Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
File:                     IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft (raw, json)
Hash identifier:          Ihk2EK4mKN+t96sNoVMz0FMm8LJJgxPIpPfkRJOanRY=
Subject key identifier:   18:74:2C:9F:C0:E1:83:48:EE:29:45:E7:11:2D:05:D8:F8:2D:D3:83
Authority key identifier: 20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
Certificate issuer:       /CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Certificate serial:       01A10437398AD55A8A7E51404D472CBE99F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
Manifest number:          1A0F
Signing time:             Sun 04 Oct 2026 00:01:30 +0000
Manifest this update:     Sun 04 Oct 2026 00:01:30 +0000
Manifest next update:     Mon 05 Oct 2026 00:01:30 +0000
Files and hashes:         1: IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl (hash: OERhjGtlXgxC0m4ggEKVFu1oWWPSQiEghRc9DKQsAYI=)
                          2: huWAMVD5OszFJjEyZMJGyZnVtD8.roa (hash: GrjeMdAe8buThfTaZfxv43GTKukIwEfBZ4IJ+OfmdQY=)
                          3: tHyYlmCt8b_w6qmDnfmJNsi4fgg.roa (hash: kaLv44KKvA/h97d8YwPeGLLWQK0x8whGbJscB5eOBiw=)
                          4: vHIrFpXjJbBEQLCFk5449-qqOs0.roa (hash: fu+mos6wV/3DS80C/FDLDSbQMT9S0fJqCvMfKTRbzL0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 00:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:37:39:8a:d5:5a:8a:7e:51:40:4d:47:2c:be:99:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
        Validity
            Not Before: Oct  4 00:01:30 2026 GMT
            Not After : Oct  5 00:01:30 2026 GMT
        Subject: CN=18742c9fc0e18348ee2945e7112d05d8f82dd383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:50:fc:c3:d5:26:4c:0f:4e:84:99:0a:a2:
                    1e:fb:fe:64:c9:51:e1:91:b8:f8:dd:00:3d:1c:bd:
                    0c:98:5f:08:72:9e:db:e9:45:95:06:27:95:f8:7d:
                    cf:8a:2a:29:2e:20:88:3f:3a:b0:a0:2b:40:96:e7:
                    cd:3a:2c:24:b9:eb:ad:b2:2a:fe:b9:a7:e0:34:c8:
                    e1:e5:50:a9:b6:08:d1:8e:5e:eb:06:cf:02:00:f7:
                    9e:e0:98:e7:ac:67:4e:ee:e9:8a:7a:0a:3e:6c:ee:
                    7d:38:cb:1d:e5:d9:1a:e4:11:b0:e1:e0:56:32:60:
                    96:e4:9e:3b:16:51:c2:cc:5a:83:5d:8b:23:16:27:
                    60:ac:78:bc:1c:6d:cc:6e:87:3c:6c:40:65:b7:e2:
                    9c:e0:0a:21:3c:42:a6:92:82:8b:7d:07:95:7e:77:
                    f9:22:f9:b3:33:ad:3d:60:50:c0:d0:22:59:91:3d:
                    9d:91:fe:a5:ef:5b:00:a8:8a:01:0d:4b:7b:82:dd:
                    80:85:a9:47:0d:2e:1f:a6:4b:11:e5:25:11:c4:d9:
                    d6:cf:20:2f:2a:6e:44:81:2c:27:3f:33:67:22:23:
                    2b:a7:55:fd:20:11:26:f5:35:df:91:45:0f:3f:5b:
                    05:51:ad:00:cf:07:7f:1b:6d:0b:c2:4e:e1:61:2a:
                    d1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:74:2C:9F:C0:E1:83:48:EE:29:45:E7:11:2D:05:D8:F8:2D:D3:83
            X509v3 Authority Key Identifier:
                keyid:20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:22:87:73:b3:b2:98:de:ce:f3:a0:90:cc:ed:24:e4:5e:0f:
         77:85:0a:99:5a:8b:fb:d6:57:49:51:d6:29:d8:a6:19:fb:84:
         1f:22:26:29:10:61:22:df:d1:f3:2e:40:4a:89:cc:d7:27:1e:
         e9:de:c2:71:14:ea:0f:6e:b1:2a:2d:58:68:ef:6d:31:3c:3c:
         27:03:12:c2:e9:98:41:d6:af:9c:19:18:c4:4b:77:4d:66:29:
         e6:a1:42:53:2c:5c:1b:d2:bb:5a:42:e6:3d:f9:1b:e8:3f:76:
         e9:fe:77:89:60:35:52:f2:9d:31:20:0e:07:2d:72:ad:21:20:
         c2:ec:6a:c1:52:ac:15:93:ec:24:84:25:17:42:ca:27:28:05:
         28:64:e2:86:52:18:c2:63:e4:59:3f:39:cb:31:b1:85:97:28:
         2b:23:3f:4c:44:5c:15:d4:7d:43:06:6c:00:02:70:37:ca:66:
         49:10:3f:d6:19:9a:35:d5:98:85:ff:8d:2a:ca:23:85:b8:fe:
         6d:a1:c4:c0:c6:5a:a4:ff:1f:26:43:97:96:a3:62:67:36:d9:
         27:02:b9:a1:df:85:ab:30:d1:7f:6e:9f:b3:49:4a:c1:b9:ff:
         43:dd:02:f4:f1:de:43:b5:a6:7d:cf:c7:19:c4:0d:ed:b2:37:
         d7:1c:f9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 08:52:28 2026 by rpki-client