Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
File:                     CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft (raw, json)
Hash identifier:          9oZ2dy43TOAQDoC4VI3+X1SIQkU2HozlmBsKKeaDhns=
Subject key identifier:   A1:5F:D5:94:9B:D4:E4:3F:0C:62:87:46:40:A2:55:8D:A7:47:17:E7
Authority key identifier: 0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93
Certificate issuer:       /CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
Certificate serial:       01A13E26AA131EC7E2F92C79E14F44FB3D79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
Manifest number:          1AA5
Signing time:             Thu 15 Oct 2026 06:01:23 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:23 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:23 +0000
Files and hashes:         1: CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl (hash: J5n/t4vEbiik+DcGNwZiNZuxCo6zaR7l472/i1zg2HM=)
                          2: qrwmnr0OEc9nAnaMZvs0-umIs9w.roa (hash: PZB6TM1PU5xxv8QQowAJ7WYR8h3/v/M9wazTIxePSNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:aa:13:1e:c7:e2:f9:2c:79:e1:4f:44:fb:3d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b35acbf30559668ea18ea3f10b297ee64c8e493
        Validity
            Not Before: Oct 15 06:01:23 2026 GMT
            Not After : Oct 16 06:01:23 2026 GMT
        Subject: CN=a15fd5949bd4e43f0c62874640a2558da74717e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:99:bf:7a:a3:8f:85:41:d1:3e:15:1f:67:98:
                    94:f7:43:cb:86:4f:1e:76:a3:08:13:ad:b7:6b:6b:
                    43:05:9a:77:03:ab:6b:b2:a1:56:22:93:b6:f4:b7:
                    38:51:01:d3:09:c1:c9:c1:90:92:bc:64:f6:ee:6c:
                    20:38:ad:8f:66:ec:6b:ff:72:59:9b:84:52:0a:1d:
                    0a:c9:ab:0f:00:6c:17:a0:27:be:9d:8b:f9:e3:b9:
                    b8:37:f3:d5:aa:a6:ea:cf:8f:fb:f6:da:7b:50:d4:
                    27:1a:f2:44:cc:83:99:5c:71:a4:83:ec:7a:5e:68:
                    23:fa:a5:2d:a4:a9:43:de:5f:c0:9d:f6:87:e5:c9:
                    d4:bc:3a:14:d3:89:13:40:63:ce:29:75:46:ea:6b:
                    b6:5c:4f:25:4a:4c:8a:de:77:4f:2a:04:00:f7:05:
                    2a:e9:b7:e1:e8:2b:47:92:23:c2:b5:61:2f:67:85:
                    16:e6:2c:c1:30:ca:4b:07:49:8e:18:98:0d:8f:94:
                    95:ec:f7:4e:71:5d:72:e1:ef:ea:9c:f9:eb:76:0f:
                    87:36:2e:fe:89:86:72:f9:f5:a8:d8:7f:b8:6e:42:
                    56:a9:ab:e7:3b:67:d5:e7:5a:24:4e:25:a8:8b:a4:
                    24:a2:4d:b2:b9:68:e6:8a:9c:ab:7b:58:cb:4b:96:
                    9b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5F:D5:94:9B:D4:E4:3F:0C:62:87:46:40:A2:55:8D:A7:47:17:E7
            X509v3 Authority Key Identifier:
                keyid:0B:35:AC:BF:30:55:96:68:EA:18:EA:3F:10:B2:97:EE:64:C8:E4:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzWsvzBVlmjqGOo_ELKX7mTI5JM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/72fb45-30c7-4a53-a2db-b4c9e2b0d156/1/CzWsvzBVlmjqGOo_ELKX7mTI5JM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:19:17:4a:d6:fb:a7:a5:70:7b:6f:b0:1a:fe:d1:c7:5f:3a:
         2e:14:37:4b:cb:dd:16:33:eb:67:6f:2d:f3:57:8d:5f:62:55:
         f4:6a:51:a2:3f:1c:9c:bb:20:53:3b:50:a7:e9:cb:44:51:c1:
         87:f8:c4:d9:07:46:90:62:e3:60:b6:ca:2a:c9:fd:09:bb:1f:
         18:a3:4f:ef:cb:52:2b:9b:e5:5f:fb:8c:91:c9:49:b3:15:19:
         24:6b:da:dc:c0:31:e9:9b:d9:e0:3f:72:04:8d:f2:99:58:88:
         5e:dc:05:09:b4:b5:a9:05:88:c1:50:f0:17:6b:0d:34:e8:9b:
         8f:5c:f0:15:75:7f:62:34:a7:e4:18:4e:b1:3e:10:b8:84:dd:
         5f:20:6a:fa:e5:4a:f6:97:3f:9e:72:bf:cd:32:f1:c8:c1:8a:
         9f:ee:01:21:89:36:72:9e:2e:92:5e:c4:57:d8:77:25:1c:c8:
         e7:d6:fb:72:06:b5:b0:68:16:75:ef:44:1a:6d:65:f6:0c:84:
         ea:a2:94:95:e2:99:3d:bb:e9:46:ff:b9:70:35:4a:1b:0d:2f:
         03:84:9b:5c:a1:be:cc:b0:a9:8e:4f:14:ca:79:bd:e8:04:b0:
         ab:70:f9:2c:28:c7:70:f8:f4:cb:9d:f1:32:6e:2c:84:e3:6b:
         f7:37:69:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:31:01 2026 by rpki-client