Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
File:                     CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft (raw, json)
Hash identifier:          Tebl4qn6WqSL3evmRA20sTzkxusdnZSraODOGl01LPg=
Subject key identifier:   08:FD:AD:7B:F8:CE:B8:3A:48:2D:73:03:66:E8:AB:71:13:92:37:15
Authority key identifier: 08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB
Certificate issuer:       /CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
Certificate serial:       01A14082DB7EA6777A6436BC1FB8D6558A0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
Manifest number:          1AA7
Signing time:             Thu 15 Oct 2026 17:01:19 +0000
Manifest this update:     Thu 15 Oct 2026 17:01:19 +0000
Manifest next update:     Fri 16 Oct 2026 17:01:19 +0000
Files and hashes:         1: CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl (hash: d8z1Wq4/7ulK0WKe34IKijCDDyg/mi8bQLH9r0ROfII=)
                          2: zEy0pk54hpQCTPJdO8DJpXzu5Mk.roa (hash: c/kQGOpuLkAoXhL/9Dr99YVfpLAZ/7AUwIQ22ANKUaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:82:db:7e:a6:77:7a:64:36:bc:1f:b8:d6:55:8a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081ca60e04847bd2f7c45c8687e5f5aad1fee8fb
        Validity
            Not Before: Oct 15 17:01:19 2026 GMT
            Not After : Oct 16 17:01:19 2026 GMT
        Subject: CN=08fdad7bf8ceb83a482d730366e8ab7113923715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:63:58:41:f9:94:06:f2:b4:4b:45:6c:73:d3:
                    8d:ff:50:6c:a4:35:4c:fa:b5:d0:26:28:41:23:a0:
                    a9:62:de:db:12:b3:a3:5d:7e:1f:05:f7:32:82:22:
                    b1:85:3c:41:d4:84:7a:02:d2:a6:4f:8f:99:11:24:
                    dc:26:15:f3:98:09:db:09:e1:f3:8f:9f:c8:b5:19:
                    a0:0b:d7:67:ee:1e:78:cf:eb:2a:b7:37:b4:b9:0e:
                    76:b5:7b:35:b4:78:57:29:ef:c0:7d:02:e8:62:5f:
                    78:74:d9:dd:38:9a:2c:db:2d:60:cb:d2:fb:cb:27:
                    75:c9:a7:8b:bc:c8:95:60:45:20:7c:1e:8d:74:f4:
                    db:a7:e8:c5:df:76:11:ff:d6:5f:0d:a7:57:9a:a8:
                    fa:04:e8:f1:68:a8:90:b2:bf:d9:87:64:7e:86:31:
                    c2:af:17:b3:9e:da:a3:0e:af:50:4b:62:ff:79:2d:
                    d6:fb:f5:04:60:ef:3e:38:62:f4:39:ae:9f:b3:08:
                    4a:55:59:07:4e:15:71:ed:58:80:58:00:a6:e3:aa:
                    0b:09:86:b9:2f:32:6e:db:68:34:e9:1c:39:de:61:
                    2f:8e:8b:65:af:65:f7:b7:51:ac:8b:5b:ca:a4:1b:
                    62:74:b6:8b:01:2e:d4:ca:3a:82:0f:6e:2b:28:cd:
                    61:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FD:AD:7B:F8:CE:B8:3A:48:2D:73:03:66:E8:AB:71:13:92:37:15
            X509v3 Authority Key Identifier:
