Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
File:                     aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft (raw, json)
Hash identifier:          und7rCh0gvzpLJaFYp7hOIYSXfDwRXzKQJTNH2EeOR0=
Subject key identifier:   52:E6:96:E2:75:98:0E:4D:4F:C3:5C:F7:09:A0:0E:CF:2B:4F:FC:E0
Authority key identifier: 69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3
Certificate issuer:       /CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
Certificate serial:       01A17F2AE6FBF8090A10997B6A45EE0642A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
Manifest number:          1716
Signing time:             Tue 27 Oct 2026 21:01:20 +0000
Manifest this update:     Tue 27 Oct 2026 21:01:20 +0000
Manifest next update:     Wed 28 Oct 2026 21:01:20 +0000
Files and hashes:         1: aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl (hash: A2BbBl5KuoTR/fSi7urCComOhsEsqN5rns2bHtbCpw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 21:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:2a:e6:fb:f8:09:0a:10:99:7b:6a:45:ee:06:42:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3
        Validity
            Not Before: Oct 27 21:01:20 2026 GMT
            Not After : Oct 28 21:01:20 2026 GMT
        Subject: CN=52e696e275980e4d4fc35cf709a00ecf2b4ffce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:92:14:05:05:9b:79:c5:76:18:84:ed:08:b4:
                    b5:14:02:21:32:56:dd:d3:64:5e:27:77:25:79:ae:
                    ba:7a:9b:be:a1:77:65:a1:30:37:bf:c9:ba:9f:fd:
                    78:80:ef:0d:39:95:a9:f0:53:0b:e0:8b:d5:7c:b1:
                    48:c2:8c:45:36:0a:9d:26:24:7d:1b:ef:97:71:dc:
                    6d:73:61:6e:c1:d4:e0:11:91:55:e6:ab:40:90:9c:
                    1b:4f:bb:51:07:b3:fe:90:18:d3:48:7c:81:c3:0d:
                    f7:9f:8a:72:e8:29:0e:f5:06:1f:d8:d7:d1:85:cb:
                    75:80:5a:6d:74:c3:76:87:b7:67:56:2c:6e:e3:c1:
                    26:d9:df:6d:04:b4:c0:5c:d8:fa:7e:ed:5f:2e:ee:
                    80:d0:45:e3:79:c1:97:27:ef:a4:db:d4:78:87:b6:
                    b2:b1:00:18:54:cf:96:0c:bf:ce:c8:75:1a:27:3f:
                    0d:03:ba:38:c3:d9:8e:eb:6e:df:ec:97:30:10:65:
                    e7:e5:f9:e0:fb:5a:aa:48:8f:0a:81:23:f4:ef:89:
                    52:c5:cc:46:a4:0e:05:81:00:df:17:57:3c:3b:bb:
                    0d:90:c4:aa:42:26:33:09:24:4e:74:15:b0:bc:ea:
                    50:8d:67:62:89:c8:4d:4c:1b:21:65:49:a5:96:09:
                    80:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E6:96:E2:75:98:0E:4D:4F:C3:5C:F7:09:A0:0E:CF:2B:4F:FC:E0
            X509v3 Authority Key Identifier:
                keyid:69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:d4:b0:ea:51:96:b9:56:51:3d:f1:a8:af:25:da:c8:ff:da:
         65:4d:dc:5c:1a:b0:d4:1a:d4:d8:1b:31:2e:9c:0d:65:d4:21:
         c8:7d:14:5f:ac:9b:7c:93:a5:67:57:cb:5e:47:6b:ba:10:dd:
         93:70:c2:1a:b7:2c:09:ee:d8:6f:ee:42:19:d3:c1:f3:06:da:
         aa:72:3f:ad:82:88:6d:8e:fb:d0:0c:5a:d0:a8:e0:bd:2a:bb:
         60:39:0c:88:7b:12:ea:b3:96:fb:2b:64:45:6c:c6:a9:a8:81:
         ae:4d:11:dc:da:7b:82:48:05:8d:b9:d1:03:e4:a5:4d:b0:03:
         7d:6e:fd:ee:93:a1:9d:61:dd:0d:99:d9:1c:4f:c2:df:6a:81:
         b0:51:83:f9:ad:e5:29:6d:fc:7e:8c:28:04:83:d0:5d:2d:80:
         11:f3:18:2f:ea:d7:9c:f4:92:44:7d:6b:91:15:c1:5a:49:dc:
         28:52:08:e3:9f:7f:95:d7:d4:30:47:59:56:6a:c6:6d:5c:99:
         7a:85:d0:7a:92:d7:90:11:c1:99:f3:35:e4:4f:d9:ea:0f:9f:
         ec:40:28:ab:da:04:41:83:2e:b2:79:e4:65:16:52:ea:ff:c7:
         06:42:5b:57:64:35:1e:c2:ed:f6:98:03:76:14:cc:65:bd:3c:
         30:b3:82:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:53:22 2026 by rpki-client