Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
File:                     1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft (raw, json)
Hash identifier:          K/v12MC7kh4izPRBzw/WR/9ddHBRbMa3TcnvyKv0eoQ=
Subject key identifier:   DE:68:9A:EC:88:55:00:A0:0C:40:AD:9C:D2:CF:BA:67:78:4A:0E:A2
Authority key identifier: D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E
Certificate issuer:       /CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
Certificate serial:       01A13ECB8D25FAEF751A14D74CAECA2FC81E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
Manifest number:          069F
Signing time:             Thu 15 Oct 2026 09:01:29 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:29 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:29 +0000
Files and hashes:         1: 1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl (hash: kdmE1cp4pbWiWc/LWt8rkc0FswF0tpvMnv7GesKSHD0=)
                          2: 3tqIIgWkHb-czJrWJ45mBIkK_cQ.roa (hash: XvC13IkxH0azxvzs9FuTSJdwmaTsmRlyyRpZAdkI6ls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:8d:25:fa:ef:75:1a:14:d7:4c:ae:ca:2f:c8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d462ece547572adeca1a9ff057e0ba8eae8c5d5e
        Validity
            Not Before: Oct 15 09:01:29 2026 GMT
            Not After : Oct 16 09:01:29 2026 GMT
        Subject: CN=de689aec885500a00c40ad9cd2cfba67784a0ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d9:3b:7a:2f:bc:aa:f2:0e:79:8d:67:26:89:
                    6c:d0:ff:7b:ed:40:12:e7:2e:5c:cd:b8:a0:b9:a0:
                    24:04:32:bd:5c:47:06:9d:fe:1e:87:70:65:bc:c5:
                    57:28:ef:b5:70:42:82:d1:08:f7:f9:42:74:71:68:
                    aa:d1:88:0e:d0:ff:8c:03:5a:fe:9c:d9:82:b7:92:
                    25:35:43:2b:3c:a7:f1:f3:11:88:74:00:05:da:fb:
                    29:92:15:11:ec:a2:93:d1:b3:7a:be:88:15:d4:fa:
                    c7:7c:72:16:6c:8d:47:af:39:98:5a:b8:e7:ec:01:
                    29:43:82:c6:85:6a:56:b8:f9:23:96:47:11:75:12:
                    d8:34:c1:e1:8a:0a:1c:a7:62:b8:e6:86:0d:87:49:
                    48:c2:59:19:04:82:fa:11:69:8f:e9:84:0e:d2:d6:
                    bf:4a:e4:3b:8d:bc:53:e2:df:f4:07:3e:e6:90:c0:
                    74:0b:48:3c:4b:2b:fe:f4:06:a1:27:f1:a4:5c:19:
                    de:84:a1:86:ea:98:c9:3b:55:80:18:ee:73:35:5c:
                    f9:42:df:69:d0:3e:6b:38:02:08:10:2f:ab:a3:ad:
                    a2:ec:59:d7:37:9e:2e:88:62:17:1d:9f:61:bc:52:
                    bd:bf:ab:2f:5c:74:2b:2b:0a:49:ea:54:2e:ea:00:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:68:9A:EC:88:55:00:A0:0C:40:AD:9C:D2:CF:BA:67:78:4A:0E:A2
            X509v3 Authority Key Identifier:
                keyid:D4:62:EC:E5:47:57:2A:DE:CA:1A:9F:F0:57:E0:BA:8E:AE:8C:5D:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1GLs5UdXKt7KGp_wV-C6jq6MXV4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/8a9417-bc28-4a02-a92f-a408bba735ee/1/1GLs5UdXKt7KGp_wV-C6jq6MXV4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:5b:d2:71:0f:b3:f9:b8:54:19:5e:5b:44:88:15:b9:e0:08:
         b9:61:ac:db:fe:93:39:05:82:5e:92:d1:af:a5:a4:e2:83:60:
         94:be:63:b2:95:b5:2f:2d:bd:b5:c3:a7:37:a2:5f:93:07:c2:
         44:01:25:bf:ff:c6:d7:b0:1c:5b:56:32:a6:69:ff:76:d5:83:
         07:aa:1a:e4:15:52:4d:b0:c0:25:a3:e8:d5:d4:f5:34:0e:6f:
         ac:a5:3e:2d:2d:15:e4:8e:91:c3:a9:42:67:fd:38:c5:20:65:
         58:a1:bd:81:b3:af:4d:ce:33:c3:c3:fb:65:f3:6c:6a:7b:3d:
         a3:6b:1e:e7:7c:d9:73:d9:33:7a:23:ac:df:ba:e6:a8:b1:9b:
         3f:38:dd:75:4c:00:df:66:f3:10:93:14:63:df:1e:0e:a4:78:
         79:cf:f1:96:1a:46:ca:98:47:40:18:03:9d:d6:97:06:54:94:
         7f:30:20:17:8c:70:eb:e2:80:20:ee:73:9b:7b:4b:2f:1e:43:
         01:85:ec:cd:39:ef:1d:30:8e:05:18:26:f8:05:55:34:11:4d:
         92:9f:b6:46:cb:d1:42:1b:7c:d4:98:1e:b8:9f:b7:5f:88:3c:
         b9:18:be:03:2f:f4:aa:ff:8e:f5:45:7f:9c:69:a8:2d:75:31:
         a9:4f:48:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 17:48:04 2026 by rpki-client