Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
File:                     0-jUy45ELsOKa8P6QAoqUXzuDR4.mft (raw, json)
Hash identifier:          4cskQgnAWY5n/WdZVe0tFHxqmLdaDNF+OS9ZcZQ5qM4=
Subject key identifier:   23:EF:B8:1D:18:DA:A6:DE:D2:A7:E2:20:B5:DD:D8:29:F1:D0:0D:11
Authority key identifier: D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E
Certificate issuer:       /CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
Certificate serial:       01A14A2AEB5293395B558FFFEED104CA959D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
Manifest number:          1AAB
Signing time:             Sat 17 Oct 2026 14:01:28 +0000
Manifest this update:     Sat 17 Oct 2026 14:01:28 +0000
Manifest next update:     Sun 18 Oct 2026 14:01:28 +0000
Files and hashes:         1: 0-jUy45ELsOKa8P6QAoqUXzuDR4.crl (hash: WP1CrJE+5dQD1S1V2yj9P4xzd+SWbnPMB2lP9sF96TU=)
                          2: oHmE_s2IgxzPCRH2-ThzQIvXCO0.roa (hash: sNd3D2Nl25u7Dz2DARN3+vH2eQ72TG1JHi7rWfuknfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4a:2a:eb:52:93:39:5b:55:8f:ff:ee:d1:04:ca:95:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3e8d4cb8e442ec38a6bc3fa400a2a517cee0d1e
        Validity
            Not Before: Oct 17 14:01:28 2026 GMT
            Not After : Oct 18 14:01:28 2026 GMT
        Subject: CN=23efb81d18daa6ded2a7e220b5ddd829f1d00d11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:55:36:35:b6:ca:22:20:f4:1b:ad:31:f3:ee:
                    0d:1c:45:c2:e9:6e:0d:94:9f:a0:63:72:01:46:7b:
                    e7:ee:f9:75:41:fe:67:2a:4a:db:fd:62:db:b0:4c:
                    c9:0c:80:f7:4d:1a:cf:7a:66:d6:a0:41:dd:ac:24:
                    2f:38:bc:41:0a:a3:e5:01:29:d8:f5:bf:50:2c:11:
                    97:e4:4d:c7:ea:0a:18:6c:61:a1:e5:07:33:49:ae:
                    16:b8:26:3c:f6:bb:9b:ff:e1:36:18:87:31:88:e3:
                    0d:17:3a:4c:fd:9d:ce:ac:a1:e0:df:df:88:bb:7b:
                    46:c4:ff:d7:c0:8f:90:65:5c:b8:de:64:0e:ff:67:
                    a7:93:f0:a3:03:25:7b:a9:4c:53:f3:8b:96:8a:c1:
                    4d:c0:b7:f1:82:f2:62:09:75:33:bb:9b:90:6d:ef:
                    5a:2e:77:cf:8a:68:50:90:83:b7:cb:c6:32:e1:2e:
                    a7:b5:76:22:2f:ad:76:eb:31:75:6d:6c:ff:57:95:
                    3b:97:34:f7:e9:bd:f6:53:cc:e6:ae:58:29:2b:45:
                    a0:ea:3d:5c:95:3c:80:e1:60:89:80:42:38:a7:43:
                    85:72:e1:9a:13:b7:48:4c:87:34:68:0a:09:a7:e6:
                    17:6e:2a:74:82:b0:47:01:5f:13:84:7b:32:f0:71:
                    c3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EF:B8:1D:18:DA:A6:DE:D2:A7:E2:20:B5:DD:D8:29:F1:D0:0D:11
            X509v3 Authority Key Identifier:
                keyid:D3:E8:D4:CB:8E:44:2E:C3:8A:6B:C3:FA:40:0A:2A:51:7C:EE:0D:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-jUy45ELsOKa8P6QAoqUXzuDR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/6b850a-4f12-4206-a50f-5d58711f3662/1/0-jUy45ELsOKa8P6QAoqUXzuDR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:cf:10:ef:4d:ed:22:ff:81:27:93:a8:15:f6:59:2b:2c:31:
         5b:1f:93:61:18:af:3e:5f:aa:a9:9c:1d:df:c6:8f:15:7f:34:
         49:20:33:18:a2:11:13:9f:35:7d:bb:da:65:da:b6:e7:da:90:
         1e:8b:d0:b1:4a:3f:ed:54:cc:6d:0d:87:da:0e:79:d2:cc:17:
         a0:30:61:1c:23:fa:c8:ae:04:d0:c7:a7:2b:fc:33:ae:63:01:
         f2:64:2f:01:35:f0:27:8a:81:45:0b:52:eb:63:93:6c:f1:b7:
         13:cf:ea:25:cc:5f:94:89:89:cb:33:c0:0f:1d:ef:fc:dc:45:
         85:5b:90:63:83:a7:e0:91:56:0a:d3:bf:f2:c0:fe:07:f1:5a:
         91:86:6e:a2:f4:3c:63:af:d1:4b:de:b1:ba:b3:4e:2e:05:43:
         f3:cb:78:6a:68:f9:de:00:cc:e0:9d:29:f7:39:00:e3:11:61:
         d0:c2:0d:a7:f7:cf:07:49:b5:de:e5:67:13:f3:fc:06:93:2d:
         45:b3:77:27:15:a9:1f:bf:5f:ca:74:5f:ed:ad:13:e1:59:00:
         eb:f7:cb:c7:64:e8:df:64:62:76:27:df:60:b9:9e:cd:d5:17:
         df:f2:ec:ea:24:1b:24:1d:d9:1f:26:af:f7:28:66:ee:8c:f8:
         99:6e:86:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 17:50:08 2026 by rpki-client