                keyid:08:1C:A6:0E:04:84:7B:D2:F7:C4:5C:86:87:E5:F5:AA:D1:FE:E8:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBymDgSEe9L3xFyGh-X1qtH-6Ps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d94fce-547e-4242-b72c-b7ab686c076e/1/CBymDgSEe9L3xFyGh-X1qtH-6Ps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:8c:42:4a:2e:f1:db:89:4c:5e:7a:e1:6e:c4:28:93:91:92:
         bd:46:c2:91:99:0b:b3:48:d4:8b:a5:e3:c8:2a:83:5e:02:92:
         59:29:9b:9a:10:12:c3:f2:e0:ea:83:19:ed:7b:07:21:1e:a7:
         bb:30:1f:a2:a6:89:46:6b:6c:e9:f6:ed:53:80:20:ac:9e:94:
         0c:d1:bf:4d:83:c7:0e:d9:14:7f:ae:7a:d3:b2:1e:91:96:fa:
         5d:48:bc:de:24:5a:47:e4:74:a2:ee:3d:4c:cb:d9:1e:90:65:
         5c:b1:7d:91:3d:06:c4:01:c0:a8:dd:eb:fb:23:ec:d0:ad:7d:
         1e:55:5f:05:e4:9d:3c:b5:e0:1d:84:a0:ef:11:08:1b:d2:5a:
         1c:18:60:94:9f:54:3f:2a:82:c8:e2:79:a3:87:a6:e0:4f:5f:
         4c:c7:8f:3d:5e:5d:94:db:c0:8f:8a:81:e4:0f:b8:fc:f2:0c:
         a9:c2:4a:eb:95:a4:bb:48:9e:2e:42:23:ce:b2:b4:ba:2c:b0:
         7a:15:23:49:cd:4b:d2:d6:54:1e:7b:17:4a:81:38:96:02:89:
         aa:0a:b5:1f:86:dd:34:35:f6:d1:30:62:a1:b9:97:42:2f:04:
         42:60:ae:51:7f:72:d7:04:df:6a:ef:d9:7d:db:eb:4a:25:92:
         bf:96:a1:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFAgtt+pnd6ZDa8H7jWVYoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MWNhNjBlMDQ4NDdiZDJmN2M0NWM4Njg3ZTVmNWFhZDFm
ZWU4ZmIwHhcNMjYxMDE1MTcwMTE5WhcNMjYxMDE2MTcwMTE5WjAzMTEwLwYDVQQD
EygwOGZkYWQ3YmY4Y2ViODNhNDgyZDczMDM2NmU4YWI3MTEzOTIzNzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWNYQfmUBvK0S0Vsc9ON/1BspDVM
+rXQJihBI6CpYt7bErOjXX4fBfcygiKxhTxB1IR6AtKmT4+ZESTcJhXzmAnbCeHz
j5/ItRmgC9dn7h54z+sqtze0uQ52tXs1tHhXKe/AfQLoYl94dNndOJos2y1gy9L7
yyd1yaeLvMiVYEUgfB6NdPTbp+jF33YR/9ZfDadXmqj6BOjxaKiQsr/Zh2R+hjHC
rxezntqjDq9QS2L/eS3W+/UEYO8+OGL0Oa6fswhKVVkHThVx7ViAWACm46oLCYa5
LzJu22g06Rw53mEvjotlr2X3t1Gsi1vKpBtidLaLAS7UyjqCD24rKM1hUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAj9rXv4zrg6SC1zA2boq3ETkjcVMB8GA1UdIwQY
MBaAFAgcpg4EhHvS98Rchofl9arR/uj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kOTRmY2UtNTQ3ZS00MjQyLWI3MmMt
YjdhYjY4NmMwNzZlLzEvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kOTRmY2UtNTQ3ZS00MjQyLWI3MmMtYjdhYjY4NmMwNzZl
LzEvQ0J5bURnU0VlOUwzeEZ5R2gtWDFxdEgtNlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4xCSi7x
24lMXnrhbsQok5GSvUbCkZkLs0jUi6XjyCqDXgKSWSmbmhASw/Lg6oMZ7XsHIR6n
uzAfoqaJRmts6fbtU4AgrJ6UDNG/TYPHDtkUf65607IekZb6XUi83iRaR+R0ou49
TMvZHpBlXLF9kT0GxAHAqN3r+yPs0K19HlVfBeSdPLXgHYSg7xEIG9JaHBhglJ9U
PyqCyOJ5o4em4E9fTMePPV5dlNvAj4qB5A+4/PIMqcJK65Wku0ieLkIjzrK0uiyw
ehUjSc1L0tZUHnsXSoE4lgKJqgq1H4bdNDX20TBiobmXQi8EQmCuUX9y1wTfau/Z
fdvrSiWSv5ahzw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:47 2026 by rpki-client