Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
File:                     IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft (raw, json)
Hash identifier:          lB/KtZgRr2xKrDo6ZRM7Hg7evQkCQSR+eQNWPb0mva4=
Subject key identifier:   D1:CC:C6:E3:1A:F8:15:CB:CE:2F:75:BD:84:80:EF:CB:3D:87:17:A3
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Certificate issuer:       /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial:       01A15589F2133CEFF7FC080B6F449F714D45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
Manifest number:          139A
Signing time:             Mon 19 Oct 2026 19:01:06 +0000
Manifest this update:     Mon 19 Oct 2026 19:01:06 +0000
Manifest next update:     Tue 20 Oct 2026 19:01:06 +0000
Files and hashes:         1: IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl (hash: qQikToXGZ1zFX5srKc3RlN3bCrO0Ti3ECQNPQDDTG3A=)
                          2: Mlg2-dFb_pDIGLBjBDPo1_IYStc.roa (hash: 3gsMMrCsLQ277PtzM/yqX0/jKqAoyQGVpd57kpWn5Y0=)
                          3: Panm1LrJmzFbCeMY6auzDqltMH4.roa (hash: pK/SKAriGKfng+iefu9gjvhHjR0adoVJ2FdRhaw344s=)
                          4: p0Xs1g2gPrpuR1TetywC5LyG04w.roa (hash: Z4fC0K+qHQ0x60Cz0JhKoddXxrrHYGk8WlzQTKAj6OU=)
                          5: t1JuJqtlm5tkcuv11rLCrZPDDhA.roa (hash: W72v12TOiNZdKxjgiVDf5vxJzfgbF5c3IIwEwUVHgBQ=)
                          6: uXzbb7T22o7J6EkVQREXQcswsLw.roa (hash: ydW5n2G12ZkBLCFYY+WI/eQDK/fBHPVgfipaLbRLN/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:55:89:f2:13:3c:ef:f7:fc:08:0b:6f:44:9f:71:4d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
        Validity
            Not Before: Oct 19 19:01:06 2026 GMT
            Not After : Oct 20 19:01:06 2026 GMT
        Subject: CN=d1ccc6e31af815cbce2f75bd8480efcb3d8717a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:01:9e:9d:e9:3b:bf:ac:de:32:6e:49:d4:3b:
                    38:70:89:a0:69:56:6e:b3:15:d2:6c:04:6e:e0:ac:
                    38:a6:81:3e:2e:dc:92:f7:b0:c2:5a:b0:21:7f:25:
                    cb:1c:ae:43:a7:2c:1f:b8:0e:f5:4a:28:39:a9:ad:
                    38:f2:a9:a4:c0:71:4e:d2:6b:76:df:0f:ed:b7:b4:
                    c3:4c:dc:c6:ee:db:1a:4e:b3:4c:dc:d7:17:6b:7e:
                    b1:c9:3c:a9:12:fd:b8:57:2a:e8:1e:8a:ea:86:0b:
                    34:58:9b:f1:db:2b:2b:39:5a:a5:76:64:64:3b:06:
                    a3:d7:f6:e6:0c:23:d1:62:34:e7:03:fb:42:f4:87:
                    af:03:db:d4:a8:fb:d4:dc:9e:84:f4:cc:49:e1:b2:
                    f9:49:87:15:a8:b6:db:4c:28:96:bb:f0:ca:c1:a4:
                    42:67:0a:1b:99:01:fb:41:76:7e:e7:92:5a:d7:a2:
                    ef:2b:c2:e3:5d:c8:b6:16:eb:b6:90:cd:18:c8:c1:
                    2f:ea:44:2e:91:94:a7:8d:5f:d1:f3:e7:ff:80:d9:
                    4b:56:ce:73:45:86:ea:aa:74:e6:4e:0f:73:fb:f7:
                    b6:a9:5d:b5:3c:45:c3:8e:e4:4d:39:0b:db:1d:ac:
                    42:19:11:92:df:e7:4f:a5:1d:f9:40:1b:94:a4:c5:
                    1a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CC:C6:E3:1A:F8:15:CB:CE:2F:75:BD:84:80:EF:CB:3D:87:17:A3
            X509v3 Authority Key Identifier:
                keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:34:53:69:2a:08:c7:ab:d8:56:be:46:bb:c1:42:9f:7a:9b:
         34:85:f3:8b:e6:d6:c4:6d:ad:f4:df:83:9b:a1:22:a3:41:8c:
         c8:f1:a5:a0:00:fe:31:44:db:36:92:66:11:d4:a8:55:07:36:
         5b:b2:ca:c4:8c:12:ed:aa:34:26:1e:ca:67:7c:66:0d:94:5a:
         c5:41:0a:e4:e2:7a:16:c8:cb:15:a3:14:dd:70:79:4f:68:24:
         df:53:e1:b4:37:e8:a0:a4:ae:65:72:e0:0b:5c:a3:05:e4:f8:
         24:8a:d7:4d:35:c2:0f:06:64:57:9a:07:14:b8:d7:3e:2f:4c:
         55:c3:64:5c:a3:d7:27:e3:59:7d:59:35:d8:7d:24:05:4d:d2:
         9a:b0:2c:09:ea:31:9d:c7:39:f3:c6:e0:fc:f9:2a:2a:0a:1a:
         a3:93:68:ce:d0:2a:6d:aa:a1:25:bb:82:4a:0f:13:b0:d0:f3:
         69:3e:22:e8:17:27:17:c7:c1:c0:26:8a:6e:06:b9:f0:6c:30:
         c6:2c:f0:74:1c:6b:5a:52:e5:2f:63:c7:1c:09:1f:07:3f:71:
         cd:d9:76:65:a0:c9:69:68:72:41:88:72:5b:41:ba:59:e7:54:
         fb:a6:ce:8d:f9:f8:02:24:08:64:76:a9:f8:60:1c:71:8c:9f:
         9d:b2:ee:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 01:50:40 2026 by rpki-client