Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
File:                     96pRbAbRINN25XURMTT0T_Yl2Oc.mft (raw, json)
Hash identifier:          Skum4OhHZ6XsnzkYxVohBSXVCJCyfgXvPPtoPX61kFo=
Subject key identifier:   66:00:FB:32:D8:C0:1B:1C:4E:E5:01:71:8B:38:21:9A:99:89:EB:97
Authority key identifier: F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7
Certificate issuer:       /CN=f7aa516c06d120d376e575113134f44ff625d8e7
Certificate serial:       01A1152ADEA5179CDE353B82DEB6F8C05B95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
Manifest number:          050D
Signing time:             Wed 07 Oct 2026 07:01:33 +0000
Manifest this update:     Wed 07 Oct 2026 07:01:33 +0000
Manifest next update:     Thu 08 Oct 2026 07:01:33 +0000
Files and hashes:         1: 96pRbAbRINN25XURMTT0T_Yl2Oc.crl (hash: avLLPed0zJMdaEM6A5JX6ONMM/7KDKiVIjeCDTSF1+U=)
                          2: ej84eEjBZh5_TuoVktQ40a1gkgU.asa (hash: MHSI1jdl5w4t+h/f8ee1s5/oMRUiSdGHj/rdZ+jynew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 07:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:15:2a:de:a5:17:9c:de:35:3b:82:de:b6:f8:c0:5b:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7aa516c06d120d376e575113134f44ff625d8e7
        Validity
            Not Before: Oct  7 07:01:33 2026 GMT
            Not After : Oct  8 07:01:33 2026 GMT
        Subject: CN=6600fb32d8c01b1c4ee501718b38219a9989eb97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:36:da:63:a6:77:95:b3:44:bc:72:b4:92:c7:
                    6c:ef:6f:ac:d9:c4:70:2e:c8:89:48:ae:e3:6f:73:
                    be:93:79:9e:d3:59:81:a7:38:9b:50:34:31:66:26:
                    f4:b9:d7:11:3c:6f:6b:d6:09:1a:e6:5f:f1:76:f3:
                    de:ed:86:6f:42:fa:63:0f:14:a5:25:26:09:fc:43:
                    7f:e8:1a:b5:b7:fe:75:6f:96:7e:9d:1a:8e:9b:d0:
                    5d:b0:78:ff:9c:aa:85:6d:c1:ec:ba:3a:94:f7:1b:
                    e9:a4:e8:a9:1f:bc:d3:85:72:d8:a9:77:78:f8:cf:
                    75:e1:ac:bc:cf:16:37:8b:ee:c8:e7:95:5c:47:7e:
                    65:c2:7b:88:90:99:41:85:16:4f:98:77:d3:a7:08:
                    a2:75:f0:a9:51:30:c9:70:eb:f5:1c:fd:fd:ce:57:
                    c5:3f:8b:ab:92:01:17:d5:64:a6:82:17:c2:ce:81:
                    19:4a:f4:a5:bb:0b:38:24:bb:0c:e4:a6:17:2f:57:
                    8a:b4:ba:47:34:86:30:b7:ce:12:2d:b7:73:3f:54:
                    1b:b5:de:b0:13:7f:74:de:e0:57:67:f4:63:9b:62:
                    ea:f0:bb:ba:5b:9b:84:82:2b:7f:1d:63:6d:24:e2:
                    7c:8b:17:7f:17:d5:0a:d9:2b:d5:ff:d3:84:d6:96:
                    98:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:00:FB:32:D8:C0:1B:1C:4E:E5:01:71:8B:38:21:9A:99:89:EB:97
            X509v3 Authority Key Identifier:
