Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.mft
File:                     A6vacUAmJIC3jTuudt3YxthopPI.mft (raw, json)
Hash identifier:          Lo68BEV1t06zbB9RFh+jV9WgO6rycbTNWDPAdPA+W/Q=
Subject key identifier:   15:21:7E:AA:22:0D:E8:14:46:F0:4E:E8:1F:1D:A1:CA:C6:BA:4F:92
Authority key identifier: 03:AB:DA:71:40:26:24:80:B7:8D:3B:AE:76:DD:D8:C6:D8:68:A4:F2
Certificate issuer:       /CN=03abda7140262480b78d3bae76ddd8c6d868a4f2
Certificate serial:       01A17627A5825741C953A21C0D4650A67E46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A6vacUAmJIC3jTuudt3YxthopPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.mft
Manifest number:          013B
Signing time:             Mon 26 Oct 2026 03:01:12 +0000
Manifest this update:     Mon 26 Oct 2026 03:01:12 +0000
Manifest next update:     Tue 27 Oct 2026 03:01:12 +0000
Files and hashes:         1: A6vacUAmJIC3jTuudt3YxthopPI.crl (hash: svweioMfCYf8YisjcV7AOmQwqs6xX6eMvJS5/1D2PXU=)
                          2: oEM0wDUvGTK5fY0FNB38hG9027A.roa (hash: dvrFSBEksNe2CFDmHleIj839JX7ASGNbq/KlrLkVD4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A6vacUAmJIC3jTuudt3YxthopPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:27:a5:82:57:41:c9:53:a2:1c:0d:46:50:a6:7e:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03abda7140262480b78d3bae76ddd8c6d868a4f2
        Validity
            Not Before: Oct 26 03:01:12 2026 GMT
            Not After : Oct 27 03:01:12 2026 GMT
        Subject: CN=15217eaa220de81446f04ee81f1da1cac6ba4f92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:05:60:45:56:6b:3a:b5:3f:ce:23:5f:8e:65:
                    ae:cd:9e:47:b1:e1:80:f5:73:2c:05:16:89:a2:62:
                    4c:88:b5:95:cf:22:d6:b0:56:4a:a8:c2:fd:de:e3:
                    99:1b:c4:b5:bf:e3:15:7a:e3:ee:1e:9f:16:c0:9e:
                    23:62:54:45:54:67:d6:a7:4c:7f:d6:68:e8:61:da:
                    57:e2:c7:57:a5:84:0a:74:6a:d5:3f:b1:67:78:9b:
                    71:d3:bd:47:58:89:f9:f7:59:b6:a6:80:31:a4:f2:
                    3f:dc:28:7a:f7:2e:ab:55:be:68:05:d3:ec:64:bf:
                    4a:d6:25:95:95:27:0d:a8:48:a5:83:39:c8:85:7a:
                    b8:7a:51:a2:6a:82:3e:db:0a:45:a0:30:c7:6d:17:
                    4f:1d:d9:e6:1b:a2:63:45:90:cd:65:ab:1d:ee:ee:
                    99:03:9a:87:32:ea:e4:04:ab:0d:9f:0f:3d:00:28:
                    03:59:98:c4:2d:cb:f7:ac:cd:10:4b:ce:89:61:4c:
                    69:df:58:14:98:ed:12:07:67:e5:b2:ff:12:06:0f:
                    fb:26:9a:b8:7a:00:0f:2a:ab:2b:77:ac:30:05:4d:
                    e9:58:3a:e0:98:d1:49:89:d1:20:ee:af:cb:c3:7a:
                    ef:b8:0d:a1:a2:e8:cc:04:48:e9:01:9a:27:59:d9:
                    45:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:21:7E:AA:22:0D:E8:14:46:F0:4E:E8:1F:1D:A1:CA:C6:BA:4F:92
            X509v3 Authority Key Identifier:
                keyid:03:AB:DA:71:40:26:24:80:B7:8D:3B:AE:76:DD:D8:C6:D8:68:A4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6vacUAmJIC3jTuudt3YxthopPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/266e62-9498-46e0-a14c-5755b2f10418/1/A6vacUAmJIC3jTuudt3YxthopPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:64:7d:de:2e:a4:71:71:91:8e:58:1c:17:b8:e9:e5:5a:83:
         28:f3:a1:dc:96:88:3c:b6:35:13:99:ef:f7:00:39:97:2f:2e:
         e9:4e:ea:f4:e2:bf:4c:2c:99:6d:a9:7b:12:f6:d9:7d:83:80:
         79:b8:cf:e9:87:b0:c3:81:41:1e:12:5c:86:06:5c:89:13:51:
         a6:df:64:4b:7a:60:47:05:a8:b0:e0:ef:3b:92:ac:e0:f0:6b:
         33:6d:00:70:da:83:08:1a:e9:ae:7a:2c:2d:d5:bc:3e:c3:13:
         59:7e:a2:69:f5:b2:cc:3c:a9:79:35:e3:5a:49:31:1e:47:09:
         32:be:c5:2e:78:4f:8c:15:b4:79:2f:07:e6:25:1c:0a:4b:0f:
         eb:35:99:41:1e:43:00:1d:be:72:4d:88:73:70:7d:80:6b:37:
         b3:ab:cc:ed:b7:69:b5:c4:b6:5c:82:80:73:16:ec:f8:ea:ed:
         84:2c:8f:9c:5d:81:8b:41:65:df:97:9f:02:4a:69:63:f0:36:
         a8:73:1c:c2:33:e5:99:cb:d8:cd:12:2b:bc:de:be:b0:7d:8c:
         eb:44:94:77:c8:c4:16:56:62:23:5f:5b:fa:d6:ce:f4:26:d5:
         b7:6d:6f:7f:69:61:13:f3:96:1c:ce:69:e0:0b:8d:31:16:76:
         e3:23:3a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:47:42 2026 by rpki-client