Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
File:                     9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft (raw, json)
Hash identifier:          8+gdqTwE/eGkxPcfZp+a+wR9MzOZafY4Io6+1f84AxQ=
Subject key identifier:   4F:03:DA:4E:CE:01:AB:03:F6:BA:B4:67:4C:1E:62:D1:AF:13:7C:AD
Authority key identifier: F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A
Certificate issuer:       /CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
Certificate serial:       01A14917BA31EC696E19C128FC7B0B3FECAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
Manifest number:          189F
Signing time:             Sat 17 Oct 2026 09:00:54 +0000
Manifest this update:     Sat 17 Oct 2026 09:00:54 +0000
Manifest next update:     Sun 18 Oct 2026 09:00:54 +0000
Files and hashes:         1: 9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl (hash: 1f5d6mli4mSZdigIvosQ9IAWxxzugfFkVgScyj5ZutU=)
                          2: UEAaPo6VUETHn6B0u4mE40cQPvI.roa (hash: oDl/sgYlJlPoPDa6gI6+975HLzl7ybSw7kcsMPOBkCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:49:17:ba:31:ec:69:6e:19:c1:28:fc:7b:0b:3f:ec:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f59cb923e4069bfe362e2d96ffab2ff31078317a
        Validity
            Not Before: Oct 17 09:00:54 2026 GMT
            Not After : Oct 18 09:00:54 2026 GMT
        Subject: CN=4f03da4ece01ab03f6bab4674c1e62d1af137cad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9a:f8:f1:36:58:e4:e3:14:fe:ba:1c:94:01:
                    f3:c9:d6:43:92:70:41:a4:df:30:36:4f:82:7f:57:
                    3b:d5:b3:11:8b:39:c6:95:e7:14:4b:ae:34:3e:2b:
                    1c:2c:1b:f1:fc:b1:5f:d9:92:08:d9:a3:6d:a7:cc:
                    11:25:35:21:36:26:5a:7a:db:5c:85:1e:df:c7:b2:
                    9f:71:3d:3c:2a:27:db:e4:04:22:22:af:eb:4d:af:
                    11:bd:cf:1a:c0:86:47:87:54:ac:3a:7c:3e:3e:a1:
                    37:5e:9c:74:5a:94:9f:1d:96:2c:d3:41:6b:18:8e:
                    1d:dc:9a:66:6c:ca:c6:45:f1:f5:60:22:61:09:a2:
                    90:b7:94:32:2b:99:6d:a1:52:08:17:de:f3:44:6a:
                    2b:4a:a2:d7:f6:d1:f3:6f:4e:ec:ce:08:ea:3b:f0:
                    98:2b:8a:2d:fb:6f:e0:e2:08:c8:83:da:84:32:c3:
                    76:16:15:e4:4d:b8:15:74:f9:af:f7:91:fe:bb:f1:
                    1f:f8:8a:1f:b9:0d:f6:22:93:cc:c5:b9:ce:04:f2:
                    59:81:70:b1:4b:e9:92:d4:4c:f4:61:77:34:dd:7f:
                    bc:9a:d0:e5:1d:2c:4a:89:51:04:ac:f4:1a:dd:29:
                    0e:90:19:97:8d:90:cf:91:94:9d:02:4c:0a:1c:56:
                    af:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:03:DA:4E:CE:01:AB:03:F6:BA:B4:67:4C:1E:62:D1:AF:13:7C:AD
            X509v3 Authority Key Identifier:
                keyid:F5:9C:B9:23:E4:06:9B:FE:36:2E:2D:96:FF:AB:2F:F3:10:78:31:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Zy5I-QGm_42Li2W_6sv8xB4MXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/726298-0279-4b93-a985-a04ad22e33f3/1/9Zy5I-QGm_42Li2W_6sv8xB4MXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:97:52:04:a4:c5:ba:55:fb:67:68:5e:0c:ae:05:7b:99:a8:
         c8:45:36:8d:f9:cb:10:1b:fe:b4:2f:dc:aa:c6:3f:a2:ab:e6:
         43:bf:7a:2c:9f:e8:bf:95:d6:89:4a:26:cb:5d:c7:08:e8:b7:
         7a:43:1b:2e:d4:ac:01:67:11:22:44:f1:16:2d:36:81:78:f6:
         fd:c1:a5:34:52:6e:27:8e:3c:cc:20:39:cb:31:a3:b7:7b:8f:
         09:3b:7c:72:81:7e:b5:82:51:18:ed:c4:93:b3:0a:35:46:64:
         e2:76:bd:0e:d6:40:ce:4a:05:96:7e:44:e1:46:cb:65:87:46:
         6b:61:10:56:e0:21:10:ac:f3:07:45:fb:5f:22:a7:21:65:2f:
         a2:25:7f:5d:9d:53:28:e2:a3:ac:8c:f6:47:86:c6:dc:db:a3:
         87:ed:2b:db:54:d7:17:16:e4:be:98:12:a4:3f:52:ac:4a:ff:
         ba:9f:6c:8c:00:2e:58:06:f0:ab:1a:e4:c8:42:b8:7a:a7:96:
         b3:37:41:f4:aa:c3:fa:84:91:93:09:c7:31:1a:ae:a1:5f:0f:
         f7:83:e0:ef:0c:93:fd:2e:4d:15:c5:39:ac:25:ea:73:f6:d1:
         e4:45:0b:4e:65:8f:cf:c9:d4:23:af:df:6f:8b:76:bf:04:c9:
         ad:25:77:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 12:41:06 2026 by rpki-client