Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
File:                     0mepGaXTLOov1ByKnhhRC__86NY.mft (raw, json)
Hash identifier:          VMqvUWODgyM0gh+zWEo5/Ok0lHZjMzA+tgnrg1EL4is=
Subject key identifier:   5E:F5:CD:9B:C4:10:54:5E:8C:8C:DE:F6:34:E8:12:53:A5:36:C1:F4
Authority key identifier: D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6
Certificate issuer:       /CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
Certificate serial:       01A14195759AF58B22FA4244E04108FE710A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
Manifest number:          1515
Signing time:             Thu 15 Oct 2026 22:01:16 +0000
Manifest this update:     Thu 15 Oct 2026 22:01:16 +0000
Manifest next update:     Fri 16 Oct 2026 22:01:16 +0000
Files and hashes:         1: 0mepGaXTLOov1ByKnhhRC__86NY.crl (hash: nBRLWgsEZYWrg82y+15lfGf8IbQq9llceNv8idENIGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:41:95:75:9a:f5:8b:22:fa:42:44:e0:41:08:fe:71:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
        Validity
            Not Before: Oct 15 22:01:16 2026 GMT
            Not After : Oct 16 22:01:16 2026 GMT
        Subject: CN=5ef5cd9bc410545e8c8cdef634e81253a536c1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:dc:46:1d:53:aa:fd:eb:84:94:0f:72:5a:60:
                    c6:05:42:94:d3:43:98:9b:e4:ce:8d:16:30:f6:c1:
                    36:64:25:0b:a4:45:a5:55:79:09:e3:66:f1:53:a6:
                    48:91:9a:19:57:b1:86:e8:65:c1:3a:7a:fc:73:2c:
                    c6:61:75:02:d4:22:87:58:7a:60:0f:35:38:bb:94:
                    61:4d:71:9b:21:a5:6c:af:8a:b6:bf:89:b7:90:d2:
                    42:ad:b5:76:fe:6d:5d:56:10:f7:d7:3e:2f:0d:70:
                    ad:1e:54:a9:62:b7:f3:15:c2:4e:a4:4d:03:d3:0b:
                    a6:be:5f:7d:27:c2:b4:b6:10:a3:e9:70:44:11:39:
                    d5:81:65:e0:93:aa:cc:3c:1e:b6:c9:11:0a:68:b4:
                    e9:7c:2c:6b:12:0b:20:b7:c6:1c:85:04:8c:e4:b1:
                    bd:a6:db:63:40:5a:14:cb:79:31:04:dd:df:25:9e:
                    60:d1:e7:e2:b3:e9:d6:92:3c:3a:1a:98:1b:20:6c:
                    1a:ae:fa:59:ee:81:c9:c3:f9:c9:1c:cd:78:a4:84:
                    34:36:be:f1:d4:9d:a6:4e:ba:2e:20:64:66:e0:a7:
                    a0:90:b2:d0:df:ad:f1:3f:56:50:30:f2:b5:f6:ae:
                    87:6d:24:63:55:92:e0:58:cc:91:d4:59:c2:d7:b0:
                    b8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F5:CD:9B:C4:10:54:5E:8C:8C:DE:F6:34:E8:12:53:A5:36:C1:F4
            X509v3 Authority Key Identifier:
