Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
File:                     1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft (raw, json)
Hash identifier:          D8NM07Bili0Va4atZGioD0l8c/5AQp5TNS+26mBUb4I=
Subject key identifier:   0F:73:E4:5C:AC:24:27:EE:B5:CF:A1:93:48:BA:5B:E8:9C:4A:73:C6
Authority key identifier: F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17
Certificate issuer:       /CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
Certificate serial:       01A13F0255DD9C03AC6AB31611A3F579244B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
Manifest number:          10AD
Signing time:             Thu 15 Oct 2026 10:01:20 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:20 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:20 +0000
Files and hashes:         1: 1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl (hash: 5ZwrBkjFc3Z0eyXktJXkPpO7DuHqcuCQyoUpx6P4mL0=)
                          2: LjyKQnoqZ5RymbjzsonMI_FvadE.roa (hash: fUfxxZQ9bErMyThXgB9Vm8HXoJC9cjybZ/MiJy6eLxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:55:dd:9c:03:ac:6a:b3:16:11:a3:f5:79:24:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8456292d85a0b86c4e2534b27d26b47bfe04317
        Validity
            Not Before: Oct 15 10:01:20 2026 GMT
            Not After : Oct 16 10:01:20 2026 GMT
        Subject: CN=0f73e45cac2427eeb5cfa19348ba5be89c4a73c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:ce:b6:68:43:fd:0c:ad:01:01:38:73:47:
                    4c:6d:a8:32:ee:32:e2:eb:77:0a:38:14:e3:88:7e:
                    6e:22:ab:fc:c2:cd:bb:59:46:b3:37:47:e9:a9:1e:
                    7e:9d:7c:d0:2a:0f:b9:20:bf:c9:98:0e:23:f0:80:
                    7e:f7:b8:dc:a5:8d:9a:15:11:cd:e3:8c:85:ea:05:
                    cc:05:18:fb:aa:1b:7d:a5:d1:37:6c:79:6b:bd:68:
                    c7:9a:ee:4b:c8:50:07:68:5e:bf:3a:42:88:f2:d9:
                    8b:16:69:ea:72:f2:fc:7b:ef:8c:44:a1:47:c3:d3:
                    92:dd:9e:09:9e:e2:18:c6:1b:57:b2:02:f4:99:c1:
                    55:b1:6b:13:c7:74:a0:a5:48:11:02:c4:97:1f:f1:
                    e1:2f:dd:b4:f5:af:c9:2a:52:a2:ec:3e:93:bf:bb:
                    35:fe:01:bd:78:c6:0f:48:fd:23:3d:b5:b2:7c:04:
                    c5:50:8b:c3:6c:3b:f5:61:10:26:82:dc:c4:71:78:
                    36:a3:79:26:bd:5d:38:78:bd:e2:e7:ea:b4:63:29:
                    74:cb:02:fa:e9:8f:76:9b:5d:7a:d2:da:93:c2:db:
                    84:d7:f7:e1:fc:a8:93:31:c5:5e:48:03:d1:f4:eb:
                    d5:37:20:36:33:91:37:50:cb:b8:89:1a:b7:02:99:
                    c8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:73:E4:5C:AC:24:27:EE:B5:CF:A1:93:48:BA:5B:E8:9C:4A:73:C6
            X509v3 Authority Key Identifier:
                keyid:F8:45:62:92:D8:5A:0B:86:C4:E2:53:4B:27:D2:6B:47:BF:E0:43:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EVikthaC4bE4lNLJ9JrR7_gQxc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/746767-ef5f-436c-bd5d-8e8b79926aa3/1/1-EVikthaC4bE4lNLJ9JrR7_gQxc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:28:82:4a:3e:9e:d8:43:7e:72:a3:69:a7:7c:43:5a:eb:c1:
         8c:7b:4b:60:e9:a3:c6:1c:15:3d:eb:22:3f:a2:55:3c:e7:31:
         cc:ee:6e:1c:64:b2:54:68:e4:54:fc:b2:15:b9:01:92:cb:49:
         1e:2f:4d:46:c0:18:5d:ed:0c:ed:b9:80:56:0b:e5:83:49:ba:
         e5:c4:4b:67:ec:be:51:39:de:ba:07:e5:50:71:2d:96:86:63:
         6d:5c:78:1b:19:28:59:92:f1:5b:3d:28:c9:fd:ed:ed:64:ba:
         04:27:5b:b4:2f:90:d8:0d:9d:7e:fe:56:64:73:01:b0:7a:72:
         6a:00:6e:4a:32:28:d5:ab:fb:c8:9b:40:12:48:d7:53:4b:fd:
         3a:af:6c:8f:13:b7:49:db:3f:68:53:fc:c3:47:ed:54:74:02:
         8c:94:1c:86:f5:b7:16:a0:6c:1e:71:ee:d8:6f:19:24:9d:5a:
         00:ba:df:96:4c:e7:85:e1:04:96:25:74:9f:bc:03:89:3f:91:
         1d:ea:75:bf:4e:45:f1:65:7b:3e:2f:be:86:ce:67:db:50:a7:
         ac:2e:ef:ac:7c:2b:ca:43:2d:44:8c:ac:0a:eb:da:89:8f:51:
         1e:ce:26:85:02:d9:b2:90:ea:8a:f8:f7:df:be:23:23:41:67:
         87:9e:e2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:21:40 2026 by rpki-client