Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
File:                     9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft (raw, json)
Hash identifier:          89ctgS8czhZt56tW5HoMO0UK/Aa0BrXPx4T0ewc9AmQ=
Subject key identifier:   D7:A6:41:39:21:64:4D:BC:4D:7A:A0:C2:C7:24:01:F5:DB:9D:B4:E3
Authority key identifier: F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4
Certificate issuer:       /CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
Certificate serial:       01A148AA81068D0EDE19B3F03C099A47E43A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
Manifest number:          1AA6
Signing time:             Sat 17 Oct 2026 07:01:35 +0000
Manifest this update:     Sat 17 Oct 2026 07:01:35 +0000
Manifest next update:     Sun 18 Oct 2026 07:01:35 +0000
Files and hashes:         1: 9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl (hash: bHU38B5pHm1bu2UiXsuLHMX/qYmzkJU2r2WfhWMZBIY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:aa:81:06:8d:0e:de:19:b3:f0:3c:09:9a:47:e4:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f65c6dcd9fdbd24c16e50ae1551ee8f43ac8bfd4
        Validity
            Not Before: Oct 17 07:01:35 2026 GMT
            Not After : Oct 18 07:01:35 2026 GMT
        Subject: CN=d7a6413921644dbc4d7aa0c2c72401f5db9db4e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:88:53:7e:d1:f8:06:f9:f6:5c:0c:00:47:8e:
                    0c:e7:70:be:b9:24:94:47:b7:1b:fd:e8:7a:aa:ed:
                    e2:d2:74:cc:81:29:68:ad:0c:80:3d:2f:93:b4:0a:
                    50:d9:fc:be:e9:50:53:39:a5:59:a7:b1:b8:d9:4c:
                    8f:81:95:c9:1a:b6:6a:30:67:ed:b7:84:63:65:a1:
                    03:d6:34:0c:f4:ae:b6:f5:0f:10:67:47:ee:74:d9:
                    b7:a6:ad:a8:a4:4e:99:2d:08:5e:fe:9c:f4:37:8e:
                    4c:ec:ef:c6:c7:6b:bf:a6:7c:05:cc:6d:85:69:2d:
                    5c:0f:4b:08:e8:cd:54:2a:0e:31:14:d8:94:09:24:
                    46:cc:d6:97:64:8b:5e:7a:77:1d:a2:4e:a1:a5:8f:
                    16:74:38:f3:bc:f5:f7:b2:7b:86:d8:3c:0d:d5:17:
                    76:32:e9:86:b6:93:cb:7a:1b:bf:57:c3:79:78:c6:
                    59:7f:8e:25:21:76:89:fb:a1:70:ee:e3:c0:7d:6e:
                    e3:fa:01:b7:63:8b:96:4b:7c:7d:0c:35:44:5c:83:
                    ed:ab:2b:41:9f:37:6b:95:b4:c3:a7:ad:d1:31:ee:
                    65:1a:f0:90:11:64:09:53:18:22:95:3f:d4:10:83:
                    63:f9:71:e3:e7:87:4b:83:2d:ef:90:0e:91:d9:35:
                    a8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:A6:41:39:21:64:4D:BC:4D:7A:A0:C2:C7:24:01:F5:DB:9D:B4:E3
            X509v3 Authority Key Identifier:
                keyid:F6:5C:6D:CD:9F:DB:D2:4C:16:E5:0A:E1:55:1E:E8:F4:3A:C8:BF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/65a93e-33ef-4760-bd4e-1973635167b2/1/9lxtzZ_b0kwW5QrhVR7o9DrIv9Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:4b:64:55:ba:d4:e2:7b:0f:18:17:f9:f7:cc:2a:78:44:8e:
         70:3d:b6:6b:09:17:6e:0e:b5:a7:b9:55:c2:6f:fb:8b:9e:72:
         9c:b4:6a:d1:3f:23:e5:65:46:ff:df:a9:9e:85:00:be:ef:d9:
         45:96:f2:7f:83:16:3f:67:92:30:18:c9:15:4f:1e:34:7c:57:
         92:06:f3:18:0e:32:8e:f3:1d:e0:7b:41:89:c9:33:3a:ae:5d:
         2a:53:65:8c:2e:ee:d6:a8:2a:21:37:3f:11:82:fa:84:e6:03:
         d5:a5:79:43:dd:45:37:2d:3d:cf:74:e8:2c:b2:34:2e:c3:8a:
         02:2f:00:54:21:d9:f0:7a:0a:1b:1f:87:2f:c4:27:df:04:8c:
         eb:35:65:02:65:f4:48:50:d7:9b:fd:b5:9b:b3:a3:5c:fd:96:
         cc:6c:8d:d3:c3:94:8c:a9:11:9d:20:23:1e:9f:1a:20:87:97:
         77:7a:4d:da:fa:c6:c9:26:8e:e9:10:b2:87:03:98:04:d7:a6:
         bd:34:e9:b0:f2:59:1d:ac:6c:25:b3:31:bd:0d:49:36:81:97:
         cf:59:b5:29:6f:eb:18:e2:c8:29:08:e8:20:50:51:ef:7d:5b:
         62:b6:7b:08:5d:ff:2e:06:1e:99:85:b3:8b:95:c4:b3:b9:8f:
         d8:a9:84:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 09:57:13 2026 by rpki-client