Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
File:                     1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft (raw, json)
Hash identifier:          McjFFhi0FIeuepKQGy6a9csHhQWQmd8v5ZysxK2nhSs=
Subject key identifier:   CF:83:44:2F:A1:4D:81:F4:EE:33:14:FF:C1:E0:C7:A3:8C:93:4D:D0
Authority key identifier: F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94
Certificate issuer:       /CN=f9e0257d067ef8b85f620c67220cf977ddde3994
Certificate serial:       01A1551C2358FDA6C32744A44DEDB62D3654
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
Manifest number:          1AB3
Signing time:             Mon 19 Oct 2026 17:01:09 +0000
Manifest this update:     Mon 19 Oct 2026 17:01:09 +0000
Manifest next update:     Tue 20 Oct 2026 17:01:09 +0000
Files and hashes:         1: 1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl (hash: megajbBcgs+hOCPX2m74HMpnJoFf5omBgtdIFa4mDOc=)
                          2: 5335TVWq-TAy75K-3w-T_kbzaH0.roa (hash: 9SO05Pcou3qWF6g88dlB6s3gfpWtXt6YbpW1v8iIrjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:28:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:55:1c:23:58:fd:a6:c3:27:44:a4:4d:ed:b6:2d:36:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9e0257d067ef8b85f620c67220cf977ddde3994
        Validity
            Not Before: Oct 19 17:01:09 2026 GMT
            Not After : Oct 20 17:01:09 2026 GMT
        Subject: CN=cf83442fa14d81f4ee3314ffc1e0c7a38c934dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e5:04:e6:cd:27:a8:68:f6:b7:8e:09:e8:f4:
                    8a:7c:28:72:71:35:b2:cc:b0:40:60:ff:20:9e:35:
                    e2:5b:b4:b6:4c:9a:0d:30:89:d8:57:65:11:01:93:
                    a7:f3:62:75:13:5d:5a:60:b2:95:3b:2b:3b:e8:c0:
                    bd:8b:b9:b0:36:53:e7:31:bf:b5:39:13:cc:32:fb:
                    65:5f:38:d7:fc:6e:d7:0c:27:ff:c7:98:ef:25:9c:
                    45:0b:0f:90:66:15:23:76:21:ca:60:ea:af:f2:2f:
                    5d:56:c1:af:fc:5d:da:b4:97:18:1b:30:3f:bd:d7:
                    f8:a8:b8:f9:22:c9:66:e2:75:f3:c5:5d:ca:6b:08:
                    69:10:86:20:e5:f7:87:dd:03:0e:31:79:3a:2d:77:
                    0e:d3:df:43:b5:96:5e:33:24:a9:9f:5b:04:74:4a:
                    08:36:d0:78:92:8e:b0:d0:5b:1f:83:f6:bb:45:de:
                    b5:92:b1:9b:e6:c8:7d:5b:06:91:3f:1a:1a:ca:c5:
                    7a:21:8a:e9:66:de:c0:f6:08:5d:e2:ee:43:8e:6d:
                    47:83:8f:00:d9:92:c8:ad:05:75:1d:66:c9:57:68:
                    bf:f4:32:28:76:04:9a:f0:01:dd:e7:c8:a7:fe:20:
                    f0:04:6b:34:1b:c3:3c:17:2d:49:d7:db:3c:8f:7e:
                    fb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:83:44:2F:A1:4D:81:F4:EE:33:14:FF:C1:E0:C7:A3:8C:93:4D:D0
            X509v3 Authority Key Identifier:
                keyid:F9:E0:25:7D:06:7E:F8:B8:5F:62:0C:67:22:0C:F9:77:DD:DE:39:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/69194a-45a0-48ef-99bf-8e04887c0abf/1/1-eAlfQZ--LhfYgxnIgz5d93eOZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:6f:99:99:1d:92:51:c6:30:64:e7:29:fb:3b:fa:2f:cb:50:
         47:af:30:b8:ae:a7:a0:ba:6b:eb:3a:93:ba:af:92:93:73:7e:
         90:a3:c3:10:d9:02:5d:cf:40:64:e5:3f:0d:a3:e1:fd:de:4c:
         2e:de:6e:28:2c:22:c6:a9:ae:7d:6a:ee:1e:cc:94:13:ab:e6:
         26:fb:30:fa:1c:15:a2:85:75:78:ca:9a:cf:45:8b:dd:31:48:
         b1:ab:5e:c9:d5:c2:a6:9b:1c:4c:4a:8d:4f:b0:6d:a2:52:8f:
         73:10:3c:e6:df:e0:b4:16:ae:8e:dd:85:02:9a:ae:df:1c:41:
         a3:87:d5:93:d2:87:cf:bd:8a:5b:e5:fe:c2:d6:7a:72:b1:52:
         f7:88:78:93:ce:87:7a:8d:5c:2d:1b:2f:7f:84:9e:58:e5:d1:
         8e:b8:eb:f6:db:64:cc:e2:68:96:ec:50:0b:7c:4c:5b:d4:3e:
         3d:04:c4:b5:1d:64:df:80:b9:b3:bc:26:38:52:50:0c:f7:a1:
         ce:61:36:9a:aa:66:cd:88:95:83:e8:5f:51:7b:ea:d5:ab:7e:
         1e:03:48:98:81:b2:cb:3c:8c:25:a6:22:52:7c:ca:40:80:ea:
         37:ea:2b:52:ba:d7:fa:00:f8:89:06:0d:61:17:b7:dd:ef:53:
         f6:87:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:37:06 2026 by rpki-client