Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
File:                     moidBLkf1wkovxGCfAlEQhytSjQ.mft (raw, json)
Hash identifier:          WuX0aFmOxkhMbVbCgOPhpaXDjdGcsj7o3Fczfgyp0ZA=
Subject key identifier:   FA:58:32:11:27:43:96:BC:EA:1A:7F:93:D6:3D:35:07:39:E3:5E:D9
Authority key identifier: 9A:88:9D:04:B9:1F:D7:09:28:BF:11:82:7C:09:44:42:1C:AD:4A:34
Certificate issuer:       /CN=9a889d04b91fd70928bf11827c0944421cad4a34
Certificate serial:       01A11A1955E6165E1CC3E16A95DE43D3AEBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
Manifest number:          DC
Signing time:             Thu 08 Oct 2026 06:00:30 +0000
Manifest this update:     Thu 08 Oct 2026 06:00:30 +0000
Manifest next update:     Fri 09 Oct 2026 06:00:30 +0000
Files and hashes:         1: moidBLkf1wkovxGCfAlEQhytSjQ.crl (hash: rLQlGewH/KRN9FkP9059TBLs4M6O9JUKdSAG6uz5hl8=)
                          2: syeK9CuRFEI8WMGC-N6sOcltkCY.roa (hash: KOrLoavn62KKYkUh98qE+rNDjdVH+vCnvaVDIjJnLg8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 06:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:19:55:e6:16:5e:1c:c3:e1:6a:95:de:43:d3:ae:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a889d04b91fd70928bf11827c0944421cad4a34
        Validity
            Not Before: Oct  8 06:00:30 2026 GMT
            Not After : Oct  9 06:00:30 2026 GMT
        Subject: CN=fa583211274396bcea1a7f93d63d350739e35ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:02:29:36:d3:1d:64:c7:99:8f:bc:2a:61:
                    f1:87:73:1e:d0:26:ed:51:c1:47:44:c0:a9:91:09:
                    4f:f6:6b:27:d3:27:0d:3d:95:17:d8:e8:28:0d:72:
                    ac:62:dd:5e:7e:db:71:9f:96:3b:34:50:65:ab:96:
                    ed:fa:85:a9:75:47:f0:3f:03:8c:b4:70:39:2f:e5:
                    18:53:41:5e:a4:8d:9d:ed:17:85:b4:f7:3d:97:04:
                    6f:0d:e1:93:a4:a7:0b:74:c6:f4:7c:77:a3:97:94:
                    1b:e6:67:99:a3:d8:cf:e9:69:e3:a1:5c:b9:01:1f:
                    45:df:51:00:fb:24:db:18:74:c5:f9:25:d2:5e:63:
                    58:59:32:ef:65:fd:23:26:db:85:53:ec:67:3a:c9:
                    c8:da:87:1d:f4:79:5a:98:e0:52:df:6b:aa:6c:09:
                    1b:81:df:9a:73:ea:45:c2:d7:f2:db:db:94:4a:dc:
                    3c:bf:f4:41:c8:93:d1:af:0b:69:fb:8d:1e:d6:b8:
                    85:3e:b8:37:f6:56:33:92:ef:bc:39:fc:83:28:26:
                    32:21:0e:92:27:f7:c9:fc:41:51:cd:52:47:91:c9:
                    17:a6:b5:58:a6:06:9e:90:01:bb:94:e8:2b:5e:14:
                    ce:3a:ae:51:e7:b6:3a:9d:54:e1:aa:93:d2:3b:f8:
                    a7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:58:32:11:27:43:96:BC:EA:1A:7F:93:D6:3D:35:07:39:E3:5E:D9
            X509v3 Authority Key Identifier:
                keyid:9A:88:9D:04:B9:1F:D7:09:28:BF:11:82:7C:09:44:42:1C:AD:4A:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/moidBLkf1wkovxGCfAlEQhytSjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7ee015-262e-4947-8f67-a29a4bbd52eb/1/moidBLkf1wkovxGCfAlEQhytSjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:94:46:b2:ea:56:f5:0e:e4:f1:96:4a:82:6e:5a:40:f4:b7:
         fd:a8:3b:3a:27:76:b5:8d:97:8f:7f:2c:e3:a0:fd:35:b8:22:
         4e:a6:92:30:73:6e:36:81:71:48:40:37:86:89:ff:38:42:96:
         ce:be:4b:5b:78:d0:86:44:0a:b3:53:16:c6:70:32:25:f3:07:
         30:67:65:12:43:47:e1:5a:41:e7:1d:10:d6:94:93:e0:6f:0b:
         77:23:81:36:30:ab:16:14:af:b6:64:89:12:98:25:a3:b5:ff:
         4b:ca:2a:dc:95:88:39:51:41:d8:fa:95:6f:20:5a:7c:38:9a:
         ed:c1:a8:44:4c:4c:fe:23:56:b5:b5:7f:38:3b:2d:74:1d:2a:
         5b:49:fc:db:5c:65:44:79:44:52:0f:09:82:20:f5:f0:09:24:
         b7:07:34:67:e2:83:a9:56:52:a4:e2:06:96:85:95:9d:53:e0:
         a0:d2:58:6c:ce:a2:71:3e:58:39:83:f5:fa:c1:26:ba:5b:30:
         c9:0f:66:2b:27:15:37:cb:5e:fd:84:4c:bd:a2:cc:c7:fd:6e:
         fa:93:be:cb:f8:64:5d:55:3a:6d:05:fa:4e:45:e5:68:bb:23:
         e2:56:e2:d0:1e:5a:38:0b:ca:d0:be:7a:d4:32:59:39:cf:8c:
         cb:86:dc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 12:32:22 2026 by rpki-client