                keyid:F7:AA:51:6C:06:D1:20:D3:76:E5:75:11:31:34:F4:4F:F6:25:D8:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/96pRbAbRINN25XURMTT0T_Yl2Oc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/6eee28-2d00-44a0-bcc8-006d41487c49/1/96pRbAbRINN25XURMTT0T_Yl2Oc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:d5:b8:d4:9f:3d:34:be:fb:d6:37:65:53:65:c9:df:a9:36:
         4a:a6:ff:6e:89:04:4d:c8:72:24:07:e1:83:9f:e5:06:e8:d7:
         e6:22:76:82:b2:8e:9e:23:de:c9:04:4c:2f:93:88:42:b6:47:
         35:d9:61:1a:28:8f:7f:be:d0:28:96:3c:b7:46:08:c1:a3:6d:
         0c:a9:f0:c9:95:62:7d:e1:11:e0:06:d1:29:dc:2a:59:c4:a3:
         02:27:0e:98:51:5a:e4:01:f6:ac:ca:a7:43:b8:a3:06:23:6f:
         32:6d:54:b2:c4:90:48:52:b3:dd:73:6d:5d:2a:ad:88:25:e3:
         9b:eb:cb:01:2b:3c:35:3a:e9:1a:5c:ea:35:72:ec:54:37:b2:
         5a:c8:be:f0:75:8c:4e:ea:c5:9a:92:f2:12:a4:6d:42:0f:8d:
         fb:14:43:ff:a4:bc:e9:15:35:a7:89:63:a5:76:7f:15:fd:d8:
         23:16:86:e3:03:6e:1d:dc:97:d1:e1:84:32:9e:74:31:d0:75:
         1f:66:8a:b0:80:ff:35:89:ed:42:c2:64:dd:6b:84:14:94:6a:
         6d:e4:6c:8b:87:b5:45:4a:db:8d:5b:56:16:63:9f:3f:66:39:
         ba:a9:37:c6:70:14:2e:69:1d:2a:91:fc:ff:21:ac:86:f9:2d:
         45:e2:f8:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEVKt6lF5zeNTuC3rb4wFuVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YWE1MTZjMDZkMTIwZDM3NmU1NzUxMTMxMzRmNDRmZjYy
NWQ4ZTcwHhcNMjYxMDA3MDcwMTMzWhcNMjYxMDA4MDcwMTMzWjAzMTEwLwYDVQQD
Eyg2NjAwZmIzMmQ4YzAxYjFjNGVlNTAxNzE4YjM4MjE5YTk5ODllYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7DbaY6Z3lbNEvHK0ksds72+s2cRw
LsiJSK7jb3O+k3me01mBpzibUDQxZib0udcRPG9r1gka5l/xdvPe7YZvQvpjDxSl
JSYJ/EN/6Bq1t/51b5Z+nRqOm9BdsHj/nKqFbcHsujqU9xvppOipH7zThXLYqXd4
+M914ay8zxY3i+7I55VcR35lwnuIkJlBhRZPmHfTpwiidfCpUTDJcOv1HP39zlfF
P4urkgEX1WSmghfCzoEZSvSluws4JLsM5KYXL1eKtLpHNIYwt84SLbdzP1Qbtd6w
E3903uBXZ/Rjm2Lq8Lu6W5uEgit/HWNtJOJ8ixd/F9UK2SvV/9OE1paYXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYA+zLYwBscTuUBcYs4IZqZieuXMB8GA1UdIwQY
MBaAFPeqUWwG0SDTduV1ETE09E/2JdjnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTZwUmJBYlJJTk4yNVhVUk1UVDBUX1lsMk9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS82ZWVlMjgtMmQwMC00NGEwLWJjYzgt
MDA2ZDQxNDg3YzQ5LzEvOTZwUmJBYlJJTk4yNVhVUk1UVDBUX1lsMk9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS82ZWVlMjgtMmQwMC00NGEwLWJjYzgtMDA2ZDQxNDg3YzQ5
LzEvOTZwUmJBYlJJTk4yNVhVUk1UVDBUX1lsMk9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM9W41J89
NL771jdlU2XJ36k2Sqb/bokETchyJAfhg5/lBujX5iJ2grKOniPeyQRML5OIQrZH
NdlhGiiPf77QKJY8t0YIwaNtDKnwyZVifeER4AbRKdwqWcSjAicOmFFa5AH2rMqn
Q7ijBiNvMm1UssSQSFKz3XNtXSqtiCXjm+vLASs8NTrpGlzqNXLsVDeyWsi+8HWM
TurFmpLyEqRtQg+N+xRD/6S86RU1p4ljpXZ/Ff3YIxaG4wNuHdyX0eGEMp50MdB1
H2aKsID/NYntQsJk3WuEFJRqbeRsi4e1RUrbjVtWFmOfP2Y5uqk3xnAULmkdKpH8
/yGshvktReL4MQ==
-----END CERTIFICATE-----
Generated at Wed Oct 7 11:25:44 2026 by rpki-client