Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
File:                     9pglYdLaF5Avg-_-EySZ-C1S8WM.mft (raw, json)
Hash identifier:          sosS37N89CE7Lhy8rp8jALBW12VaZsOqOwF8KZXELB8=
Subject key identifier:   09:21:47:82:AD:C6:CA:0B:20:8C:08:EA:DF:37:82:67:8B:8A:E8:08
Authority key identifier: F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63
Certificate issuer:       /CN=f6982561d2da17902f83effe132499f82d52f163
Certificate serial:       01A13D815D987C12652B04209D9F8EF002F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
Manifest number:          185D
Signing time:             Thu 15 Oct 2026 03:00:50 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:50 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:50 +0000
Files and hashes:         1: 9pglYdLaF5Avg-_-EySZ-C1S8WM.crl (hash: OFaTTgedlNTiq9lT0zrCpUesdokVr1JiqUk92g11zDY=)
                          2: BBH0-UEj_izZzjdumwxoDh9yCBo.roa (hash: 50KdJ5A5mJLrmaAuqmKloL7+FBLQEr6+0iywUZ44wnE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 03:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:5d:98:7c:12:65:2b:04:20:9d:9f:8e:f0:02:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6982561d2da17902f83effe132499f82d52f163
        Validity
            Not Before: Oct 15 03:00:50 2026 GMT
            Not After : Oct 16 03:00:50 2026 GMT
        Subject: CN=09214782adc6ca0b208c08eadf3782678b8ae808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e3:62:c4:2f:6d:e6:87:d4:1d:97:4f:45:1d:
                    be:2b:82:5d:d7:c4:c9:92:e2:39:6b:2e:27:8a:ab:
                    6b:ae:10:00:84:7d:b7:9d:36:59:57:69:51:51:95:
                    64:1f:91:22:f8:4d:7b:fe:bd:ba:ac:c1:6d:8c:27:
                    7e:c0:fa:7e:e5:50:19:3e:df:3f:d1:18:4a:47:43:
                    89:4c:7e:bd:26:aa:df:9f:e5:c5:0e:52:4d:85:af:
                    4d:9d:83:d0:ab:b1:d2:93:18:ea:c6:33:b2:b5:80:
                    83:39:f8:1b:06:02:b5:2d:b1:11:4e:af:03:87:6b:
                    08:4a:4a:96:0e:f9:6d:cf:b1:dc:04:d3:1e:bf:fb:
                    b8:76:e7:a8:e6:78:d2:5d:21:fd:54:44:16:c9:e6:
                    b7:24:06:b8:71:59:42:5a:22:cc:54:33:7d:1c:1d:
                    1a:21:49:fa:02:d2:8f:9c:c6:52:75:5e:a9:28:3c:
                    d2:ce:09:7f:e0:ba:3a:dd:03:c0:f1:e7:a6:26:1a:
                    a6:9a:f4:a1:39:1c:62:0f:7e:86:c1:1e:54:e4:07:
                    8c:9d:a8:65:bc:42:e3:73:9a:36:c8:e4:15:bc:4d:
                    62:7f:4b:0e:ce:71:70:fa:c5:3c:ad:0e:2a:49:23:
                    f7:91:47:8e:bd:32:28:6a:f7:25:bd:3c:c7:0c:a9:
                    55:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:21:47:82:AD:C6:CA:0B:20:8C:08:EA:DF:37:82:67:8B:8A:E8:08
            X509v3 Authority Key Identifier:
                keyid:F6:98:25:61:D2:DA:17:90:2F:83:EF:FE:13:24:99:F8:2D:52:F1:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pglYdLaF5Avg-_-EySZ-C1S8WM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0d2be9-da0b-4672-9b14-87314df7deb4/1/9pglYdLaF5Avg-_-EySZ-C1S8WM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:61:d0:d8:e3:25:6d:3f:4c:fd:4e:e2:1a:ed:98:ec:e4:1b:
         92:5a:17:77:f9:47:ad:29:30:ef:8e:63:72:2e:0f:52:d8:30:
         fd:31:cb:42:ca:10:c7:9a:ce:30:d6:9e:70:56:91:71:8e:60:
         cb:73:4e:00:17:11:5c:92:1b:01:f5:46:ba:53:f7:cc:a6:68:
         6d:05:94:a1:b6:42:79:fe:89:f7:a6:8b:75:96:97:a7:d6:68:
         4a:e8:45:56:75:29:99:9b:29:f4:28:48:9b:ad:68:46:e6:be:
         64:1d:1c:5c:bd:bc:1e:9a:72:35:4b:33:40:bc:29:d9:1b:66:
         0b:54:72:a2:a9:cc:74:85:f2:64:67:46:f5:1c:4d:9f:d1:0f:
         c5:68:96:8c:00:66:73:fb:ef:36:e8:30:a1:c9:17:da:49:2f:
         a8:ae:1c:7e:c6:76:fd:2c:ca:f1:14:8f:18:3a:27:4d:bc:c6:
         8d:6c:b3:03:a4:99:3d:ba:fa:44:7c:74:41:54:a9:cf:51:09:
         38:eb:57:c1:14:5b:3d:ad:8b:94:ed:61:87:e3:49:5f:eb:2c:
         92:19:5c:0d:cd:f0:f6:4e:06:8e:7c:d3:27:34:c5:05:17:c8:
         d5:75:6c:15:17:dd:3f:01:7a:48:25:e5:da:fd:a0:ef:f5:d7:
         39:3e:db:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:33:38 2026 by rpki-client