Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
File:                     p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft (raw, json)
Hash identifier:          ODJ020yPkeFEwy4c9abnw0PQSZ00XVw7+VpMaVL3YsI=
Subject key identifier:   8D:7D:A0:D3:AD:35:DA:A8:FD:A7:C3:63:D1:9D:63:9D:9C:D1:D6:9E
Authority key identifier: A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81
Certificate issuer:       /CN=a7f66522f403d8c994a484682870799417ce1e81
Certificate serial:       01A14DD06F0EA11BBF79B9DFC4CB71E1C62F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
Manifest number:          1630
Signing time:             Sun 18 Oct 2026 07:01:07 +0000
Manifest this update:     Sun 18 Oct 2026 07:01:07 +0000
Manifest next update:     Mon 19 Oct 2026 07:01:07 +0000
Files and hashes:         1: Kh2cfJTXoBgXnb5cU5bkPsfJ3G8.roa (hash: OIPaE117G5MhGem++zxKuvBio3gr+RNCi90er+bU030=)
                          2: p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl (hash: 8uf8BRE8/QNNDretgBbS4e1mHdBk6UDEignD1qOAZkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 05:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:d0:6f:0e:a1:1b:bf:79:b9:df:c4:cb:71:e1:c6:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f66522f403d8c994a484682870799417ce1e81
        Validity
            Not Before: Oct 18 07:01:07 2026 GMT
            Not After : Oct 19 07:01:07 2026 GMT
        Subject: CN=8d7da0d3ad35daa8fda7c363d19d639d9cd1d69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:95:3d:30:dc:7c:b8:7c:da:6c:03:e6:b6:58:
                    42:f8:1d:d0:c0:cb:50:19:3f:9d:8b:bd:a2:d2:8e:
                    07:ba:55:dd:60:87:ad:a0:33:90:cc:4c:46:39:81:
                    a2:a5:35:fb:b1:e4:64:36:e6:f7:59:23:aa:aa:3b:
                    b6:fd:34:ff:c3:ed:04:e2:3b:cd:6b:cb:64:81:bb:
                    5c:52:d9:12:97:4a:bd:31:7f:b9:7b:24:45:10:35:
                    b4:02:de:4d:06:41:72:31:6e:54:41:da:a0:f6:19:
                    60:56:86:ae:7f:6e:e1:28:7c:40:4e:39:83:24:5b:
                    f3:ec:ad:2c:0f:17:d7:89:cb:07:08:a7:c7:21:40:
                    7d:bf:52:db:98:a8:97:8c:54:b7:39:f6:33:9e:9f:
                    0f:19:23:e8:7f:f5:30:f2:62:20:da:3d:d3:3e:76:
                    46:86:4f:24:78:f6:d6:7e:c0:21:f8:73:30:98:f9:
                    0e:ae:3b:73:73:6d:f5:a5:09:ca:36:b0:e8:06:16:
                    e9:81:78:bd:e6:ac:e0:19:ca:2f:b7:67:4e:4c:3b:
                    be:54:91:24:e4:8a:18:20:67:88:2a:41:09:b4:37:
                    0d:fb:38:ad:74:31:52:97:d9:95:81:46:d3:63:75:
                    c1:a6:e2:08:d6:5d:ec:b1:9c:06:2d:d4:c4:56:12:
                    a8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7D:A0:D3:AD:35:DA:A8:FD:A7:C3:63:D1:9D:63:9D:9C:D1:D6:9E
            X509v3 Authority Key Identifier:
                keyid:A7:F6:65:22:F4:03:D8:C9:94:A4:84:68:28:70:79:94:17:CE:1E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/52d0fe-cc6e-41d9-9643-c5d360fcdf0e/1/p_ZlIvQD2MmUpIRoKHB5lBfOHoE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:b7:b9:c2:fc:04:4d:31:bf:cc:0a:16:4c:e0:80:c7:dc:d2:
         4e:30:7d:f7:93:2b:c1:5d:1a:3e:d4:92:5a:5d:f7:e2:69:33:
         95:f3:5c:2f:f2:ca:86:76:e5:64:dd:26:b6:8f:e0:28:16:e7:
         fb:39:21:67:fd:4d:74:1f:4a:c4:6a:e9:be:c4:de:a1:64:90:
         4f:4f:6f:cd:aa:e6:73:c5:c1:08:c2:a0:4f:e0:d1:e5:29:33:
         9e:a5:a9:af:a4:e0:bf:3c:dd:cf:fb:e7:05:87:73:c8:18:8d:
         55:41:e7:08:45:b7:ec:2c:df:0e:f6:5f:8a:86:a2:15:d2:2e:
         22:2c:91:b2:53:fd:29:98:96:10:2d:7b:6b:36:85:a0:e7:ae:
         f5:1c:21:7d:88:60:3e:4a:75:9b:a0:8b:2f:53:cc:e2:f5:f3:
         cf:9d:1d:e7:a8:ea:fd:94:9c:61:e6:cf:b6:d8:42:77:39:5f:
         0e:1f:8d:a7:77:dd:96:50:b1:2c:3f:8c:a3:12:18:34:b4:02:
         7c:6d:f2:37:7a:aa:bf:43:be:48:eb:dc:c2:8f:1f:cd:0b:00:
         7a:03:ec:13:f1:24:54:48:d5:e7:38:90:27:60:03:b9:91:cf:
         07:db:d2:fe:5f:9c:a7:4d:5a:71:29:77:37:d7:4b:21:f9:b4:
         1b:e3:1d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 12:05:23 2026 by rpki-client