Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File:                     4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier:          pyoqjbGMf+ouxCj/vZ2LnKLI3gx1iieKn5FDVDCldi8=
Subject key identifier:   C9:08:AD:22:F9:34:C2:50:F7:F5:08:F4:D5:E3:E8:04:D7:09:42:63
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer:       /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial:       01A14797765C1E44E247E1C26EB580CB7216
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number:          15DD
Signing time:             Sat 17 Oct 2026 02:01:10 +0000
Manifest this update:     Sat 17 Oct 2026 02:01:10 +0000
Manifest next update:     Sun 18 Oct 2026 02:01:10 +0000
Files and hashes:         1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: 3idmWLxmRUohi9t+Lvlv00K9ebYWKxdcjNmozpMgdqI=)
                          2: NdV1685pUzzupc5kE5-ldMdSDxg.roa (hash: ueorjyehMNjdQkD1BLlElPr49sGyaBsEZXRjheGpYAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:47:97:76:5c:1e:44:e2:47:e1:c2:6e:b5:80:cb:72:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
        Validity
            Not Before: Oct 17 02:01:10 2026 GMT
            Not After : Oct 18 02:01:10 2026 GMT
        Subject: CN=c908ad22f934c250f7f508f4d5e3e804d7094263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:dd:ee:82:5c:24:51:3d:8e:13:a5:d3:af:19:
                    4b:bb:68:70:dd:6d:fb:04:9f:4a:3c:a7:79:a0:21:
                    ca:87:32:b5:6e:db:e7:f1:d6:df:7e:8d:56:40:47:
                    da:b1:3c:90:dc:bf:9e:cc:06:46:4d:bf:b8:7f:be:
                    e0:d3:27:1d:8c:8e:85:96:e5:82:ed:38:f1:27:8a:
                    54:69:78:4c:9f:81:d8:b4:31:3c:35:f7:52:13:61:
                    1e:0a:34:e7:ad:d3:31:8d:e8:9e:07:07:2c:48:5c:
                    7d:b9:cd:dc:4c:67:64:8c:81:10:54:3d:45:d1:20:
                    ee:ef:76:01:f3:de:46:bb:d8:ba:67:86:21:fd:be:
                    04:1d:dd:04:fe:d5:80:9f:cc:a2:2c:c2:23:6c:3b:
                    23:ed:a2:a5:ba:de:58:8c:ae:d3:94:1b:1e:3f:fe:
                    4d:04:6b:8a:0b:24:f5:78:36:bc:1e:13:de:4c:ba:
                    e0:a0:af:eb:a5:a1:87:69:31:20:4b:c7:fa:a1:42:
                    62:49:ec:30:0c:3e:c3:0e:86:85:2f:b3:e7:d3:d3:
                    1b:93:c5:6d:86:0d:5f:88:1f:c4:ef:4e:e8:e1:67:
                    3b:42:27:aa:dd:ac:77:7c:81:c2:51:24:11:5c:90:
                    db:4d:ca:14:b2:49:07:40:90:01:7f:16:74:54:85:
                    d4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:08:AD:22:F9:34:C2:50:F7:F5:08:F4:D5:E3:E8:04:D7:09:42:63
            X509v3 Authority Key Identifier:
                keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:0e:85:5e:e5:a5:ca:e7:3a:3d:c3:ef:2d:e0:0d:8c:35:76:
         0c:bf:e6:d7:2f:9b:cb:e4:d7:1b:0e:d8:fb:6c:42:fd:df:c0:
         85:7b:99:f3:ca:57:3b:12:0a:bd:ae:bc:7e:d9:45:e3:1f:bf:
         55:2d:30:e0:60:fa:46:05:41:fc:ea:8c:15:ca:f6:22:7f:c9:
         d7:e4:aa:39:53:e6:fa:57:96:28:f9:30:6c:af:26:49:98:a6:
         51:2c:f7:78:b0:74:40:f4:a2:33:a4:ca:2d:58:11:d0:d8:2a:
         6e:df:9e:6b:39:b5:49:04:dd:60:51:4b:19:76:77:61:47:02:
         35:23:a9:a2:1d:4c:25:f9:62:f1:dd:3f:04:55:6b:51:d3:d9:
         1d:c3:3c:4c:bc:fd:f8:3f:68:38:8f:fb:2b:6c:1a:ca:c4:02:
         a8:d3:6a:db:04:28:3f:f4:a7:58:c5:aa:1a:cf:d3:70:bb:62:
         c8:c2:db:ab:57:7d:2b:3e:32:2e:72:c6:b4:69:17:b7:dd:dd:
         33:f6:50:83:ad:a3:cc:0c:36:f8:02:15:1c:fa:46:62:20:98:
         88:c0:fa:0f:74:fe:c1:09:90:88:de:07:04:90:75:cc:c1:8f:
         34:e9:47:df:1d:c9:96:2d:1c:cf:6f:c1:ed:a7:82:a7:cc:93:
         5b:69:87:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:00:25 2026 by rpki-client