Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
File:                     lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft (raw, json)
Hash identifier:          8gwYUJKaM5jv4MGirQdhjJyqm9X+0zGIGEfavoqmf+Y=
Subject key identifier:   D3:4F:13:16:4E:9E:7F:F4:30:AC:D4:2B:33:1B:33:4E:7C:C2:31:EF
Authority key identifier: 94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A
Certificate issuer:       /CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
Certificate serial:       01A17EBD0473508534357B062998288CBABF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
Manifest number:          14ED
Signing time:             Tue 27 Oct 2026 19:01:18 +0000
Manifest this update:     Tue 27 Oct 2026 19:01:18 +0000
Manifest next update:     Wed 28 Oct 2026 19:01:18 +0000
Files and hashes:         1: XA0hanAouJl2ycFS_6jOkWOebDo.roa (hash: A3fTkPkEhBhccpT47iyF3/WYn8UVXxPajs9rFRIKGYs=)
                          2: lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl (hash: UPcTMZpFDJJVMeHjwMqmScpB14shexPuvFnqm6N+JTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:bd:04:73:50:85:34:35:7b:06:29:98:28:8c:ba:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=943bc576732374e8d89d7013ab3630b6e0a9f19a
        Validity
            Not Before: Oct 27 19:01:18 2026 GMT
            Not After : Oct 28 19:01:18 2026 GMT
        Subject: CN=d34f13164e9e7ff430acd42b331b334e7cc231ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7e:04:cb:f4:a0:6b:5e:75:a1:d8:09:33:ee:
                    c3:e5:cb:9d:ed:6f:d9:77:a5:e3:0c:ef:15:c6:81:
                    f7:ac:3c:74:55:c7:27:7f:fa:e0:95:93:1e:1e:bd:
                    3c:b8:b0:de:09:1d:b9:ff:da:af:19:5b:c1:b9:2b:
                    e8:e5:ef:f3:66:e2:77:92:d9:6a:3b:54:8e:cc:0e:
                    64:66:8f:01:56:75:17:88:06:75:4e:58:2d:82:de:
                    d8:7c:7e:22:d4:93:92:13:55:b8:85:1f:18:80:85:
                    a3:d7:b7:9e:b9:79:33:ce:6e:bd:e4:f1:ea:4e:57:
                    f5:ba:47:a1:03:18:7d:0e:0c:c6:7f:3a:52:3e:f4:
                    79:34:61:9e:a3:b6:70:ba:15:34:dd:f2:36:83:38:
                    56:a5:9d:fd:30:25:f9:f2:d8:93:d2:81:2c:1f:6b:
                    65:b4:e3:08:bf:3c:fb:34:1d:ca:52:39:14:bc:02:
                    c6:26:06:d5:bb:d9:5c:50:d1:b0:5c:16:36:c4:97:
                    aa:40:df:63:30:60:9a:5d:6f:de:77:18:07:07:4a:
                    fe:9d:9d:78:12:63:fe:92:d8:15:41:62:de:f7:a0:
                    f4:5b:2c:4b:36:1d:cb:ed:a6:30:87:f0:73:5a:ed:
                    91:ef:02:83:77:6e:2b:13:81:dd:19:5e:46:54:f1:
                    b7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4F:13:16:4E:9E:7F:F4:30:AC:D4:2B:33:1B:33:4E:7C:C2:31:EF
            X509v3 Authority Key Identifier:
                keyid:94:3B:C5:76:73:23:74:E8:D8:9D:70:13:AB:36:30:B6:E0:A9:F1:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDvFdnMjdOjYnXATqzYwtuCp8Zo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b8d065-ed81-409e-b1f1-76ab3fca1f32/1/lDvFdnMjdOjYnXATqzYwtuCp8Zo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:19:6b:7e:3e:05:fd:37:f3:51:c3:0a:70:4c:fd:a0:c7:53:
         a9:6d:19:c1:67:ac:81:f0:05:3e:f4:c9:8d:7a:fc:e1:6f:a6:
         8d:c1:99:d3:b9:fd:fa:44:7f:61:49:48:e5:7e:82:5e:b4:6c:
         56:8f:2a:da:5e:e4:a5:ef:54:35:ce:af:01:92:8c:e2:4b:f3:
         1c:19:b7:d9:8d:74:e2:ef:37:3c:b8:df:52:5c:5d:42:e1:8d:
         36:a3:2e:95:01:d1:e8:67:c2:61:38:39:54:c1:1c:b5:fc:d5:
         55:85:86:d4:4d:c6:94:16:46:97:e3:31:36:f0:19:57:c5:ba:
         13:45:64:46:19:37:ca:02:a3:fd:b8:41:61:1a:d7:51:9f:a7:
         50:dc:62:1c:8e:be:ae:77:60:a6:a2:8c:b9:3c:55:e2:be:4b:
         ae:48:d7:6e:bd:62:d9:83:2c:54:27:1c:8a:5a:4e:d2:21:b9:
         3f:5f:67:6e:d7:b6:ec:d1:09:90:b6:35:88:a4:9a:e7:6d:2d:
         26:e6:e1:f7:24:cb:9f:a4:45:f7:4c:18:de:08:30:b1:fb:0b:
         5f:28:d5:9a:c2:ee:0a:9b:b1:6a:cb:e4:9d:f4:b1:56:b0:55:
         d3:92:b6:ad:3f:6c:63:b3:53:80:86:1d:3f:ba:05:58:23:fc:
         15:b5:e9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 23:03:48 2026 by rpki-client