Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
File:                     L228auC1ihFzHyGe2gIkcdHhHts.mft (raw, json)
Hash identifier:          QDCrPNbq54KKUncv01KDHE+yIvZ/SZBQswGxKUdTjh4=
Subject key identifier:   04:0D:3D:39:22:CA:5C:53:FF:E3:98:DA:1D:4C:27:34:9E:E4:66:31
Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
Certificate issuer:       /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Certificate serial:       01A1174F357DAD273D97739D757BACA29E75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
Manifest number:          08B9
Signing time:             Wed 07 Oct 2026 17:00:29 +0000
Manifest this update:     Wed 07 Oct 2026 17:00:29 +0000
Manifest next update:     Thu 08 Oct 2026 17:00:29 +0000
Files and hashes:         1: L228auC1ihFzHyGe2gIkcdHhHts.crl (hash: 5DdNIqltjmAdPxGFjojioBRWx5mWiIbgUhJ8vjn0avQ=)
                          2: moBWHmY5dUscCoFGFgkj8lgTo6k.roa (hash: SdWsLpL7bWufA3L06GIvSvKd8LEI6DM8Lhn01PlHx/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:17:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:17:4f:35:7d:ad:27:3d:97:73:9d:75:7b:ac:a2:9e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
        Validity
            Not Before: Oct  7 17:00:29 2026 GMT
            Not After : Oct  8 17:00:29 2026 GMT
        Subject: CN=040d3d3922ca5c53ffe398da1d4c27349ee46631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:67:cf:c8:67:42:35:e3:bc:74:21:44:d9:
                    bf:77:9a:60:b0:50:7b:ec:9e:a0:37:85:20:0e:e5:
                    f2:01:a4:f4:47:4e:df:45:e4:0b:75:34:33:ce:7e:
                    c1:be:41:f6:27:b7:38:52:a9:57:24:88:b6:25:cf:
                    82:96:4a:74:ec:58:6a:ac:de:a7:d6:57:fd:10:b7:
                    9f:7e:5c:5e:81:30:8a:44:2c:43:c1:6e:ba:7d:9b:
                    e9:ae:3c:8b:89:46:2d:d8:f1:d4:de:b7:e7:e2:43:
                    ce:ca:1b:7a:ad:3d:7f:bf:63:af:57:95:7c:ea:ac:
                    49:af:51:28:b6:55:a9:a0:2d:af:c6:53:a5:71:60:
                    6c:8a:1f:58:30:24:f4:22:b5:9e:8d:d4:07:47:90:
                    f0:0f:35:82:3d:07:75:88:29:e8:9c:8a:84:87:8a:
                    ef:4c:f9:f2:df:7c:8e:6d:01:46:f4:30:8a:ff:27:
                    7e:0f:9c:76:d7:f8:14:d5:60:20:69:5b:ba:45:26:
                    0a:c3:9d:03:dd:92:04:eb:53:13:2c:8b:1e:bb:fb:
                    8b:6a:4c:90:76:0e:1d:51:6e:eb:3a:bd:1f:5c:8d:
                    70:9f:e6:a0:09:c5:16:55:fc:03:b1:be:19:30:a9:
                    43:69:52:4b:55:fe:89:67:1a:25:3b:4d:a7:d1:0e:
                    38:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:0D:3D:39:22:CA:5C:53:FF:E3:98:DA:1D:4C:27:34:9E:E4:66:31
            X509v3 Authority Key Identifier:
                keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:0a:15:0f:d7:cd:23:8b:e2:20:c0:f5:97:5d:94:5f:f8:09:
         92:e1:7d:b5:13:1f:1c:71:fa:ba:22:aa:71:94:9f:52:37:03:
         dd:13:8c:90:a0:12:ad:be:6d:46:e7:21:5a:a2:dd:9e:04:e1:
         70:3c:cf:19:3c:50:c7:a4:36:76:9c:2e:46:46:1e:0d:15:e6:
         7c:2d:df:1f:58:c5:2b:69:1f:11:fb:1f:7a:ac:a0:c7:fb:56:
         db:ae:e4:d0:48:f1:27:a4:28:69:6c:71:a1:5c:e2:1b:7f:d8:
         19:89:ed:85:48:a1:c6:56:ca:9a:c7:6f:bb:4b:e3:cf:05:d8:
         9d:9d:bf:75:47:ce:13:a7:5e:87:5b:b9:e6:a8:e2:94:e4:9b:
         6c:d4:e3:fe:3e:26:17:16:ac:cb:a6:b2:e1:57:ed:22:46:8c:
         ff:97:5b:c8:24:ca:56:e3:e5:b8:a2:0e:f1:8c:d2:f2:d9:5e:
         a5:74:7c:fe:5a:92:7e:22:21:b8:67:6e:19:5f:f3:45:e5:c8:
         d2:15:97:0d:60:52:9b:69:37:1e:d7:04:52:46:0c:46:0c:09:
         30:d9:d7:c8:fb:9e:37:6f:e1:f7:45:d1:35:fc:52:a2:63:e5:
         28:50:1d:1a:a4:e4:05:36:42:41:e4:02:9d:fb:6d:ef:8f:3f:
         bc:e4:b7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:46:23 2026 by rpki-client