Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File:                     8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier:          39M9IH+d9VymBqkUKmP3Qhr+OYiJ1gukjy95zTwzgHM=
Subject key identifier:   7F:9A:C7:5B:51:8F:6A:17:4B:31:C7:2B:80:7C:2E:53:42:CE:2E:30
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer:       /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial:       01A13DB7E11E836C53460ED14FBBA9482DFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number:          15E5
Signing time:             Thu 15 Oct 2026 04:00:23 +0000
Manifest this update:     Thu 15 Oct 2026 04:00:23 +0000
Manifest next update:     Fri 16 Oct 2026 04:00:23 +0000
Files and hashes:         1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: D7pAzaxK7lgtIHqT/rMTmT+Q269isN8E4ViXkxSo270=)
                          2: EMaV_sDtEC3ONnRr_ZacRZkjYek.roa (hash: uEhrTJgtxikjiJZwpMeYSv1aaXx9clVq4b4CFPBvQgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b7:e1:1e:83:6c:53:46:0e:d1:4f:bb:a9:48:2d:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
        Validity
            Not Before: Oct 15 04:00:23 2026 GMT
            Not After : Oct 16 04:00:23 2026 GMT
        Subject: CN=7f9ac75b518f6a174b31c72b807c2e5342ce2e30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:95:a4:22:fd:c8:52:63:da:dc:b0:2e:02:04:
                    f2:56:bb:9b:58:65:d6:f1:c6:6c:75:22:0d:5e:8f:
                    4c:71:5c:3d:d7:1c:66:92:ea:42:ba:c2:5e:42:77:
                    45:10:76:4e:71:c6:3a:86:1f:35:59:6f:9e:52:43:
                    1f:9f:09:32:c7:14:1d:81:6a:30:6a:c4:e0:26:f0:
                    70:e9:92:c4:58:cb:36:ac:eb:59:63:9c:85:c3:a5:
                    ac:46:fd:bf:ad:03:24:7e:e6:7f:18:90:be:a1:30:
                    74:11:75:4b:2c:f4:fd:13:06:a4:e1:e1:9d:98:32:
                    e1:2b:ca:c7:71:c3:f6:e1:53:a2:6b:71:c2:fa:20:
                    1f:35:4f:dd:97:68:7b:bb:be:b2:0e:87:65:e9:3b:
                    d4:4c:4c:ef:f1:03:76:e6:79:27:b3:48:98:49:07:
                    d2:51:3b:84:19:c7:a8:da:99:07:f5:e7:02:01:66:
                    ef:42:07:21:51:8a:4b:cb:f2:2b:75:44:e0:2d:54:
                    75:cf:dd:6d:74:b2:c4:e8:6f:b9:eb:cb:18:69:74:
                    9e:85:37:93:45:c2:5e:66:e1:8e:d1:72:d9:cd:2d:
                    b0:fa:9f:ee:b9:e4:1a:83:ed:1b:2b:11:3a:c5:5f:
                    8e:9a:57:95:17:4e:74:64:77:e1:af:25:98:08:b9:
                    d7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9A:C7:5B:51:8F:6A:17:4B:31:C7:2B:80:7C:2E:53:42:CE:2E:30
            X509v3 Authority Key Identifier:
                keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d9:d1:24:db:03:b4:f5:9b:54:c2:a8:fa:c9:f2:42:62:09:
         52:44:4d:4c:3f:a0:43:79:3b:d0:a4:52:09:81:15:76:cb:fa:
         7c:cc:74:c2:6a:74:20:e3:0f:7a:94:32:8d:f7:c9:a3:e2:e0:
         61:0f:55:6a:71:10:77:61:c7:29:ee:63:81:1a:70:bb:a2:b9:
         71:79:10:43:18:e3:8e:5f:d1:ac:62:02:d1:6e:28:e2:ee:8b:
         42:bd:08:68:08:76:b1:c6:ea:fd:07:41:c4:6c:63:0f:9f:7b:
         90:29:26:a3:fe:ee:59:62:4b:02:97:48:fa:40:cc:c9:ef:63:
         60:12:51:dc:69:8a:c8:59:ab:1d:7d:38:54:28:83:03:57:08:
         69:d9:5e:b2:76:e3:d1:17:54:70:2c:95:9c:6d:25:f6:a4:9f:
         57:76:7f:0c:a8:50:32:50:ec:7e:df:bf:b9:5a:ab:6d:13:40:
         d9:c0:b8:9c:98:45:e0:fb:96:67:58:da:2f:f8:69:c5:01:d4:
         f5:99:48:6e:bc:8b:52:b9:f1:5f:cf:63:93:1c:d7:91:74:13:
         39:73:f3:c8:ca:bf:30:4d:68:db:e2:f8:1c:c6:86:f6:86:07:
         66:c3:a9:01:de:5e:fc:42:3e:78:cd:ec:54:4e:56:6a:c8:e9:
         2a:2b:07:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:03 2026 by rpki-client