Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
File:                     Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft (raw, json)
Hash identifier:          Exvm0a53nO0h6fHzDiF2V7SiuZYoqAtmlOOZ2mremQo=
Subject key identifier:   7C:AC:2C:E4:2E:CC:4E:F8:10:43:75:93:09:1F:DD:51:A8:63:96:83
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Certificate issuer:       /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial:       01A13E26760EEBCEFE0AB50590541EF99F01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
Manifest number:          1AA9
Signing time:             Thu 15 Oct 2026 06:01:10 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:10 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:10 +0000
Files and hashes:         1: Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl (hash: Dt2NcJ28ADc0TQIjmqlaKZrwjl7Fjels0StvekY+DoY=)
                          2: tLACRLHJMNO7pkHg2BdbS9oOBUU.roa (hash: 9tUxOLxvWwiq+19ZOnFgqeZk3zELbv4Ra0UrW4JTYYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:76:0e:eb:ce:fe:0a:b5:05:90:54:1e:f9:9f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
        Validity
            Not Before: Oct 15 06:01:10 2026 GMT
            Not After : Oct 16 06:01:10 2026 GMT
        Subject: CN=7cac2ce42ecc4ef810437593091fdd51a8639683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:e3:84:0d:67:61:92:de:58:cd:59:0c:f0:
                    d2:02:99:e0:f3:a0:e4:d5:47:86:d5:58:36:a0:6a:
                    f2:54:e4:a7:cc:11:34:d1:e4:12:94:79:5c:c4:27:
                    c1:a0:bc:1e:a8:e0:d2:38:89:cc:09:c9:de:5e:98:
                    9f:1e:b1:a5:bd:5e:d7:78:4a:2e:a1:63:70:53:68:
                    ad:d9:f8:43:1d:bb:73:58:b9:55:5b:0c:f4:e9:6f:
                    98:01:7b:b8:c2:d1:28:9e:65:3d:46:ba:04:a9:6b:
                    bf:e1:1d:3d:ec:b3:65:27:fc:1d:c0:88:77:93:1c:
                    c1:ae:bf:35:6d:6b:40:c3:88:6b:59:f9:94:13:22:
                    3d:7c:2e:d8:35:05:69:b4:6d:3e:91:58:75:3f:98:
                    c7:9d:18:23:0f:7d:55:c1:eb:b3:b4:9f:8c:cc:a1:
                    8a:02:52:a9:10:a2:bb:b7:64:0d:27:22:ac:b3:a7:
                    56:82:1a:52:ec:c1:fb:b3:c1:95:e9:16:af:89:98:
                    5e:25:05:a1:f2:f5:a6:ac:59:e5:ff:57:b4:47:ea:
                    34:f8:1f:8e:4f:24:3c:8d:1b:b8:37:73:9c:93:91:
                    c5:61:e5:87:b1:72:b6:b9:42:71:31:eb:8b:84:34:
                    c4:39:9a:39:1e:5f:fe:00:94:8c:14:bb:4e:37:81:
                    7f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AC:2C:E4:2E:CC:4E:F8:10:43:75:93:09:1F:DD:51:A8:63:96:83
            X509v3 Authority Key Identifier:
                keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:1c:56:50:c2:9d:54:1e:a2:61:62:59:61:7c:d2:5f:50:eb:
         62:c3:7e:a5:cb:bf:b7:24:ed:54:8a:72:e3:85:0b:c4:f3:0e:
         9a:d6:72:e1:61:f7:71:fd:cc:0b:fc:76:95:be:68:08:ac:a4:
         d5:5c:a1:ed:92:ff:52:a2:e5:60:6e:17:3f:4c:4e:38:a0:5c:
         d0:85:6a:6a:39:52:8c:aa:f5:03:2c:a9:4b:26:1a:ac:ec:00:
         6a:8b:9d:05:b9:69:9f:4a:9a:1e:51:84:6a:fb:c3:a4:11:40:
         54:b9:be:79:f9:ec:66:b9:06:d6:14:e2:45:a2:50:5d:c5:3e:
         34:14:36:ea:a7:9e:59:69:ad:9e:f0:10:7f:da:b3:cd:12:65:
         2c:fb:82:9f:f3:80:aa:f4:80:af:0a:91:40:55:75:6e:78:21:
         5c:dd:55:cd:f3:8a:3e:23:fa:45:db:23:76:53:24:06:12:dd:
         42:3f:94:2b:10:3a:ff:d2:8e:e7:4d:7f:af:53:f8:e3:98:ce:
         11:69:d1:aa:e3:98:3c:a0:08:fb:ce:0d:e7:5b:75:12:8d:93:
         0e:98:c2:32:68:19:cf:c5:6e:39:09:02:8a:a6:8a:73:4c:4b:
         ee:4d:e1:9e:ab:fc:b7:3f:8f:d4:e6:06:9f:e6:87:cd:5b:43:
         53:e7:4d:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+JnYO687+CrUFkFQe+Z8BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxY2U4YTUwZGQ0MzI3MmI0NzRkNTU0NDNkMmZhYzQ2NTY2
NDc3YzIwHhcNMjYxMDE1MDYwMTEwWhcNMjYxMDE2MDYwMTEwWjAzMTEwLwYDVQQD
Eyg3Y2FjMmNlNDJlY2M0ZWY4MTA0Mzc1OTMwOTFmZGQ1MWE4NjM5NjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow3jhA1nYZLeWM1ZDPDSApng86Dk
1UeG1Vg2oGryVOSnzBE00eQSlHlcxCfBoLweqODSOInMCcneXpifHrGlvV7XeEou
oWNwU2it2fhDHbtzWLlVWwz06W+YAXu4wtEonmU9RroEqWu/4R097LNlJ/wdwIh3
kxzBrr81bWtAw4hrWfmUEyI9fC7YNQVptG0+kVh1P5jHnRgjD31VweuztJ+MzKGK
AlKpEKK7t2QNJyKss6dWghpS7MH7s8GV6RaviZheJQWh8vWmrFnl/1e0R+o0+B+O
TyQ8jRu4N3Ock5HFYeWHsXK2uUJxMeuLhDTEOZo5Hl/+AJSMFLtON4F//QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHysLOQuzE74EEN1kwkf3VGoY5aDMB8GA1UdIwQY
MBaAFAHOilDdQycrR01VRD0vrEZWZHfCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWM2S1VOMURKeXRIVFZWRVBTLXNSbFprZDhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hN2MzM2ItNjgyZS00ZTAwLTgyMTEt
YmI5NDUzMDg0MWU1LzEvQWM2S1VOMURKeXRIVFZWRVBTLXNSbFprZDhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9hN2MzM2ItNjgyZS00ZTAwLTgyMTEtYmI5NDUzMDg0MWU1
LzEvQWM2S1VOMURKeXRIVFZWRVBTLXNSbFprZDhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHRxWUMKd
VB6iYWJZYXzSX1DrYsN+pcu/tyTtVIpy44ULxPMOmtZy4WH3cf3MC/x2lb5oCKyk
1Vyh7ZL/UqLlYG4XP0xOOKBc0IVqajlSjKr1AyypSyYarOwAaoudBblpn0qaHlGE
avvDpBFAVLm+efnsZrkG1hTiRaJQXcU+NBQ26qeeWWmtnvAQf9qzzRJlLPuCn/OA
qvSArwqRQFV1bnghXN1VzfOKPiP6RdsjdlMkBhLdQj+UKxA6/9KO501/r1P445jO
EWnRquOYPKAI+84N51t1Eo2TDpjCMmgZz8VuOQkCiqaKc0xL7k3hnqv8tz+P1OYG
n+aHzVtDU+dNeA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 09:12:24 2026 by rpki-client