Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File:                     INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier:          Hur/NZ9M3avEgwUtxGp8Dg6W+osBptLABHrf8zhGS38=
Subject key identifier:   73:D5:4A:7E:FD:3F:51:6E:F1:58:7F:7F:73:5E:AF:02:30:26:88:9B
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer:       /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial:       01A1740219C5CCE207A6CAEE09D0FFA341B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number:          08B5
Signing time:             Sun 25 Oct 2026 17:00:56 +0000
Manifest this update:     Sun 25 Oct 2026 17:00:56 +0000
Manifest next update:     Mon 26 Oct 2026 17:00:56 +0000
Files and hashes:         1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: 1Fd0pmxy3HRaU2RU9TGGgtL3Tv5DHwVqnRsWWF6x71Y=)
                          2: Iqa6GV4LdxiGIroWsllGP7YjyE4.roa (hash: Q0wZliLvPv9FNmdy4NB+Qu2Fy5dB0KdoE1fdtaOiLGQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 15:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:02:19:c5:cc:e2:07:a6:ca:ee:09:d0:ff:a3:41:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
        Validity
            Not Before: Oct 25 17:00:56 2026 GMT
            Not After : Oct 26 17:00:56 2026 GMT
        Subject: CN=73d54a7efd3f516ef1587f7f735eaf023026889b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:20:0b:d2:b7:70:3b:68:d6:9c:57:e6:25:b1:
                    01:70:e2:e7:06:ed:e6:76:87:5a:ba:41:0f:c2:28:
                    ed:f1:bc:9c:ee:07:b2:f2:c4:56:f9:b2:ca:40:e2:
                    9f:59:7d:c7:4e:f7:ef:4e:f1:2a:1c:28:c1:4c:c4:
                    50:ea:82:d6:67:eb:05:25:02:6a:ce:83:38:27:8f:
                    41:8e:fe:72:18:c0:64:fd:1b:40:fb:43:de:cc:18:
                    0f:b4:8b:42:41:74:46:88:cc:53:e3:f5:05:66:d5:
                    9d:78:24:cf:6c:b6:da:7e:f9:58:d8:46:90:57:91:
                    95:3b:f1:e8:1d:4b:f2:e9:7a:c8:bc:a1:15:84:32:
                    50:4c:64:5e:36:14:47:92:8e:42:1e:62:95:fa:0a:
                    86:3f:cd:22:6f:e8:21:a4:d7:19:f0:47:1d:a6:2b:
                    af:ed:01:a1:c9:89:f8:be:00:77:b5:7c:a1:0b:53:
                    48:ac:f6:fb:40:f0:86:e5:cc:e8:e3:7d:a0:41:ac:
                    50:66:6b:d0:7a:45:cd:aa:0f:18:93:dd:97:03:86:
                    9d:2c:47:95:81:d9:f7:7e:18:6b:45:3e:d9:97:ea:
                    64:7e:bf:ef:af:c1:c5:18:65:8f:af:25:85:e6:cb:
                    a4:b1:f0:61:e6:28:30:3a:df:1e:23:cb:0e:54:36:
                    66:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D5:4A:7E:FD:3F:51:6E:F1:58:7F:7F:73:5E:AF:02:30:26:88:9B
            X509v3 Authority Key Identifier:
                keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:cb:8e:21:ef:0a:de:91:73:4c:f8:b8:f8:14:f7:03:14:99:
         6a:dd:4a:77:97:4c:0e:65:26:7c:1c:6b:8d:a5:88:64:e1:24:
         d1:5e:46:6a:8b:1b:07:6c:f6:0c:e2:8b:64:c5:68:54:59:9e:
         86:c7:19:ef:1a:df:a6:ce:db:5f:53:6b:bc:76:75:a4:28:f4:
         6d:86:d7:dc:63:a4:3d:a2:15:84:5c:8f:28:f9:41:fd:a9:22:
         95:0a:bb:8d:39:6a:7d:ce:90:ee:23:14:39:b2:28:ce:2d:29:
         1b:e3:12:cb:3c:46:96:c8:35:1a:f8:16:51:9d:cb:d0:47:d7:
         ee:e4:62:04:02:7b:76:59:64:f7:18:1a:a9:39:91:94:93:1e:
         3f:d9:53:82:d2:90:c0:41:7a:9d:ce:ba:ae:92:29:2f:44:72:
         aa:c2:03:fe:aa:79:ed:5f:28:35:cb:e5:81:46:1b:31:73:4d:
         a3:07:ce:14:12:71:cd:d0:0f:ab:19:0a:a9:33:4a:1a:47:85:
         e8:bf:4e:56:36:1b:f3:41:a2:2e:63:f0:1f:ff:31:ba:2a:3f:
         37:0d:33:e4:9a:3c:a6:8a:49:7a:08:6a:de:6a:97:10:b2:d6:
         62:02:42:9e:21:61:00:5f:34:85:23:96:6b:c6:e1:e3:9c:f5:
         42:44:0f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 21:07:35 2026 by rpki-client