Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
File:                     1-6Cw8f3WQBTlBXuEihmiOehJ290.mft (raw, json)
Hash identifier:          7kDfcmMCBFMM3VXN/7+PaXKKMNS+T1FbcYpGosBBI8U=
Subject key identifier:   AC:41:D0:BA:56:83:39:4C:15:A1:2B:15:97:B0:50:A2:0F:0B:78:45
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Certificate issuer:       /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial:       01A13E2661EFB1D146867CACBE9A6A0CF105
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
Manifest number:          137F
Signing time:             Thu 15 Oct 2026 06:01:05 +0000
Manifest this update:     Thu 15 Oct 2026 06:01:05 +0000
Manifest next update:     Fri 16 Oct 2026 06:01:05 +0000
Files and hashes:         1: 1-6Cw8f3WQBTlBXuEihmiOehJ290.crl (hash: LpC/6GS5/Xaq4oherSpBP7EllcBXWWt5NQfHIrmBOmc=)
                          2: TbbaXC5Vr5TmaMd_xbm8WF6u2S0.roa (hash: +nAGfw2iTYghUOUt6Pu3fvtqpyelpRx/U3nYc4p6P9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 06:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:26:61:ef:b1:d1:46:86:7c:ac:be:9a:6a:0c:f1:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
        Validity
            Not Before: Oct 15 06:01:05 2026 GMT
            Not After : Oct 16 06:01:05 2026 GMT
        Subject: CN=ac41d0ba5683394c15a12b1597b050a20f0b7845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:0b:ca:1a:cb:b6:f2:b1:f3:42:59:46:62:
                    0a:75:d4:38:ac:5d:c7:22:42:4d:c0:13:f9:f4:1e:
                    22:fa:bf:dd:f7:3f:de:11:a4:d9:ee:b8:b7:d1:9b:
                    90:4f:b0:df:af:7c:36:a7:35:24:ce:c7:72:c3:e3:
                    61:89:eb:aa:9b:1b:00:cb:b8:e0:f7:42:4b:bb:a8:
                    be:9d:48:79:fa:58:5d:cf:0b:88:f6:28:23:7a:e3:
                    66:18:d9:6a:6f:a7:e5:bd:e6:35:f9:cb:c8:02:df:
                    2e:75:a6:4c:cd:09:0f:80:ac:83:fc:ab:fe:ef:fe:
                    bc:78:4e:0e:3b:37:98:25:cc:a8:c4:5b:9d:06:b6:
                    88:6f:fa:39:38:8d:ef:64:62:6f:50:5e:39:a8:34:
                    50:39:b4:0e:31:9c:75:01:14:2a:98:f3:84:16:91:
                    9e:20:ed:48:79:07:ec:4a:ef:b5:5d:fb:74:7e:f4:
                    4c:3c:07:ca:12:aa:b2:39:14:ce:6f:ba:b3:04:c7:
                    1f:0d:40:13:4c:3c:fe:57:38:f6:c5:55:9d:22:29:
                    ec:10:f3:cb:56:11:d4:53:11:42:ab:df:bc:92:c3:
                    5a:31:aa:23:3c:fe:25:69:eb:bb:42:d4:e9:2b:7f:
                    cb:48:0f:4b:e0:bd:68:77:5a:5a:4d:1e:d8:95:a8:
                    23:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:41:D0:BA:56:83:39:4C:15:A1:2B:15:97:B0:50:A2:0F:0B:78:45
            X509v3 Authority Key Identifier:
                keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:cd:b4:ec:26:9c:8d:30:c0:f3:eb:3b:38:71:84:71:f8:84:
         60:96:6b:42:5d:0f:89:de:b3:cd:99:10:53:73:b3:ac:50:ac:
         b3:16:fa:b1:5a:93:78:29:b7:fe:dc:66:d4:61:10:78:81:18:
         fb:af:5f:3b:77:25:29:35:1f:a6:5d:92:f1:55:ff:5d:f0:d4:
         0e:2c:26:86:3a:0b:ff:7a:38:41:88:a3:be:ae:eb:e8:3f:ec:
         0c:a8:17:bf:1e:10:b0:d7:7c:c4:c3:b2:8c:c1:ca:7f:19:c1:
         71:57:95:0d:7a:f9:f3:6f:9c:4b:2e:ea:56:86:f1:bc:b9:23:
         8f:11:25:b7:57:27:64:c7:87:f0:20:86:f9:2b:8d:1a:e1:b6:
         49:33:8b:7f:ea:8f:ad:dd:f1:0b:73:05:fc:74:3b:ef:40:5c:
         1e:11:40:fe:b3:2c:e8:ad:3d:2b:a9:31:aa:07:87:0b:35:ad:
         f9:30:60:dd:81:77:d0:8f:c8:08:6d:ad:5a:b5:7b:cd:31:c5:
         98:36:f2:4c:ca:f1:11:18:af:fa:a1:6e:3d:3d:f9:96:e9:7b:
         e0:46:01:18:c6:e4:fe:2e:2b:bf:e0:ce:1f:45:c8:56:2b:4d:
         b1:8d:2b:1c:7e:2c:40:6d:9e:a8:10:64:20:a6:6d:ec:57:ca:
         71:ca:e4:63
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaE+JmHvsdFGhnysvppqDPEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYTBiMGYxZmRkNjQwMTRlNTA1N2I4NDhhMTlhMjM5ZTg0
OWRiZGQwHhcNMjYxMDE1MDYwMTA1WhcNMjYxMDE2MDYwMTA1WjAzMTEwLwYDVQQD
EyhhYzQxZDBiYTU2ODMzOTRjMTVhMTJiMTU5N2IwNTBhMjBmMGI3ODQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg8LyhrLtvKx80JZRmIKddQ4rF3H
IkJNwBP59B4i+r/d9z/eEaTZ7ri30ZuQT7Dfr3w2pzUkzsdyw+NhieuqmxsAy7jg
90JLu6i+nUh5+lhdzwuI9igjeuNmGNlqb6flveY1+cvIAt8udaZMzQkPgKyD/Kv+
7/68eE4OOzeYJcyoxFudBraIb/o5OI3vZGJvUF45qDRQObQOMZx1ARQqmPOEFpGe
IO1IeQfsSu+1Xft0fvRMPAfKEqqyORTOb7qzBMcfDUATTDz+Vzj2xVWdIinsEPPL
VhHUUxFCq9+8ksNaMaojPP4laeu7QtTpK3/LSA9L4L1od1paTR7YlagjYwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKxB0LpWgzlMFaErFZewUKIPC3hFMB8GA1UdIwQY
MBaAFPugsPH91kAU5QV7hIoZojnoSdvdMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS02Q3c4ZjNXUUJUbEJYdUVpaG1pT2VoSjI5MC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTUvZmQ2OTc3LThhYWUtNDg4OS1iZTZm
LWM3MTE2OTdmZDNjMy8xLzEtNkN3OGYzV1FCVGxCWHVFaWhtaU9laEoyOTAubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2U1L2ZkNjk3Ny04YWFlLTQ4ODktYmU2Zi1jNzExNjk3ZmQz
YzMvMS8xLTZDdzhmM1dRQlRsQlh1RWlobWlPZWhKMjkwLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhc20
7CacjTDA8+s7OHGEcfiEYJZrQl0Pid6zzZkQU3OzrFCssxb6sVqTeCm3/txm1GEQ
eIEY+69fO3clKTUfpl2S8VX/XfDUDiwmhjoL/3o4QYijvq7r6D/sDKgXvx4QsNd8
xMOyjMHKfxnBcVeVDXr582+cSy7qVobxvLkjjxElt1cnZMeH8CCG+SuNGuG2STOL
f+qPrd3xC3MF/HQ770BcHhFA/rMs6K09K6kxqgeHCzWt+TBg3YF30I/ICG2tWrV7
zTHFmDbyTMrxERiv+qFuPT35lul74EYBGMbk/i4rv+DOH0XIVitNsY0rHH4sQG2e
qBBkIKZt7FfKccrkYw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 15:21:57 2026 by rpki-client