Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File:                     9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier:          A4+Y1vgUzU0G/+XuYTTDxzcBKRVIKJMyo90YrwzWOfo=
Subject key identifier:   12:42:9C:8D:31:3C:06:84:84:80:D6:D0:1C:0C:5D:FA:42:66:3D:A0
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer:       /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial:       01A13E9452A096E106C3A9760DAE31F739A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number:          1676
Signing time:             Thu 15 Oct 2026 08:01:10 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:10 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:10 +0000
Files and hashes:         1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: CS1og1S2jl9Dr2UpiE63cks9P7vz6Th/+AzLfBW7qaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:52:a0:96:e1:06:c3:a9:76:0d:ae:31:f7:39:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
        Validity
            Not Before: Oct 15 08:01:10 2026 GMT
            Not After : Oct 16 08:01:10 2026 GMT
        Subject: CN=12429c8d313c06848480d6d01c0c5dfa42663da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:bc:0f:9f:e4:a9:81:bc:7a:31:8e:b5:e9:
                    02:d9:b4:b7:b2:5f:94:4a:2b:25:34:a1:cb:7e:c0:
                    a2:ab:e9:b7:97:44:b8:52:c1:1c:d6:13:fd:c3:7c:
                    fd:09:1b:89:d5:74:25:e3:fc:67:de:95:a1:0e:8f:
                    f5:c8:d9:81:8f:48:b9:ff:f3:72:24:5c:2c:99:8a:
                    8e:c7:21:64:20:2e:11:05:3b:f6:5c:ff:0a:47:f9:
                    8f:e8:b2:48:a6:ff:72:73:58:4c:f7:d1:f5:7b:f0:
                    61:cf:73:d6:1b:c1:90:07:e9:f1:94:5d:1a:ba:7c:
                    c6:ca:3b:d3:fc:9b:5a:37:86:58:85:32:d1:f2:da:
                    a5:14:6d:af:42:b7:78:3b:32:cd:62:45:32:8d:5a:
                    6f:c1:77:8b:ed:32:84:77:2b:c0:c1:25:22:f2:aa:
                    09:d8:c4:0a:a3:d0:23:5a:e1:08:e8:c0:9a:aa:17:
                    07:51:a9:db:59:fe:60:6f:74:32:c5:65:08:3c:80:
                    aa:dc:02:dd:15:f3:1c:14:df:aa:cf:4c:f4:61:da:
                    2f:57:5b:b0:70:4e:8d:8b:18:15:96:ed:2b:5c:1e:
                    29:08:05:e8:19:f5:ee:3e:8c:e6:12:3d:1e:e4:37:
                    17:f7:c1:7a:d8:93:43:d3:10:94:01:22:c9:56:c6:
                    bb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:42:9C:8D:31:3C:06:84:84:80:D6:D0:1C:0C:5D:FA:42:66:3D:A0
            X509v3 Authority Key Identifier:
                keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:84:aa:7b:06:86:de:d4:35:c7:ff:41:f1:f4:45:cf:03:8d:
         a1:e1:b4:83:41:08:4b:42:ee:be:62:5f:fc:ed:61:85:15:82:
         c6:73:be:d5:ea:a3:bb:d3:27:f0:d0:45:49:36:31:2a:1c:a8:
         15:92:35:e8:14:75:03:df:3e:d9:1b:00:de:45:3a:e7:11:07:
         ee:33:d1:26:20:77:7a:e0:4f:cb:0d:c9:6d:f6:1a:55:9f:a3:
         ac:8d:34:2e:76:38:75:56:ff:f7:23:4d:e2:c8:5e:63:24:21:
         14:a6:81:11:cf:66:cc:19:cd:06:ea:28:d9:2c:86:c3:cb:18:
         da:18:b6:05:6f:e1:3e:85:24:f0:cd:84:62:31:8e:e9:e9:23:
         3d:79:8e:ea:6e:ad:fe:34:26:87:da:65:8b:84:3a:f6:11:e0:
         7e:ca:cf:47:1b:8b:35:3d:db:25:f0:9c:68:63:5b:04:a9:d5:
         92:9d:cf:b9:67:5f:08:8a:e1:ad:f0:f7:00:6a:bd:92:8d:81:
         89:ab:88:58:be:f0:35:35:7a:61:83:fc:55:39:19:4e:42:42:
         5d:70:85:0c:58:87:f7:0c:6f:23:d5:e5:6b:75:03:89:b6:fb:
         f5:67:0e:83:67:10:5b:34:87:0b:b5:69:dd:78:1c:d5:f6:c5:
         54:ea:2c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:29:29 2026 by rpki-client