Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/270326-b96c-4e3c-bf9d-b625f9b35e2c/1/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.mft
File:                     1o9K_Wwjrdy1TdzJhNVUOJqjmXM.mft (raw, json)
Hash identifier:          EcLnvRdud/MdmJ3+dtPTVtW0BlDQyoIfaLaq9fEyBz0=
Subject key identifier:   D5:AD:63:FA:61:36:42:C5:B5:6F:FF:EF:63:6E:27:C3:18:F9:A4:1F
Authority key identifier: D6:8F:4A:FD:6C:23:AD:DC:B5:4D:DC:C9:84:D5:54:38:9A:A3:99:73
Certificate issuer:       /CN=d68f4afd6c23addcb54ddcc984d554389aa39973
Certificate serial:       01A1A74B491E3281CA32522FE7255905316B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/270326-b96c-4e3c-bf9d-b625f9b35e2c/1/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.mft
Manifest number:          DF
Signing time:             Wed 04 Nov 2026 16:01:31 +0000
Manifest this update:     Wed 04 Nov 2026 16:01:31 +0000
Manifest next update:     Thu 05 Nov 2026 16:01:31 +0000
Files and hashes:         1: 1o9K_Wwjrdy1TdzJhNVUOJqjmXM.crl (hash: WyHHOEgxAUxrDBuDC1/+hoJDbtdO4R7aIuVlvqzACuA=)
                          2: b0u6At-JeKVEhq2JG13hKRTFkQM.roa (hash: zjUUusC2m/EaiOZX6m4henUaYd6GRIS8uDHPErnI1zM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/270326-b96c-4e3c-bf9d-b625f9b35e2c/1/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/270326-b96c-4e3c-bf9d-b625f9b35e2c/1/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 16:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a7:4b:49:1e:32:81:ca:32:52:2f:e7:25:59:05:31:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d68f4afd6c23addcb54ddcc984d554389aa39973
        Validity
            Not Before: Nov  4 16:01:31 2026 GMT
            Not After : Nov  5 16:01:31 2026 GMT
        Subject: CN=d5ad63fa613642c5b56fffef636e27c318f9a41f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:f7:cf:c3:18:a1:d2:19:a5:90:c3:59:2c:72:
                    4c:e3:3e:d7:86:2f:f8:1e:6e:c6:af:50:0a:df:83:
                    e2:e8:7b:02:92:8b:74:49:76:8b:d9:24:91:10:fc:
                    00:2b:f4:d2:a8:80:7f:80:46:7e:24:53:73:18:36:
                    3b:0c:50:e2:fe:f1:ef:c0:70:7a:ee:25:16:1b:b8:
                    13:c1:cc:e5:45:4f:53:b8:61:9f:88:43:9a:ec:0f:
                    dd:20:2a:4e:f5:ff:c6:0c:15:10:cf:b1:bc:97:95:
                    30:ca:24:e1:c6:99:1b:50:00:ad:c6:46:c1:a9:34:
                    17:d5:87:46:c4:00:f1:4e:7a:1d:d0:17:76:70:0e:
                    5a:cf:34:6b:70:c9:59:d9:85:9c:03:93:e2:6c:ed:
                    e2:5f:31:33:ef:ef:c8:13:ba:57:71:be:d2:ea:b0:
                    c8:62:fd:7d:03:a8:83:56:ef:4c:fb:b3:c7:e4:54:
                    30:de:ee:d3:03:1b:8c:f6:77:e3:5c:6e:83:43:3e:
                    41:b0:dc:cb:d8:fb:05:04:96:32:05:e4:7a:09:5a:
                    bb:e4:07:4e:2c:cd:59:7e:9e:9f:43:47:4a:4f:13:
                    d9:96:38:d0:1f:a1:15:1c:61:ca:63:5e:bc:72:ef:
                    3f:1e:be:34:03:6f:45:25:76:e4:8a:f7:c0:03:03:
                    f2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AD:63:FA:61:36:42:C5:B5:6F:FF:EF:63:6E:27:C3:18:F9:A4:1F
            X509v3 Authority Key Identifier:
                keyid:D6:8F:4A:FD:6C:23:AD:DC:B5:4D:DC:C9:84:D5:54:38:9A:A3:99:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/270326-b96c-4e3c-bf9d-b625f9b35e2c/1/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/270326-b96c-4e3c-bf9d-b625f9b35e2c/1/1o9K_Wwjrdy1TdzJhNVUOJqjmXM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e5:9e:fa:aa:31:f7:51:1c:26:4f:e3:0d:10:70:1e:dc:24:
         1f:57:99:41:d5:3a:f8:7e:90:fd:bc:92:d6:dd:84:75:cf:39:
         c4:02:d3:4e:70:d1:e2:db:76:02:fc:66:7e:8f:85:5d:e9:cf:
         b2:f5:65:e3:6a:33:58:83:02:f6:9a:e0:c8:0d:37:fb:71:97:
         14:d4:99:25:c3:05:23:41:7c:fe:33:38:a9:0b:19:10:32:3d:
         05:f6:8a:de:ad:bc:23:e2:99:6b:0d:39:c9:80:75:a7:7d:62:
         6f:88:55:7c:0d:f6:51:db:7a:8a:6b:17:43:20:c5:12:b3:99:
         d2:ae:5e:f1:43:2d:9b:26:a7:83:07:d0:79:51:a6:0f:01:1e:
         15:09:09:f7:bb:9d:fb:96:e5:18:ec:78:da:f5:14:0e:13:cf:
         95:b6:84:b3:86:bf:8a:b0:30:a8:3c:ba:9a:b6:fe:0c:f1:11:
         70:1a:c6:18:67:7a:b1:ad:7a:36:4f:29:c7:82:41:90:71:64:
         84:1b:8f:68:a3:a9:35:ab:ab:30:c0:22:32:c8:85:f4:3a:ba:
         a0:99:ab:e7:69:42:38:26:e8:a4:dc:f8:f3:ab:06:bb:71:8c:
         c9:f1:16:94:97:ca:dc:7f:86:f5:fc:f7:77:a9:cf:b1:b9:7d:
         b4:b3:d8:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:21:28 2026 by rpki-client