Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
File:                     169EtH8IvQvo_AX5sMFaWrxiA6o.mft (raw, json)
Hash identifier:          sx7rHwlObh5io8+LH+h6cbz6n5mAtVRepFWs5XYIr0I=
Subject key identifier:   9E:C5:C3:5A:04:FE:15:24:84:37:22:88:C5:29:75:61:60:19:50:DD
Authority key identifier: D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
Certificate issuer:       /CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Certificate serial:       01A1404C48CA5E01AD6FC6FEE9657AF5A589
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
Manifest number:          104E
Signing time:             Thu 15 Oct 2026 16:01:43 +0000
Manifest this update:     Thu 15 Oct 2026 16:01:43 +0000
Manifest next update:     Fri 16 Oct 2026 16:01:43 +0000
Files and hashes:         1: 169EtH8IvQvo_AX5sMFaWrxiA6o.crl (hash: vKeSIVJujRTVVxwOe1L1Wx4KMbarN9jyysWbsg9ueXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:4c:48:ca:5e:01:ad:6f:c6:fe:e9:65:7a:f5:a5:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
        Validity
            Not Before: Oct 15 16:01:43 2026 GMT
            Not After : Oct 16 16:01:43 2026 GMT
        Subject: CN=9ec5c35a04fe152484372288c5297561601950dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:81:d9:e8:00:af:85:9e:5f:0e:49:3a:99:b3:
                    42:c1:50:67:e2:49:12:3e:3b:6e:ed:5f:68:87:8f:
                    a5:d1:09:e1:50:c1:28:12:13:6f:f5:af:c2:6b:c3:
                    9a:39:c4:a4:f2:bf:0e:ec:cb:3c:33:0f:22:35:21:
                    f9:48:b8:ff:ab:fc:fb:42:d1:ac:41:7b:43:71:03:
                    0c:77:b7:11:e3:6f:6f:99:bf:5d:59:3a:a4:46:75:
                    25:d1:51:0a:84:f7:35:8c:78:09:7d:13:36:81:ef:
                    d4:de:a3:40:cc:06:04:75:51:18:e8:63:5d:f2:b1:
                    86:51:5d:2e:5e:e2:b2:a0:9b:04:7b:ee:a7:e3:12:
                    22:0f:68:9e:4b:8d:79:37:c9:f5:35:b8:a6:eb:b3:
                    6c:8c:02:ee:b3:8c:98:67:0d:9d:06:b9:aa:a7:86:
                    c3:2e:4b:23:3a:01:07:7f:9b:a0:49:07:97:b9:ba:
                    34:7d:b2:b9:bb:1c:dc:f5:28:0d:74:26:98:89:60:
                    c8:e6:4a:29:03:23:44:b2:00:73:c3:18:69:3d:c3:
                    0a:15:37:1b:c8:79:56:b1:8e:ad:cc:85:f5:5b:64:
                    59:36:f8:02:49:e2:eb:bd:10:5a:ca:ab:1f:f8:26:
                    b6:f6:99:0e:f5:10:34:dc:32:1e:b6:56:45:1a:2e:
                    09:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C5:C3:5A:04:FE:15:24:84:37:22:88:C5:29:75:61:60:19:50:DD
            X509v3 Authority Key Identifier:
                keyid:D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:fc:1e:af:c6:8a:32:ce:38:5e:f4:5d:27:a3:6e:65:5d:fa:
         3b:c6:8d:b0:94:a1:0d:27:56:65:f3:9d:0f:4e:1e:0c:ee:fd:
         c9:a5:57:7a:d1:a3:f9:8f:da:67:83:57:6e:02:65:72:43:ca:
         d2:b6:83:51:3b:db:8d:65:d2:41:29:55:61:58:af:8b:64:eb:
         50:d1:f3:2b:10:94:8d:74:bf:a5:12:61:cf:fa:20:94:c1:b0:
         e9:14:0b:ff:db:10:f4:cb:3b:52:5c:e7:ba:71:f4:16:df:5d:
         74:58:f7:4f:f2:a4:11:a3:f2:ad:27:ab:fa:8c:94:33:1a:db:
         a5:41:88:2a:50:10:12:36:ab:46:8d:b0:9d:f1:52:76:00:bc:
         f3:17:b3:b7:6c:34:2e:4b:d4:53:9f:e4:f9:03:34:3a:2f:3c:
         5b:f2:63:ae:26:1c:6f:f7:bc:76:db:7d:64:58:66:4d:e8:fd:
         66:67:6d:7f:5c:79:99:1e:1c:64:8c:5f:0b:85:9a:90:5c:ba:
         56:ce:63:5e:cb:15:00:7d:69:ff:54:8a:36:d3:49:46:bd:1c:
         a8:d1:23:de:c5:b6:22:6a:b2:d3:2c:79:ff:7c:44:6f:7a:ee:
         07:86:7a:62:8b:21:09:e7:70:f6:5f:69:27:e4:b4:44:ec:17:
         13:b6:1c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:56:37 2026 by rpki-client