Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
File:                     iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft (raw, json)
Hash identifier:          0VLKo1NsLaqALKyRnNKdZFQy6kdAq/17G6qnAjExsi0=
Subject key identifier:   9F:31:20:22:0E:B2:B8:56:19:C0:9A:19:E0:DC:00:E5:DA:5F:11:1E
Authority key identifier: 88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72
Certificate issuer:       /CN=8829792e3ff21fc35827f68a78c8050015c66a72
Certificate serial:       01A17C976AD1FF03A87FDF763920ECEF6B9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
Manifest number:          1AC9
Signing time:             Tue 27 Oct 2026 09:00:59 +0000
Manifest this update:     Tue 27 Oct 2026 09:00:59 +0000
Manifest next update:     Wed 28 Oct 2026 09:00:59 +0000
Files and hashes:         1: 33ZsgU5AHkIb_3u_7p6IlSFFgCg.roa (hash: baStD7TfXhuGuW8n2xQfJJOjFkibkZZVuX/gIDwnSdY=)
                          2: IaXoeRFo8oZIZuTY3duOe59BUCc.roa (hash: 8fZ9vrPYI8jxQ4Q3pQ1/ew70xq1NmBM7Qvx8mbUZu5w=)
                          3: OQmMIMjDOQN06C6KMmTj90x5Jn4.roa (hash: rSRTdka0k9dWxPdjRHeOyCCKpvyUvfBxfDJ/hCjcRGU=)
                          4: iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl (hash: D4qjleTP7Z81UPQTm9HgjohgIdlkduAqDO9ar/swwnk=)
                          5: j-Up8hFmPuaMHlwnlU5UXlUhXtw.asa (hash: OyURCTcABWjZtAdI4Hhx06lln4W7ArOP0N9mURhOPpo=)
                          6: nV9LKFQOb8Hp142OMT0f6AJdVEk.roa (hash: KRIFtNkWuM4kbcZ05QZ+Sv7d0yGN8E/gvpyTo0kQYZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:97:6a:d1:ff:03:a8:7f:df:76:39:20:ec:ef:6b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8829792e3ff21fc35827f68a78c8050015c66a72
        Validity
            Not Before: Oct 27 09:00:59 2026 GMT
            Not After : Oct 28 09:00:59 2026 GMT
        Subject: CN=9f3120220eb2b85619c09a19e0dc00e5da5f111e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:e8:07:ee:32:ab:42:1e:18:21:c9:77:f9:
                    b7:56:c6:6b:16:7a:26:d0:57:43:8a:c2:5b:34:34:
                    b4:2d:9d:bf:d7:23:b4:28:d3:26:17:01:ad:a5:d3:
                    e2:fa:42:e4:47:b6:06:fe:8b:83:54:67:69:01:2a:
                    76:9d:00:41:a0:02:96:2e:79:e6:28:49:a3:88:1a:
                    7a:8e:0f:ac:09:9c:e6:79:b6:10:b7:6f:00:dc:6e:
                    bc:c3:70:e4:4f:d1:84:d4:ef:01:8b:ce:08:6e:43:
                    f8:ce:6e:ca:14:46:9f:d7:48:aa:28:b1:0b:49:d5:
                    27:05:6f:0a:e4:d0:64:c9:53:b5:28:98:ad:37:01:
                    61:e9:72:24:2a:89:b8:f4:bb:6d:de:48:4e:5d:f3:
                    4b:69:bc:1e:b5:e5:ec:50:cd:a6:13:04:c7:37:f9:
                    61:02:ef:7d:39:64:c9:e5:28:d8:a9:6d:cd:5d:d3:
                    4f:eb:31:b7:cf:75:ef:bd:3d:b7:fe:e7:f2:15:26:
                    1e:de:9f:4d:94:37:91:a8:19:c7:da:18:4a:ca:f0:
                    b4:bc:c8:4e:f7:db:b0:23:d6:45:ad:b4:31:25:e4:
                    8b:9a:06:38:c4:4d:64:d3:de:03:9e:93:48:8e:01:
                    93:76:d6:94:6c:81:4f:51:28:a2:2b:19:2e:9a:bf:
                    ee:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:31:20:22:0E:B2:B8:56:19:C0:9A:19:E0:DC:00:E5:DA:5F:11:1E
            X509v3 Authority Key Identifier:
                keyid:88:29:79:2E:3F:F2:1F:C3:58:27:F6:8A:78:C8:05:00:15:C6:6A:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iCl5Lj_yH8NYJ_aKeMgFABXGanI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/6f385e-7fe1-49ad-81fb-1882f4c276cd/1/iCl5Lj_yH8NYJ_aKeMgFABXGanI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:83:ac:b4:e7:7e:c1:f9:30:f7:99:03:f3:75:80:8c:6c:07:
         59:7c:b3:90:9f:62:ed:e2:55:ca:15:56:ec:27:e9:f2:4f:4e:
         91:1d:65:ca:79:ce:bb:5d:66:e0:4f:b9:43:54:ec:f5:c1:e0:
         db:ef:b2:13:0e:78:ed:8d:a7:cc:1a:81:40:2f:3b:e2:d6:f6:
         40:1b:69:27:f4:0a:63:c1:d2:78:e8:57:4e:81:5f:93:5c:db:
         54:89:32:29:60:6b:68:fb:ac:d6:40:86:8d:d3:54:e5:f0:98:
         79:86:a3:ce:cc:3c:7f:da:b9:33:e4:a3:85:42:2c:b6:48:f5:
         e3:f1:74:d4:36:93:92:94:16:f6:5d:d0:db:c6:9b:d4:eb:05:
         8c:77:d0:85:ca:60:b3:a2:35:29:a9:88:78:a6:5e:d1:c1:7b:
         ae:66:dd:d2:e6:ce:80:83:16:ff:a5:fc:72:d0:06:9e:c7:5b:
         77:e1:69:d5:32:de:a2:0b:07:c6:1e:dd:dc:f1:3b:00:51:f0:
         2b:b9:85:63:19:6d:6c:59:1b:03:e7:48:25:fc:46:a5:fb:6c:
         0e:d5:cf:d0:13:99:29:46:1a:4c:df:6f:83:2a:e8:72:ea:25:
         ff:a8:9f:8d:dc:2c:f6:57:db:e8:28:b6:72:99:fc:33:ea:a9:
         9b:6a:07:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:50:54 2026 by rpki-client