Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
File:                     B6GfRqF7nUhp32ZJPPsF19golKY.mft (raw, json)
Hash identifier:          FLBXOG/cltdaq5RrkM/fAnUc+V9gMLBSdAHZbkWhbfg=
Subject key identifier:   59:8E:AA:F2:5F:95:BE:B9:2E:FB:92:0B:95:43:3D:ED:A9:1B:2C:42
Authority key identifier: 07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6
Certificate issuer:       /CN=07a19f46a17b9d4869df66493cfb05d7d82894a6
Certificate serial:       01A12767803A73FE5FBD222E49FCA30FEA92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
Manifest number:          1A99
Signing time:             Sat 10 Oct 2026 20:00:56 +0000
Manifest this update:     Sat 10 Oct 2026 20:00:56 +0000
Manifest next update:     Sun 11 Oct 2026 20:00:56 +0000
Files and hashes:         1: B6GfRqF7nUhp32ZJPPsF19golKY.crl (hash: e82Ii9K+4yF5SKpFtQp01x6hZUj8krXFtvqADi+O16I=)
                          2: z0RxzKUmGvdiXVqo5YVLQIA15ao.roa (hash: +26ezE/PG8fzSDohvHnBiXyXfPXqiwQfhlM6I+79ozE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:27:67:80:3a:73:fe:5f:bd:22:2e:49:fc:a3:0f:ea:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07a19f46a17b9d4869df66493cfb05d7d82894a6
        Validity
            Not Before: Oct 10 20:00:56 2026 GMT
            Not After : Oct 11 20:00:56 2026 GMT
        Subject: CN=598eaaf25f95beb92efb920b95433deda91b2c42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:09:f8:7c:2d:de:8c:c8:5d:fc:81:3d:04:6e:
                    6c:36:c9:4f:dc:71:6d:c5:61:33:54:9a:13:3c:c2:
                    de:d7:70:f5:d2:65:02:ed:9c:0e:1d:30:35:79:4e:
                    ff:a7:0a:88:6e:60:1a:7b:4b:5d:b1:1f:c1:33:9b:
                    98:fe:10:f2:02:e0:1f:aa:6f:e2:b1:c7:a5:bf:7a:
                    d9:e3:69:df:40:19:c4:2a:54:1e:1e:40:a7:98:87:
                    1c:88:6d:d4:b0:3b:c8:77:f7:cd:42:bf:58:94:cc:
                    9f:bc:30:69:fd:97:9f:39:f5:92:27:c2:ef:32:1d:
                    a8:f5:0e:90:a6:4c:ad:2d:a4:9a:9c:9e:38:66:57:
                    04:8c:b9:87:77:65:6c:15:fa:42:33:8b:d7:49:e4:
                    5b:e5:8b:fc:33:32:66:84:6a:85:fe:c7:ae:0c:77:
                    ef:f4:fa:31:ea:f7:4d:30:95:66:0f:82:73:b9:a6:
                    bf:5d:54:2f:10:b6:04:fa:ab:27:54:b3:17:93:ea:
                    4f:6b:52:b7:92:10:22:f7:7a:d2:ef:20:8a:32:ae:
                    5a:23:3d:e4:a4:c9:d6:3c:ee:2f:35:ee:82:ce:08:
                    47:a3:8a:50:0b:c7:76:ea:4a:c8:0e:97:a7:da:11:
                    83:cb:20:10:01:b1:77:00:cc:e1:68:1a:e4:90:52:
                    47:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8E:AA:F2:5F:95:BE:B9:2E:FB:92:0B:95:43:3D:ED:A9:1B:2C:42
            X509v3 Authority Key Identifier:
                keyid:07:A1:9F:46:A1:7B:9D:48:69:DF:66:49:3C:FB:05:D7:D8:28:94:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6GfRqF7nUhp32ZJPPsF19golKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a0b605-56fb-4cba-8ddc-b585417910eb/1/B6GfRqF7nUhp32ZJPPsF19golKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:7b:d0:ab:10:17:a1:62:5e:3d:a1:26:32:40:22:0d:74:0d:
         a6:ec:3f:91:f2:69:60:47:08:65:7a:a4:b5:04:e6:e8:bc:3b:
         eb:6d:a2:af:b7:3a:db:5f:80:1e:9c:8b:9a:94:95:89:9e:22:
         1a:ba:d8:18:3e:34:c3:06:75:1f:60:86:12:54:91:b3:2c:b6:
         a8:0d:53:f9:4a:d2:55:8b:15:13:6e:c9:f6:25:2b:27:8c:bd:
         b5:aa:b8:19:e3:0e:e2:8c:ce:9d:57:07:c0:2b:ff:25:c2:4a:
         14:94:6d:e8:c1:87:81:4e:74:7d:ce:9e:ae:c5:d9:a7:26:c5:
         54:af:55:2d:ef:1e:8a:64:5a:5f:47:1e:ac:de:c7:c8:c3:64:
         48:b2:8f:e9:21:51:87:47:5c:af:9f:0b:67:c6:70:c8:d7:48:
         4b:6b:cf:5b:c3:33:b6:1e:26:0b:97:75:c8:b3:3b:f9:a8:5a:
         e6:22:b8:27:73:46:bf:86:40:25:3c:13:5c:f5:e3:5b:64:1e:
         d9:44:70:55:df:22:41:32:c5:12:d5:18:4c:27:b7:10:76:53:
         9d:4a:25:fa:a2:c1:a7:7b:82:b1:33:89:cf:47:47:f6:12:f2:
         a8:41:5d:2a:00:8b:36:b8:6e:55:72:fc:d3:8e:d4:76:35:2e:
         94:c4:88:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:21:07 2026 by rpki-client