Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
File:                     Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft (raw, json)
Hash identifier:          YvbELHEhv9nz4uDiydGXHG4PBAnyxM7uwZErvT6Vwro=
Subject key identifier:   C5:18:41:F0:F3:16:5D:80:CF:26:FE:7C:19:33:46:39:A4:C0:CB:8C
Authority key identifier: 0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E
Certificate issuer:       /CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
Certificate serial:       01A1483CA3B5A34A20AAA8BFDA7E8EBF8870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
Manifest number:          0AC1
Signing time:             Sat 17 Oct 2026 05:01:35 +0000
Manifest this update:     Sat 17 Oct 2026 05:01:35 +0000
Manifest next update:     Sun 18 Oct 2026 05:01:35 +0000
Files and hashes:         1: Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl (hash: ROvpw2P1cEOS/Lp/DIBlocjS0/a9lGDwjMZTy+WaQ8U=)
                          2: DbYJx7JXKJ9wdhDQPyH1vJ8oFyk.roa (hash: JiptkbKrDJYQv6S2sH88o03YQZYmGVEGaHVPzSzw6og=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:48:3c:a3:b5:a3:4a:20:aa:a8:bf:da:7e:8e:bf:88:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7bbcde57d85b3fb1aadcba9c99775e19eeef3e
        Validity
            Not Before: Oct 17 05:01:35 2026 GMT
            Not After : Oct 18 05:01:35 2026 GMT
        Subject: CN=c51841f0f3165d80cf26fe7c19334639a4c0cb8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a6:8d:d9:b4:1e:81:c1:46:a3:29:a3:53:af:
                    0b:34:40:03:61:13:63:c4:30:18:5f:bb:b1:c4:56:
                    de:43:86:49:18:ae:4c:65:0c:2c:d4:8b:1f:2d:63:
                    d2:47:4a:d7:88:e6:df:81:8f:fc:33:a6:79:c8:8e:
                    ca:71:10:6d:66:ab:ed:26:ad:a1:17:c2:05:6a:b3:
                    52:be:1b:79:9d:d9:f9:eb:92:da:83:79:7a:9c:9f:
                    44:34:5d:a7:6c:b9:76:21:a8:41:09:94:dd:9c:6f:
                    2a:5d:0f:87:89:c7:56:7f:8a:79:77:ae:88:24:d3:
                    ce:46:8a:dc:7e:b6:41:14:33:fe:c1:32:5f:4d:f8:
                    5e:e8:96:40:54:34:fc:2e:73:c1:39:69:be:c3:ea:
                    06:99:c7:a9:c4:60:d1:c9:4b:29:8c:83:ee:fb:01:
                    ec:20:50:e7:3a:b7:a9:2b:0e:f1:1b:47:f3:e6:ad:
                    5e:58:c5:26:c5:6d:4f:23:7c:6a:31:41:11:33:b4:
                    d0:81:1d:73:2b:08:a1:c1:ea:65:4c:0b:7b:a2:30:
                    7c:0e:bd:21:10:89:0f:a2:51:e1:bf:4c:07:c3:53:
                    fa:af:c8:b8:06:71:2b:a0:61:b7:13:87:50:80:39:
                    df:e2:cb:de:7c:37:69:78:aa:5e:50:2a:16:26:77:
                    c9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:18:41:F0:F3:16:5D:80:CF:26:FE:7C:19:33:46:39:A4:C0:CB:8C
            X509v3 Authority Key Identifier:
                keyid:0A:7B:BC:DE:57:D8:5B:3F:B1:AA:DC:BA:9C:99:77:5E:19:EE:EF:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cnu83lfYWz-xqty6nJl3Xhnu7z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/2684fb-1edb-4142-b2b6-f090d91dcbf8/1/Cnu83lfYWz-xqty6nJl3Xhnu7z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:a2:5b:f9:87:c6:4d:a3:5f:48:4a:b6:26:c8:55:f4:52:e8:
         cd:7d:b7:7a:3b:48:8e:23:e3:5c:a6:04:5d:30:60:9c:61:61:
         f9:d5:b3:e1:81:47:5f:d4:e7:be:16:36:de:63:4b:03:0b:25:
         00:9c:43:3b:10:77:29:10:25:6a:ba:dd:4c:aa:98:25:81:c8:
         9e:08:db:8e:b4:d0:f0:11:88:1d:0c:5a:68:fc:84:24:5b:32:
         cb:cb:01:5f:b3:81:fe:65:e7:f2:e2:38:b7:27:0d:b7:e3:e3:
         3e:72:74:bd:35:e8:3f:35:3a:5b:14:b5:86:f5:5e:75:ac:8f:
         1d:4b:3c:95:0c:3b:48:60:97:41:54:12:a5:72:73:1c:bb:b3:
         24:8b:13:0d:2d:91:4a:86:8c:a5:e9:b5:8f:84:ca:d3:66:50:
         28:51:56:e3:61:82:5d:0f:93:55:a5:6d:7a:dd:32:c0:9c:8b:
         cd:51:7f:f0:e3:c9:d6:ad:73:aa:fa:61:4c:28:77:82:f4:c3:
         8a:4c:83:53:12:9e:3f:4b:da:70:f8:aa:30:94:36:8d:0c:05:
         01:70:9a:69:93:98:b5:94:39:8d:eb:04:9a:10:32:f9:8d:0d:
         4e:2a:67:4a:81:a4:df:a7:1c:b4:44:86:86:77:e7:35:ef:36:
         1b:f4:40:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:29:33 2026 by rpki-client