Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
File:                     81296PvNv0KF6HvkkO1vzbRqBfs.mft (raw, json)
Hash identifier:          F4ICb5ojPk/2I+SzdYxb80Bc80GqI4n7vq5YlqjK824=
Subject key identifier:   0A:B8:B6:34:EA:27:F6:95:C6:9B:64:7F:1C:5B:C5:3A:9C:E9:55:6F
Authority key identifier: F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB
Certificate issuer:       /CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
Certificate serial:       01A13DB8BA7C97FA6E3EFBE30500A63A7749
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
Manifest number:          0B28
Signing time:             Thu 15 Oct 2026 04:01:18 +0000
Manifest this update:     Thu 15 Oct 2026 04:01:18 +0000
Manifest next update:     Fri 16 Oct 2026 04:01:18 +0000
Files and hashes:         1: 81296PvNv0KF6HvkkO1vzbRqBfs.crl (hash: AFbS+sWh4V69EsNuObgx5OduvvqT8e8A1/Q1zKh2Bnc=)
                          2: u7PMzJk0LD92U_KXyN6F886wE3w.roa (hash: fw8bxf2gcvv9j/em4IufdaESCHy0Vu0Ro0Bhg2xvHAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:ba:7c:97:fa:6e:3e:fb:e3:05:00:a6:3a:77:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f35dbde8fbcdbf4285e87be490ed6fcdb46a05fb
        Validity
            Not Before: Oct 15 04:01:18 2026 GMT
            Not After : Oct 16 04:01:18 2026 GMT
        Subject: CN=0ab8b634ea27f695c69b647f1c5bc53a9ce9556f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1f:a5:4c:ee:3f:b9:fd:bf:1f:63:2c:1a:0c:
                    ec:43:a2:63:fc:89:8c:c4:f4:a9:9b:22:ca:99:3e:
                    91:9c:40:c6:7a:19:69:75:d3:3e:75:1b:32:10:98:
                    d2:3c:c0:14:9b:69:f6:c5:b8:82:d3:e5:1b:90:3a:
                    a4:fc:f9:a0:18:5a:1c:a2:27:57:b8:57:53:83:a0:
                    e5:70:46:ab:65:b8:f7:8c:9d:e6:58:ae:dd:88:a3:
                    39:4a:15:c1:87:91:a2:fd:e6:4b:b2:a1:7f:52:17:
                    55:35:ad:c6:24:2d:c0:43:f1:3d:39:12:5c:5b:21:
                    98:1a:52:1f:ab:c0:3d:ca:51:54:fd:7f:48:9a:47:
                    ae:87:4f:eb:fb:95:99:4e:fd:ea:45:be:64:dd:b5:
                    2c:54:0e:48:d7:30:3d:eb:61:8a:65:8f:29:d7:1c:
                    b0:d2:0b:18:86:9f:09:ad:f6:cd:da:df:75:cf:3e:
                    e7:60:f9:21:e8:67:38:3b:f8:fa:b5:88:59:a8:b4:
                    7d:ec:da:f8:17:90:59:50:b4:a0:17:5e:d2:c5:6f:
                    ab:6c:1e:0d:c5:a6:9d:66:72:c3:d6:0b:8b:04:91:
                    d6:33:2e:41:96:20:84:d2:5f:c4:1e:a2:8e:7a:45:
                    f1:0d:91:6c:32:ad:ca:9e:e2:1e:41:32:d6:a3:84:
                    71:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B8:B6:34:EA:27:F6:95:C6:9B:64:7F:1C:5B:C5:3A:9C:E9:55:6F
            X509v3 Authority Key Identifier:
                keyid:F3:5D:BD:E8:FB:CD:BF:42:85:E8:7B:E4:90:ED:6F:CD:B4:6A:05:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81296PvNv0KF6HvkkO1vzbRqBfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b66bf7-131b-43b8-b5c8-ed5e0ac115eb/1/81296PvNv0KF6HvkkO1vzbRqBfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:58:60:c5:c6:01:4e:d2:77:77:17:ae:42:84:2a:5e:f5:51:
         3e:2d:b9:76:a1:4f:f7:a6:68:7d:b1:f8:56:3d:b1:fd:88:4b:
         d6:c5:4c:81:e3:e4:8b:d7:9f:25:2c:10:9b:2b:3a:c0:93:ff:
         c8:d5:a3:fe:65:de:11:11:7b:d4:50:e5:67:56:9b:32:43:ec:
         cd:65:8e:97:98:ee:ac:0f:5d:72:38:2b:1c:1b:a9:97:22:71:
         58:9c:60:ca:8e:81:b4:98:c8:68:5d:53:2e:6d:85:ba:bd:01:
         1d:73:ce:f9:8a:aa:87:d4:a3:56:b7:4d:8a:82:c2:8c:e7:9b:
         9c:61:b7:da:39:67:c6:11:a2:79:51:6a:74:d1:d3:c9:c3:55:
         bb:12:3a:67:e7:58:35:22:2e:ab:ff:d8:a2:f1:65:c0:9d:57:
         7b:1b:2e:f8:5d:63:e6:86:3f:45:8f:94:30:88:a7:51:56:f2:
         5e:be:8c:bd:45:99:3e:74:fa:1b:aa:b8:9d:a8:b4:3a:60:01:
         5c:b4:06:61:97:0c:8e:2e:c1:30:53:9d:ff:03:1c:17:ea:c0:
         01:68:63:9d:55:77:fc:f5:ca:a0:73:c6:b7:99:6a:dd:3b:16:
         93:ce:d2:75:dc:8c:8b:e1:01:a4:7b:c9:f4:79:3e:5a:ec:02:
         f9:c1:62:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:06 2026 by rpki-client