Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
File:                     1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft (raw, json)
Hash identifier:          /a3X/g3q4Vqfu+PV4cv5iGImkKUHT+BTLOvGAX88HbE=
Subject key identifier:   7A:C4:04:79:CC:29:80:0D:C6:9B:4F:65:7A:5A:D1:86:54:9B:7B:BA
Authority key identifier: FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7
Certificate issuer:       /CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
Certificate serial:       01A1551C790E3CF26629D75CC0D0111CF81F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
Manifest number:          0DC6
Signing time:             Mon 19 Oct 2026 17:01:31 +0000
Manifest this update:     Mon 19 Oct 2026 17:01:31 +0000
Manifest next update:     Tue 20 Oct 2026 17:01:31 +0000
Files and hashes:         1: 1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl (hash: TDuz/0v8V1l/PlWTGrgbFu2wz4zqj6SJErlTD9PK31A=)
                          2: Bnu29pluL1AD4wD2GgQvr07xtcs.roa (hash: I+PJfEbbOSJZNIrwOCyiS4eKNFmjFbXF4CqvEyNzfEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:55:1c:79:0e:3c:f2:66:29:d7:5c:c0:d0:11:1c:f8:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa178e38bb8ef98bbf2b31b896397f4879f6b0f7
        Validity
            Not Before: Oct 19 17:01:31 2026 GMT
            Not After : Oct 20 17:01:31 2026 GMT
        Subject: CN=7ac40479cc29800dc69b4f657a5ad186549b7bba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c3:65:d8:cb:b3:5e:00:b7:ac:e1:bb:8b:90:
                    b8:36:ca:e9:6e:93:d3:d8:70:bb:6a:31:82:bc:00:
                    da:c6:e6:8e:9f:30:ba:11:4a:c9:46:72:0c:1c:39:
                    95:9c:45:f1:24:8f:30:f7:5f:cb:ed:f6:d6:89:0c:
                    01:c2:6c:8a:4e:c1:bc:a7:ce:e1:8e:45:89:85:ba:
                    43:80:01:3a:3a:1b:52:23:24:7d:49:3c:22:1a:7a:
                    14:87:bb:69:6e:23:a5:94:47:3d:2a:c2:37:db:f0:
                    69:29:72:f7:c9:5b:f7:fd:c8:5f:69:fc:62:f0:65:
                    96:00:dd:ee:4c:b4:52:8d:4d:00:7f:12:4f:11:46:
                    99:a3:10:b5:f3:00:cf:09:76:4d:5d:25:cd:e4:ec:
                    33:05:e8:46:03:47:1a:58:53:6c:55:e7:98:c0:96:
                    a2:3f:53:41:ba:e0:75:cd:9f:57:4a:94:92:0f:74:
                    93:06:db:e8:e7:cd:41:17:d6:b2:c8:ff:4e:33:d0:
                    a6:7c:e1:42:64:5f:e2:ff:51:8e:7f:b8:5b:51:91:
                    7c:ca:95:bb:9d:ea:63:a8:3a:ee:83:16:fd:bc:33:
                    a7:11:60:86:5d:f3:95:71:a1:0f:41:09:ba:c5:96:
                    e4:32:73:f0:7a:a0:e8:6f:ab:bd:13:ac:55:30:e5:
                    0d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C4:04:79:CC:29:80:0D:C6:9B:4F:65:7A:5A:D1:86:54:9B:7B:BA
            X509v3 Authority Key Identifier:
