:40:e1:5f:ae:31:50:ee:b9:6c:41:8f:20:a0:96:31:a0:
         ba:62:4f:b7:af:af:ac:5b:be:43:5d:1d:95:33:d3:af:7b:01:
         80:24:45:83:4e:8a:25:b1:85:f8:01:09:cd:ca:59:68:9f:6b:
         11:86:9a:d8:4b:fc:1e:5d:c0:eb:f9:f8:25:b0:bc:55:ea:29:
         1f:a3:d0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:37:59 2026 by rpki-client