Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft
File:                     6UUBLq3IWU41GvpoVrw6GUsliH8.mft (raw, json)
Hash identifier:          1niVMtgjouCpFxkyOIyuAUg9f1PlQieJeRrQvw+ZaNo=
Subject key identifier:   28:5A:31:88:3C:1D:A0:91:FE:9C:8D:9C:85:E6:08:44:92:FF:34:D6
Authority key identifier: E9:45:01:2E:AD:C8:59:4E:35:1A:FA:68:56:BC:3A:19:4B:25:88:7F
Certificate issuer:       /CN=e945012eadc8594e351afa6856bc3a194b25887f
Certificate serial:       01A1792801D9872C052289D60F17C823035C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6UUBLq3IWU41GvpoVrw6GUsliH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft
Manifest number:          0113
Signing time:             Mon 26 Oct 2026 17:00:27 +0000
Manifest this update:     Mon 26 Oct 2026 17:00:27 +0000
Manifest next update:     Tue 27 Oct 2026 17:00:27 +0000
Files and hashes:         1: 6UUBLq3IWU41GvpoVrw6GUsliH8.crl (hash: t2nCn2tyNDF+P8tj+cNEz1vfXj8sDnNJQ8JhUWtsi6M=)
                          2: u6bPPDorwS9CKClEUNjksXyri0o.roa (hash: gLQa9Qy9OIBwLL9zfXE5Kk8EtYZV+dhDzjKvcFTXDYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6UUBLq3IWU41GvpoVrw6GUsliH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 17:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:28:01:d9:87:2c:05:22:89:d6:0f:17:c8:23:03:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e945012eadc8594e351afa6856bc3a194b25887f
        Validity
            Not Before: Oct 26 17:00:27 2026 GMT
            Not After : Oct 27 17:00:27 2026 GMT
        Subject: CN=285a31883c1da091fe9c8d9c85e6084492ff34d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0a:51:33:d0:2f:5b:2a:7d:12:28:7b:25:a7:
                    0b:dd:08:d0:b2:f0:af:fa:36:40:ba:d5:17:ce:47:
                    3e:99:4c:39:0a:a1:7c:14:fe:86:db:48:46:2f:da:
                    cf:36:76:9c:77:74:e5:19:0a:9d:cb:c7:a1:e1:f9:
                    ce:f5:d4:3d:c7:fb:29:a6:64:86:f1:f6:64:00:7c:
                    d1:8b:90:23:54:6f:85:18:d0:aa:20:7c:bf:55:44:
                    0c:cd:14:e9:13:42:f9:04:f4:38:03:b1:10:62:4d:
                    f6:24:4f:98:29:85:4c:0e:86:2d:c0:0b:61:09:51:
                    c2:0d:bd:fa:80:5d:4a:7f:63:8b:b2:ae:1f:0e:4c:
                    a4:01:3f:8e:55:ce:f8:89:5e:cb:b6:78:7a:f2:38:
                    76:ff:06:d5:c8:cc:b8:4a:66:8a:69:f1:fc:ce:fa:
                    5e:b6:e9:04:34:27:29:e2:26:46:a5:30:ae:49:de:
                    0c:73:3d:e8:79:36:40:73:3f:ce:6b:fa:93:77:bc:
                    3a:18:ce:fa:65:73:2b:89:5e:30:48:c5:1b:5f:cd:
                    45:18:eb:e4:0c:e6:3a:32:d0:eb:21:d5:cb:d3:ee:
                    e3:79:c3:d7:83:fe:45:80:45:ea:49:68:81:01:f9:
                    2a:26:44:bc:12:c6:7c:ef:db:fd:0a:26:14:fb:08:
                    9e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5A:31:88:3C:1D:A0:91:FE:9C:8D:9C:85:E6:08:44:92:FF:34:D6
            X509v3 Authority Key Identifier:
                keyid:E9:45:01:2E:AD:C8:59:4E:35:1A:FA:68:56:BC:3A:19:4B:25:88:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6UUBLq3IWU41GvpoVrw6GUsliH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7bc7c2-b27a-47f6-858f-1f1fe36de6cd/1/6UUBLq3IWU41GvpoVrw6GUsliH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:73:2e:69:05:0d:d8:c0:56:ce:c3:01:a2:cd:7b:25:d5:cd:
         9f:5c:d2:99:72:cd:b1:ef:42:fb:8e:db:4a:2f:40:f0:c3:da:
         65:73:26:f8:92:dd:86:b1:c8:90:d2:dc:94:96:c0:bc:23:5e:
         3e:9f:75:6a:c4:ab:11:89:d9:50:f0:73:ac:9d:56:02:d4:21:
         8e:5d:b7:b8:79:6d:5f:78:25:d4:49:dc:5b:a6:b5:6c:70:87:
         66:24:e2:b0:d1:1b:54:13:e0:a8:9c:ad:f8:79:b1:04:f2:f7:
         f9:e2:df:39:c6:b4:90:d5:3e:7b:ad:31:8d:4e:4b:cc:d0:27:
         9a:15:d7:1d:5e:99:79:4f:3f:5b:f1:df:d1:c4:8a:57:bd:44:
         aa:36:0f:6e:a7:ea:d2:f8:ed:85:1d:6c:dc:c5:be:fd:af:fc:
         24:39:7e:4d:af:35:0c:63:a4:4b:c3:99:ce:86:83:40:19:4d:
         08:9c:ea:16:e3:2c:9a:f8:8f:d6:ff:cf:39:70:b7:4b:e8:6b:
         7d:82:0b:ea:7c:48:f6:db:68:fd:57:e0:0f:6a:6d:07:ca:e8:
         02:b3:1b:64:f0:04:93:e8:d8:c8:86:3d:a9:a6:dc:f8:b6:28:
         a0:77:d8:a6:a7:75:78:27:f6:38:d8:f9:11:c6:96:80:3d:17:
         76:4b:01:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:38:45 2026 by rpki-client