Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
File:                     wR_52bpVx9lQjFpNwe7MDilWHC4.mft (raw, json)
Hash identifier:          dXJ4HPsd2YhZfODgbJ3ICNUDUyRkQT0yMuVD+YiChog=
Subject key identifier:   69:BA:F8:AF:FC:71:DB:35:3A:D8:C8:C7:DB:93:D3:5D:28:9D:AE:52
Authority key identifier: C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E
Certificate issuer:       /CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e
Certificate serial:       01A18FB075DCD4BE12A7DF90E82629A1AF5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
Manifest number:          1ACC
Signing time:             Sat 31 Oct 2026 02:01:08 +0000
Manifest this update:     Sat 31 Oct 2026 02:01:08 +0000
Manifest next update:     Sun 01 Nov 2026 02:01:08 +0000
Files and hashes:         1: wR_52bpVx9lQjFpNwe7MDilWHC4.crl (hash: Lqdi9/wkJrfWQ/JqB049wimEIsHJQ9tO/sC+2saVlIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8f:b0:75:dc:d4:be:12:a7:df:90:e8:26:29:a1:af:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e
        Validity
            Not Before: Oct 31 02:01:08 2026 GMT
            Not After : Nov  1 02:01:08 2026 GMT
        Subject: CN=69baf8affc71db353ad8c8c7db93d35d289dae52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:fd:c4:04:fa:f5:37:79:24:49:5a:32:a8:
                    6f:f5:cb:36:52:30:4a:64:f9:29:01:b1:5a:16:b4:
                    10:66:f7:ca:a6:ea:3b:ae:6f:c0:43:79:ba:8a:2e:
                    5c:fd:00:88:e4:63:72:c7:98:b9:88:00:a2:90:a4:
                    e9:17:10:5b:e1:6b:a9:dd:5b:5b:3d:ea:96:c4:c2:
                    af:9e:e8:5a:0b:36:33:ae:30:2a:ea:4f:35:e1:f3:
                    e6:ec:4d:14:7b:54:0f:f8:cf:94:10:4c:4e:c0:a3:
                    c5:c2:fd:91:1d:e7:de:9a:26:96:dc:5b:14:94:ac:
                    1d:c6:f0:7d:2d:3b:31:fb:2f:db:d8:1f:72:aa:38:
                    bb:08:22:ca:a1:75:80:e7:b0:ea:9b:2e:d4:4b:3f:
                    df:b4:28:74:ad:6e:09:04:c9:ca:33:80:51:b5:3e:
                    0d:16:30:04:e9:96:6e:79:cb:f6:af:94:58:f8:11:
                    3d:a3:7e:45:56:f6:f4:c4:60:76:5d:c2:6f:98:ed:
                    67:cf:5e:aa:89:af:84:b0:c5:cb:ce:1d:75:3f:f7:
                    b7:47:90:6f:40:35:ac:73:2c:9d:66:82:9d:45:69:
                    16:e9:7e:7a:1a:20:96:6a:7f:70:b3:6f:51:a0:ca:
                    cb:03:d6:59:49:63:f5:f2:27:2c:de:93:43:23:e9:
                    61:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BA:F8:AF:FC:71:DB:35:3A:D8:C8:C7:DB:93:D3:5D:28:9D:AE:52
            X509v3 Authority Key Identifier:
                keyid:C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:f6:e3:bf:cb:f7:94:3d:d1:27:45:5a:c2:3d:41:41:f8:03:
         bb:e9:49:51:c8:25:bc:86:ff:53:1e:59:fd:da:2f:a1:ac:f6:
         a5:da:f6:c6:70:c8:74:27:be:3b:92:c2:0c:52:c2:69:38:8d:
         b2:b8:b1:fe:1d:00:91:f2:39:44:60:46:a4:18:ec:f0:2c:8e:
         8d:b0:da:66:7d:a5:96:4b:63:1c:d2:19:2a:1d:de:03:28:97:
         cd:87:88:c3:06:5f:f5:36:f2:7c:d1:9d:21:d8:48:dd:1a:77:
         e2:63:c4:e4:11:8d:b8:00:97:b6:f7:0b:20:b3:65:8b:91:a5:
         86:fb:0f:a6:c6:b3:21:5f:73:6c:28:d5:92:d5:30:6a:f3:47:
         f9:f3:fa:92:12:bd:3c:13:71:46:12:9c:31:87:8c:ce:f1:7e:
         6c:9a:97:60:82:17:07:a3:97:01:0d:14:df:d9:03:fa:6f:c6:
         bd:04:b0:d2:ca:56:3a:b4:0f:18:c1:d6:e7:49:c2:b8:a7:93:
         cd:43:87:15:ff:3c:34:d7:a5:95:d2:8a:9d:2c:fd:ee:94:8b:
         61:bf:91:c6:c2:b3:f2:2c:1d:62:4b:ec:6f:55:fd:a5:fe:b4:
         6e:44:5d:28:96:29:90:30:93:6f:49:f6:61:d5:c8:75:3d:0e:
         cd:2a:22:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:18:21 2026 by rpki-client