Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File:                     468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier:          yr5+BSrouN0ccG1PyB1RyZC1NZjVyIDwg8ZJMoJER38=
Subject key identifier:   47:08:51:9C:81:5F:E3:65:4E:7F:9F:B6:15:C5:60:86:4E:6A:AE:17
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer:       /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial:       01A13FA7520A09010BBE58C8595C316C8066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number:          0E01
Signing time:             Thu 15 Oct 2026 13:01:32 +0000
Manifest this update:     Thu 15 Oct 2026 13:01:32 +0000
Manifest next update:     Fri 16 Oct 2026 13:01:32 +0000
Files and hashes:         1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: l6dO5X3RIed5AnlMynViFhxnu3EcXBZhGVWPg2qUy14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:a7:52:0a:09:01:0b:be:58:c8:59:5c:31:6c:80:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
        Validity
            Not Before: Oct 15 13:01:32 2026 GMT
            Not After : Oct 16 13:01:32 2026 GMT
        Subject: CN=4708519c815fe3654e7f9fb615c560864e6aae17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b7:78:d1:d1:6a:00:cd:ed:96:97:46:a7:b4:
                    48:c1:db:63:48:69:52:db:d6:b4:a2:e6:31:73:a2:
                    d5:33:f0:51:d2:97:72:98:57:0d:30:03:ed:90:dd:
                    f5:42:3a:dc:19:0c:d2:3f:a7:a2:f6:be:e5:ef:f7:
                    05:65:2b:8f:17:64:e1:bc:c0:b7:0c:05:3f:c3:b0:
                    45:77:d7:61:d6:95:ab:a4:ba:ee:da:ff:c4:3a:3d:
                    8a:38:f9:da:d9:02:4c:98:20:c4:58:2c:e8:37:ae:
                    68:a4:76:9f:04:3a:75:33:09:d7:ec:47:ff:dd:1a:
                    ac:79:9f:a1:08:11:31:e0:4e:1b:3e:52:39:b8:47:
                    47:be:d6:e3:e4:32:ea:ef:94:f7:69:7a:d6:3c:ac:
                    2b:07:bd:27:8d:7b:4f:a5:b5:e0:97:c7:34:6d:05:
                    5f:2c:47:47:b9:bf:44:87:00:8d:b1:78:f1:c6:59:
                    35:c0:51:7a:fe:7b:58:e5:34:2c:6a:df:26:77:cf:
                    6f:ef:47:9b:9f:92:80:3e:34:55:07:95:e7:f0:41:
                    f6:6a:cc:c9:1c:53:f8:68:86:b9:99:64:dc:f6:8c:
                    3a:d7:a0:d7:5a:72:7d:ad:a7:01:65:f0:a6:3e:3d:
                    ea:05:c3:fd:2a:2d:1f:47:b4:3d:b4:bb:05:fd:fd:
                    b6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:08:51:9C:81:5F:E3:65:4E:7F:9F:B6:15:C5:60:86:4E:6A:AE:17
            X509v3 Authority Key Identifier:
                keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:40:2a:0b:ed:01:6e:d8:35:8a:e2:30:45:51:26:88:59:df:
         0b:74:4b:26:8d:48:57:41:6f:8f:92:e2:d0:24:aa:8d:0e:d7:
         d0:70:8d:e8:93:ed:6c:3b:59:27:ed:d1:70:67:27:83:d1:13:
         40:e2:36:23:e0:c0:9d:08:d1:83:b7:ec:0e:dc:ec:dc:ee:e9:
         18:21:e4:3d:bb:b1:31:89:10:68:b7:e9:ee:7d:45:64:ea:7b:
         98:13:35:fc:32:19:fd:b6:54:18:f1:53:f6:4e:7e:10:ec:c2:
         8a:33:0f:6f:3e:95:5e:f2:bb:f4:4e:00:68:ae:9f:eb:3d:b2:
         30:69:48:dc:de:ef:14:32:ee:98:3e:ac:69:1e:03:95:df:44:
         51:a1:ea:57:ce:75:0d:d2:b8:77:b7:cf:c7:97:67:b8:6e:6c:
         78:e8:88:a2:55:30:24:63:38:be:2f:62:5a:43:43:86:6f:7a:
         6b:c1:1d:10:65:40:0c:37:89:10:8e:d2:d0:30:92:82:a9:ad:
         72:27:3e:01:08:2e:1d:d2:cb:18:39:58:de:70:5a:5c:e1:ae:
         db:5c:11:93:9e:ef:4c:00:20:ce:2c:2c:60:ba:dd:76:01:cc:
         a2:13:09:39:0c:42:6a:61:e3:06:0e:ce:8a:6a:f7:8c:fa:79:
         d6:64:7c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:40:27 2026 by rpki-client