                keyid:D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:6c:45:59:1a:f0:1d:22:6f:0b:7b:a8:a9:77:c8:6a:aa:e7:
         ee:49:8a:58:6e:f5:25:da:26:22:e5:fc:d4:be:c5:ab:b6:8f:
         e1:6a:58:0b:6d:82:cd:20:5d:c9:62:a1:c6:da:66:99:1b:e7:
         77:7c:0a:9e:86:38:35:ad:f3:86:69:dc:a4:34:d9:2a:d1:de:
         c2:ad:42:8b:ae:c7:80:40:14:f0:9a:f0:9d:d4:c3:63:02:be:
         a2:80:df:81:a1:40:b0:d9:10:c8:98:83:6e:9f:72:23:c3:4d:
         91:93:8c:b8:c2:af:e2:8e:2e:3f:fb:96:f4:cd:8f:89:f0:ae:
         e3:15:1d:26:55:5c:b6:ad:56:61:3c:96:16:0a:85:47:e1:ca:
         cb:a0:ea:2e:d0:88:af:8e:06:1c:8d:00:df:73:a0:54:67:be:
         64:7b:9b:d9:eb:ed:4e:c9:89:51:37:22:c2:7c:07:ad:a7:93:
         9a:ea:dc:32:68:02:be:7f:14:f8:13:bf:4d:4e:70:ec:bb:d5:
         c9:0b:63:72:6a:78:b9:bd:f1:e9:f4:f3:e0:00:9e:ee:fc:b0:
         53:47:38:f7:b0:a5:03:f9:1e:18:d5:8f:38:e5:63:a8:91:be:
         8f:6f:d4:24:53:51:02:86:f7:0e:3a:ad:28:22:bb:9e:68:0a:
         03:c9:87:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFBlXWa9Ysi+kJE4EEI/nEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjdhOTE5YTVkMzJjZWEyZmQ0MWM4YTllMTg1MTBiZmZm
Y2U4ZDYwHhcNMjYxMDE1MjIwMTE2WhcNMjYxMDE2MjIwMTE2WjAzMTEwLwYDVQQD
Eyg1ZWY1Y2Q5YmM0MTA1NDVlOGM4Y2RlZjYzNGU4MTI1M2E1MzZjMWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1txGHVOq/euElA9yWmDGBUKU00OY
m+TOjRYw9sE2ZCULpEWlVXkJ42bxU6ZIkZoZV7GG6GXBOnr8cyzGYXUC1CKHWHpg
DzU4u5RhTXGbIaVsr4q2v4m3kNJCrbV2/m1dVhD31z4vDXCtHlSpYrfzFcJOpE0D
0wumvl99J8K0thCj6XBEETnVgWXgk6rMPB62yREKaLTpfCxrEgsgt8YchQSM5LG9
pttjQFoUy3kxBN3fJZ5g0efis+nWkjw6GpgbIGwarvpZ7oHJw/nJHM14pIQ0Nr7x
1J2mTrouIGRm4KegkLLQ363xP1ZQMPK19q6HbSRjVZLgWMyR1FnC17C47wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF71zZvEEFRejIze9jToElOlNsH0MB8GA1UdIwQY
MBaAFNJnqRml0yzqL9Qcip4YUQv//OjWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1lcEdhWFRMT292MUJ5S25oaFJDX184Nk5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9lZWFmZWYtMzg1Mi00ZTM2LThjODEt
OTM3MjI2N2NmOTUxLzEvMG1lcEdhWFRMT292MUJ5S25oaFJDX184Nk5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9lZWFmZWYtMzg1Mi00ZTM2LThjODEtOTM3MjI2N2NmOTUx
LzEvMG1lcEdhWFRMT292MUJ5S25oaFJDX184Nk5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmxFWRrw
HSJvC3uoqXfIaqrn7kmKWG71JdomIuX81L7Fq7aP4WpYC22CzSBdyWKhxtpmmRvn
d3wKnoY4Na3zhmncpDTZKtHewq1Ci67HgEAU8JrwndTDYwK+ooDfgaFAsNkQyJiD
bp9yI8NNkZOMuMKv4o4uP/uW9M2PifCu4xUdJlVctq1WYTyWFgqFR+HKy6DqLtCI
r44GHI0A33OgVGe+ZHub2evtTsmJUTciwnwHraeTmurcMmgCvn8U+BO/TU5w7LvV
yQtjcmp4ub3x6fTz4ACe7vywU0c497ClA/keGNWPOOVjqJG+j2/UJFNRAob3Djqt
KCK7nmgKA8mH5Q==
-----END CERTIFICATE-----
Generated at Fri Oct 16 00:20:32 2026 by rpki-client