Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
File:                     9H1LS48bGIg-rDtJnA8EKsomsKk.mft (raw, json)
Hash identifier:          w5iQ0d68Kznhmj4wA0/xaXorq6HqmCSjEGuDj1YXl/g=
Subject key identifier:   DA:83:AF:03:68:49:50:C9:7B:25:DC:BD:7D:85:D0:47:4D:7B:AE:C0
Authority key identifier: F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9
Certificate issuer:       /CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
Certificate serial:       01A000CA6FC0B2E9E4CA4C75FCCE204E62B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
Manifest number:          0D32
Signing time:             Fri 14 Aug 2026 15:01:01 +0000
Manifest this update:     Fri 14 Aug 2026 15:01:01 +0000
Manifest next update:     Sat 15 Aug 2026 15:01:01 +0000
Files and hashes:         1: 9H1LS48bGIg-rDtJnA8EKsomsKk.crl (hash: fm8qW9CZSyevLXI41Qw8rh2bljHs9AEhX2DpdVYYCls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:ca:6f:c0:b2:e9:e4:ca:4c:75:fc:ce:20:4e:62:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f47d4b4b8f1b18883eac3b499c0f042aca26b0a9
        Validity
            Not Before: Aug 14 15:01:01 2026 GMT
            Not After : Aug 15 15:01:01 2026 GMT
        Subject: CN=da83af03684950c97b25dcbd7d85d0474d7baec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:40:47:71:17:15:0b:77:c4:f2:33:e4:59:29:
                    d6:37:89:fb:2e:1d:4e:40:b3:9f:da:29:7c:50:9f:
                    56:e7:f9:96:18:8f:7a:68:87:b6:b4:f0:00:6d:22:
                    9d:29:14:48:36:cd:9f:3d:1e:86:c2:88:b0:e8:bf:
                    aa:82:8c:82:9b:97:bc:82:d4:4e:ea:8c:f4:c5:d7:
                    c3:b3:c8:bf:94:21:a9:1e:54:09:5a:20:a4:64:a8:
                    96:1c:07:3c:7e:24:89:5c:10:e3:9d:5a:c2:2f:12:
                    66:40:bd:bf:f9:b2:93:e9:50:fd:91:42:cd:90:c5:
                    21:ae:14:61:47:d6:b0:95:c1:c2:61:30:80:8d:52:
                    11:f7:af:28:dc:da:cf:f5:93:f6:56:56:11:a6:28:
                    74:b3:31:a8:f9:28:a1:8e:71:77:e8:47:4a:17:32:
                    86:a9:71:34:4b:fe:c1:4a:75:71:cf:86:e1:bb:ef:
                    a2:89:bc:61:85:18:7d:15:ca:45:4b:b4:4d:6e:4b:
                    e2:b5:4e:fe:b0:97:a3:d4:df:57:d1:14:39:57:b6:
                    47:52:7c:3f:51:67:5c:86:98:f3:89:a6:34:e6:eb:
                    59:4b:58:41:cc:b0:59:09:1f:fd:3a:1e:1f:96:ca:
                    e1:d0:61:c1:c6:e3:43:91:64:2a:89:14:ef:16:fc:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:83:AF:03:68:49:50:C9:7B:25:DC:BD:7D:85:D0:47:4D:7B:AE:C0
            X509v3 Authority Key Identifier:
                keyid:F4:7D:4B:4B:8F:1B:18:88:3E:AC:3B:49:9C:0F:04:2A:CA:26:B0:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9H1LS48bGIg-rDtJnA8EKsomsKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f76d1f-eedf-4a4d-895b-27166753df08/1/9H1LS48bGIg-rDtJnA8EKsomsKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ca:80:a5:27:c7:6b:65:ba:07:6d:65:ba:22:76:35:ff:49:
         82:3d:c6:1a:87:5c:13:34:4c:03:c6:b1:e4:46:c1:0d:73:ca:
         98:d4:38:cf:6a:ef:43:c2:4e:73:80:f7:fb:cc:64:64:1b:b8:
         39:ab:10:e0:8a:83:4d:da:4b:6d:77:99:da:37:f7:44:3d:f5:
         60:31:02:61:8c:4b:34:37:9b:40:a9:a0:45:54:54:88:b9:c8:
         4b:3a:0b:dc:6b:f4:73:f0:46:19:2a:5f:e3:ba:c2:82:00:1d:
         98:e4:f9:ad:ef:ae:27:88:16:af:8f:c8:43:fe:87:0c:bf:8c:
         fd:13:66:7c:27:a4:9b:94:4d:bb:07:06:2b:4c:48:40:3f:62:
         0b:c3:54:c8:d3:bf:6e:ff:55:09:fb:a5:e2:b6:9c:8d:24:b9:
         71:53:33:89:86:e4:10:3a:98:bd:5e:aa:ce:65:ba:b5:56:0a:
         be:ca:31:e3:52:83:1d:e5:35:36:2d:0c:81:f2:a7:f6:4c:f9:
         b6:c3:03:e7:dd:3b:b9:41:a6:12:81:bd:3a:be:75:06:19:58:
         b2:d6:f5:b4:8c:a0:96:dd:e3:d0:42:1c:9e:3c:b4:28:a7:0f:
         73:58:03:cb:42:91:16:ea:fa:33:b4:6a:c3:7b:28:ad:83:6a:
         75:d3:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:34:40 2026 by rpki-client