Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
File:                     1FbufkhK4u8JINCVvK4mj6_Wlhk.mft (raw, json)
Hash identifier:          1xXUvm5lUYfFXU2qkf064DovvWvc5HzTVw9/3sHCLbE=
Subject key identifier:   0E:52:86:F5:3E:CB:19:3C:16:BA:1E:35:6A:AB:3A:FD:03:B8:27:9F
Authority key identifier: D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19
Certificate issuer:       /CN=d456ee7e484ae2ef0920d095bcae268fafd69619
Certificate serial:       01A13F021B8962867CCC88189A161561B622
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
Manifest number:          1AA2
Signing time:             Thu 15 Oct 2026 10:01:04 +0000
Manifest this update:     Thu 15 Oct 2026 10:01:04 +0000
Manifest next update:     Fri 16 Oct 2026 10:01:04 +0000
Files and hashes:         1: 1FbufkhK4u8JINCVvK4mj6_Wlhk.crl (hash: +JxADtK9SijFIOStRIb69bKx5qvHg6jp45Ytar0MnZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:02:1b:89:62:86:7c:cc:88:18:9a:16:15:61:b6:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d456ee7e484ae2ef0920d095bcae268fafd69619
        Validity
            Not Before: Oct 15 10:01:04 2026 GMT
            Not After : Oct 16 10:01:04 2026 GMT
        Subject: CN=0e5286f53ecb193c16ba1e356aab3afd03b8279f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:45:f1:f1:d6:64:72:18:ad:f6:0f:20:f5:b3:
                    17:7f:0f:3b:14:b4:40:34:f9:1c:84:7e:fe:cd:e2:
                    3d:e8:78:72:2e:f4:bb:6f:99:62:f0:54:87:17:e4:
                    ea:ab:9d:ce:ae:20:6c:65:b5:87:40:32:de:d8:74:
                    ce:73:9f:8c:d8:39:9c:50:6a:de:35:e9:3f:d5:02:
                    3c:45:44:51:bd:4a:60:74:30:39:4f:93:a8:ac:b6:
                    4c:22:35:cc:e0:53:ab:42:40:37:7d:c8:ea:fa:0c:
                    99:c4:a3:f7:d9:e0:cf:f5:30:37:a8:95:f4:67:06:
                    bc:48:84:53:2b:46:d5:f0:ef:5a:92:c3:38:de:b5:
                    7c:cc:e8:57:c9:42:6c:80:49:1b:e2:ba:9f:27:7f:
                    3a:e5:32:c8:59:a0:2a:db:1c:93:fa:5f:82:cd:74:
                    28:37:74:30:de:c7:c8:e8:8d:33:f6:7d:ed:d9:fd:
                    dd:b6:44:87:22:5e:77:77:f2:fd:b7:03:f2:b7:13:
                    e2:3c:26:7d:5a:c8:16:c6:b7:7e:39:e2:f5:d4:08:
                    65:cb:ba:7d:b2:56:dc:7b:db:1d:a1:e5:11:1b:2e:
                    4f:71:8b:db:60:8a:83:f8:3e:94:be:f3:73:8e:78:
                    7b:3f:dc:12:9d:b3:25:85:8f:e9:8e:78:68:13:37:
                    6d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:52:86:F5:3E:CB:19:3C:16:BA:1E:35:6A:AB:3A:FD:03:B8:27:9F
            X509v3 Authority Key Identifier:
                keyid:D4:56:EE:7E:48:4A:E2:EF:09:20:D0:95:BC:AE:26:8F:AF:D6:96:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FbufkhK4u8JINCVvK4mj6_Wlhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/6e9c27-4e15-4885-87ae-54e9ffd3bbe0/1/1FbufkhK4u8JINCVvK4mj6_Wlhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:0e:d8:7f:45:00:95:11:02:3e:df:a8:0c:82:55:25:6e:0b:
         ae:b4:2e:d5:a8:96:40:cf:46:e3:0a:7f:74:f9:6f:cb:62:40:
         21:8d:74:65:64:12:fd:7e:2c:b8:6b:e2:51:f5:92:99:de:24:
         8b:75:9a:0c:d1:af:83:86:31:71:3c:c8:b9:b6:74:a3:24:94:
         30:28:de:0a:bd:28:27:e3:14:4b:8c:c1:41:10:18:6b:f0:50:
         16:58:70:52:e2:04:db:fd:00:b1:fc:4e:91:5d:1c:e1:18:07:
         15:37:e1:fc:e8:d4:36:18:1c:0b:d1:9c:45:b9:5a:99:91:d4:
         b4:a1:42:87:f1:02:0b:1f:67:ba:84:83:45:36:d6:dd:5f:6f:
         7f:28:d6:60:2b:26:77:46:ec:31:01:a9:ee:2c:09:f1:61:92:
         b9:88:00:41:e5:62:ab:5f:45:e4:2b:76:1c:1c:52:56:6c:c4:
         a9:91:7e:d0:db:c3:5f:5c:ce:0e:b0:a9:e5:a8:5a:6f:b8:5f:
         e1:87:bc:a5:66:c3:e9:0d:d8:67:ac:ba:10:f0:0f:10:93:ef:
         2e:0a:6d:18:2b:93:b7:87:49:e4:9c:a8:41:1a:09:40:1a:c1:
         fe:52:7a:8a:6e:01:ce:e8:71:f8:dd:28:50:4f:e3:f9:18:c8:
         db:84:96:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:05:51 2026 by rpki-client