Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File:                     D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier:          EAMW3S39f0iXcyamKOE3evI+hONaUWserVOngWtRQ4E=
Subject key identifier:   60:7C:6B:0D:ED:B8:82:E8:4B:28:B4:38:48:78:C5:CB:F4:11:EB:D6
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer:       /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial:       01A18F432B92959F89D0E4CF2731359033B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number:          19CE
Signing time:             Sat 31 Oct 2026 00:01:46 +0000
Manifest this update:     Sat 31 Oct 2026 00:01:46 +0000
Manifest next update:     Sun 01 Nov 2026 00:01:46 +0000
Files and hashes:         1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: GPw26FYxK81ZLPBzGSYxUXj3cIXSvV+8KDffxY8A5lk=)
                          2: Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa (hash: 8IHzguHfDhF9TOnq36/iF4YhTgkRtVGmhvaPUXHm58k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8f:43:2b:92:95:9f:89:d0:e4:cf:27:31:35:90:33:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
        Validity
            Not Before: Oct 31 00:01:46 2026 GMT
            Not After : Nov  1 00:01:46 2026 GMT
        Subject: CN=607c6b0dedb882e84b28b4384878c5cbf411ebd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:45:21:d5:91:2c:2c:22:06:f5:c6:80:57:
                    e7:16:44:26:53:97:e3:63:09:eb:ea:6e:b0:78:7e:
                    39:e9:51:d9:bd:1a:99:4c:be:63:bb:9f:0d:18:06:
                    21:d0:86:c1:5d:7d:10:f6:c4:e8:fe:bf:02:8f:6b:
                    91:e5:f7:6d:f1:74:d7:26:0a:f8:2d:d5:1c:f8:3e:
                    a8:f5:38:bd:9a:b1:0d:1e:b5:4c:b9:f5:50:7a:98:
                    67:97:17:00:77:90:48:dd:3d:40:34:5c:8d:3f:92:
                    a0:ef:4b:24:42:bf:3f:bb:1f:5b:e3:c1:08:c5:56:
                    6f:a5:06:fa:0c:fe:03:6e:cb:78:4d:55:e4:db:59:
                    ed:33:2c:bc:48:5b:f0:12:a6:a2:0c:05:79:cf:c5:
                    f8:df:14:11:09:4d:89:60:f0:71:4e:89:2e:d6:14:
                    94:5b:32:d5:6f:b4:09:3e:ba:c9:a4:28:ed:37:86:
                    dc:17:ec:d7:17:05:55:35:97:fd:fa:de:69:fb:e2:
                    43:93:86:ce:3d:ef:4a:8e:ce:7f:79:a1:86:03:a4:
                    72:91:21:b8:6e:0b:6c:b6:3c:89:c1:6c:78:b2:a6:
                    09:8a:90:ac:23:21:09:78:f8:52:68:ca:84:6e:a4:
                    23:f5:95:0f:06:f3:1a:97:3c:5e:5d:31:9b:7a:ce:
                    9b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:7C:6B:0D:ED:B8:82:E8:4B:28:B4:38:48:78:C5:CB:F4:11:EB:D6
            X509v3 Authority Key Identifier:
                keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:26:22:6c:71:0a:96:4d:6d:b0:94:f1:90:2a:18:d6:4a:7e:
         74:52:97:7d:3a:96:dd:b4:1a:60:6a:9c:06:61:e6:ea:5b:7e:
         b1:3c:d9:0a:c0:d7:00:a5:9d:1d:61:16:e5:26:ac:00:07:c7:
         07:69:12:e7:20:85:30:17:ac:a7:f0:b1:e6:7d:c4:1e:6b:28:
         99:a9:6a:88:22:25:f8:a1:8b:a4:af:bc:bb:64:be:6f:2c:84:
         28:bf:43:8a:71:5c:c7:2b:f2:cf:38:2c:57:d2:71:f5:af:d0:
         e1:a3:6e:c9:77:83:c4:71:2f:1d:ac:69:ea:c8:ae:9e:56:7e:
         67:d9:d0:a3:4b:66:d1:ae:f9:1a:43:d3:fa:79:c3:f7:e4:f7:
         59:0a:ac:64:27:ce:42:5c:bf:f9:80:74:04:9e:df:64:93:1e:
         ab:84:7b:dc:2a:ae:b2:82:f3:d0:75:e3:9a:12:72:58:27:28:
         a5:e8:81:75:6c:74:d5:16:69:d2:7e:48:54:0b:3a:8b:af:7d:
         b3:cb:e1:72:58:63:ee:77:25:35:36:46:d8:ca:56:dd:33:d0:
         20:eb:63:86:52:31:8e:cd:ee:53:22:db:f3:d3:67:4e:b7:4d:
         0c:5e:b7:4c:ba:3a:7c:22:3b:ee:03:39:93:5f:44:ca:0a:97:
         59:70:9e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 04:28:41 2026 by rpki-client