                keyid:FA:17:8E:38:BB:8E:F9:8B:BF:2B:31:B8:96:39:7F:48:79:F6:B0:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/66e06a-5e47-4fa9-bd3b-0bc47f4ff714/1/1-heOOLuO-Yu_KzG4ljl_SHn2sPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:e7:81:18:2b:f0:f2:50:58:c1:36:7d:e0:7b:e6:31:2d:ff:
         90:0e:51:b4:0e:ea:f7:07:05:ab:44:0f:0a:28:42:c0:11:5c:
         1d:c5:9b:3d:66:32:da:71:71:e9:a5:b0:58:a3:75:09:99:bd:
         9a:f4:57:5e:9d:9c:f5:8b:b3:43:43:42:e8:73:4d:4d:ef:15:
         8b:7f:6a:09:03:97:6e:4f:07:d7:da:fe:4d:85:dc:5a:bb:f4:
         23:22:e2:2b:bd:78:7f:c6:4e:89:98:61:c8:5f:59:38:28:67:
         5e:58:53:75:64:a0:67:a0:cf:c8:29:d2:9c:4f:b8:b3:0c:a9:
         e6:3d:2e:57:ce:3e:10:b2:a4:81:3d:a6:63:21:07:d1:5c:73:
         34:68:ed:0d:91:9f:81:ee:af:26:f6:fe:9e:00:00:c1:23:ea:
         43:8d:85:2e:a1:60:5e:24:6e:58:70:61:5a:e4:74:68:4c:8c:
         82:f1:a5:96:8f:19:b3:5e:a9:55:2a:e8:4a:7f:10:d9:3d:5b:
         72:27:e5:77:f4:a2:76:40:d7:01:bc:26:e7:83:88:f8:b1:2c:
         ec:64:b8:44:fb:fb:90:27:89:fd:b1:99:ae:46:88:c2:62:ae:
         ac:cd:20:fb:e3:a1:3b:15:f7:46:df:11:ab:26:95:03:f6:d4:
         35:a5:59:a7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaFVHHkOPPJmKddcwNARHPgfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMTc4ZTM4YmI4ZWY5OGJiZjJiMzFiODk2Mzk3ZjQ4Nzlm
NmIwZjcwHhcNMjYxMDE5MTcwMTMxWhcNMjYxMDIwMTcwMTMxWjAzMTEwLwYDVQQD
Eyg3YWM0MDQ3OWNjMjk4MDBkYzY5YjRmNjU3YTVhZDE4NjU0OWI3YmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMNl2MuzXgC3rOG7i5C4NsrpbpPT
2HC7ajGCvADaxuaOnzC6EUrJRnIMHDmVnEXxJI8w91/L7fbWiQwBwmyKTsG8p87h
jkWJhbpDgAE6OhtSIyR9STwiGnoUh7tpbiOllEc9KsI32/BpKXL3yVv3/chfafxi
8GWWAN3uTLRSjU0AfxJPEUaZoxC18wDPCXZNXSXN5OwzBehGA0caWFNsVeeYwJai
P1NBuuB1zZ9XSpSSD3STBtvo581BF9ayyP9OM9CmfOFCZF/i/1GOf7hbUZF8ypW7
nepjqDrugxb9vDOnEWCGXfOVcaEPQQm6xZbkMnPweqDob6u9E6xVMOUNvQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHrEBHnMKYANxptPZXpa0YZUm3u6MB8GA1UdIwQY
MBaAFPoXjji7jvmLvysxuJY5f0h59rD3MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oZU9PTHVPLVl1X0t6RzRsamxfU0huMnNQYy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTQvNjZlMDZhLTVlNDctNGZhOS1iZDNi
LTBiYzQ3ZjRmZjcxNC8xLzEtaGVPT0x1Ty1ZdV9Lekc0bGpsX1NIbjJzUGMubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U0LzY2ZTA2YS01ZTQ3LTRmYTktYmQzYi0wYmM0N2Y0ZmY3
MTQvMS8xLWhlT09MdU8tWXVfS3pHNGxqbF9TSG4yc1BjLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAReeB
GCvw8lBYwTZ94HvmMS3/kA5RtA7q9wcFq0QPCihCwBFcHcWbPWYy2nFx6aWwWKN1
CZm9mvRXXp2c9YuzQ0NC6HNNTe8Vi39qCQOXbk8H19r+TYXcWrv0IyLiK714f8ZO
iZhhyF9ZOChnXlhTdWSgZ6DPyCnSnE+4swyp5j0uV84+ELKkgT2mYyEH0VxzNGjt
DZGfge6vJvb+ngAAwSPqQ42FLqFgXiRuWHBhWuR0aEyMgvGllo8Zs16pVSroSn8Q
2T1bcifld/SidkDXAbwm54OI+LEs7GS4RPv7kCeJ/bGZrkaIwmKurM0g++OhOxX3
Rt8RqyaVA/bUNaVZpw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 21:58:20 2026 by rpki-client