Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
File:                     1-6eRi79aqA8USTetGWXqA_Alwi4.mft (raw, json)
Hash identifier:          YIddtHxVg3AhtOVqIUSjbfJ/WDWGcb2IGY4Yqva+rj4=
Subject key identifier:   FB:3C:13:24:94:C2:46:43:1A:AD:B2:8F:3D:12:CC:55:9B:01:DA:91
Authority key identifier: FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
Certificate issuer:       /CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Certificate serial:       01A18D54B6431D0497B35AA7FBB4C954D773
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
Manifest number:          04B1
Signing time:             Fri 30 Oct 2026 15:01:41 +0000
Manifest this update:     Fri 30 Oct 2026 15:01:41 +0000
Manifest next update:     Sat 31 Oct 2026 15:01:41 +0000
Files and hashes:         1: 1-6eRi79aqA8USTetGWXqA_Alwi4.crl (hash: 8KG+MFrqAvBTUChbUp8GFArzJ3izJbbsDDB7kt97POQ=)
                          2: 9eltQp3YyGaMMK8ILEOplZdeUGc.asa (hash: tdNDRLryj+1nuc3Md9jQU3Eln6eMmSjyoAEEcNWc4Es=)
                          3: k3OU5IbsL93-_3lodtzKMZ_irSg.roa (hash: N0y0RdnbxB4G2UQPBSuq2ffyQtcz3uGKqNQzZ4Z0Sic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 15:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8d:54:b6:43:1d:04:97:b3:5a:a7:fb:b4:c9:54:d7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
        Validity
            Not Before: Oct 30 15:01:41 2026 GMT
            Not After : Oct 31 15:01:41 2026 GMT
        Subject: CN=fb3c132494c246431aadb28f3d12cc559b01da91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:19:c5:2b:f5:df:d4:d3:f7:f3:f4:45:5b:44:
                    f9:b7:6d:eb:57:e8:1b:b8:38:ae:80:de:42:d2:c3:
                    ed:20:d6:f4:64:74:5a:e3:7f:46:86:54:a3:54:15:
                    98:fa:4f:a4:f4:a2:96:1d:16:77:5b:fa:cb:26:88:
                    fa:17:25:19:67:1c:43:0e:9f:bd:26:15:00:a6:78:
                    44:d3:8a:5d:34:3a:f1:b6:61:00:9f:7e:5b:f1:4f:
                    8b:9d:9b:5a:87:d1:ef:43:49:1c:b0:26:96:b1:b7:
                    ee:4b:7a:2b:41:3d:4f:60:9b:9d:d2:f9:db:95:55:
                    8d:07:2a:95:e3:ee:4b:99:b8:b9:18:cc:82:cc:cb:
                    e7:cb:c2:a8:72:39:fd:e8:8e:24:c4:f4:ae:b4:b5:
                    f4:b5:42:da:86:56:58:9d:a9:50:70:fd:4d:9b:67:
                    b3:33:94:52:41:66:09:28:d8:e5:aa:c9:0e:3c:e6:
                    cf:59:1c:e5:5d:65:de:35:08:89:69:66:dd:a0:86:
                    43:40:af:5d:d6:9d:d5:31:66:d5:0e:43:b2:a1:b6:
                    67:e6:87:26:0d:e3:e2:c5:50:b2:c4:16:48:2b:8c:
                    7e:bf:1d:28:84:c4:55:57:90:f3:ad:e9:79:b8:57:
                    53:5e:bb:b2:06:e6:75:5b:14:3a:1f:d5:a3:ba:c4:
                    ab:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:3C:13:24:94:C2:46:43:1A:AD:B2:8F:3D:12:CC:55:9B:01:DA:91
            X509v3 Authority Key Identifier:
                keyid:FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:3c:69:69:8f:9a:a8:2a:69:15:44:bd:cf:b0:45:3f:5f:24:
         ce:f5:fc:96:c1:06:a4:9a:ce:05:7d:f7:00:22:55:40:07:1c:
         d5:d1:a6:9e:7d:ba:f7:29:0d:99:cd:fc:cf:a4:88:8a:09:ff:
         d3:ab:e7:eb:47:fc:1c:e0:88:82:2a:ba:31:b2:68:0a:11:40:
         c9:b1:87:de:ed:bc:35:ae:10:c6:b4:84:da:d1:e8:ec:b8:fd:
         aa:fe:a6:7c:a0:89:d5:c3:9a:e2:2c:2e:b0:aa:1e:a1:73:19:
         c8:86:9b:d9:29:e3:06:15:87:cb:8d:15:63:3c:47:09:a7:b9:
         29:b8:db:0c:15:0d:7b:13:d2:b2:20:90:9d:2f:3a:df:6f:19:
         b8:7b:1f:ae:3f:e7:fe:a5:b9:7a:78:6d:3a:2f:56:a3:c7:67:
         cd:37:77:4e:ff:a7:2c:76:f9:ae:e1:0c:c6:8d:f1:ea:bf:75:
         d7:ad:6a:80:2e:e5:be:d2:83:e1:80:49:3f:be:fb:41:e8:1a:
         6c:0e:4d:cc:91:fb:5a:99:5a:dc:43:03:73:1a:d6:2e:cc:1b:
         ee:24:cf:c6:0f:0e:8e:91:84:40:f8:b4:c0:2b:14:f1:56:2a:
         a7:6b:43:e3:54:c5:af:e1:75:98:ba:6c:7b:cb:42:6c:09:de:
         3d:b9:6a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 20:26:07 2026 by rpki-client