Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
File:                     01CzV9ze5o--vcVVPbMknG6Clsc.mft (raw, json)
Hash identifier:          1FXhCaKWXe5dV8tKSnFziJrdGpe2IBCt0NwFVyxCF7Y=
Subject key identifier:   AA:4C:32:C5:4E:4A:50:33:BC:2A:18:BA:B6:B2:6B:1F:DE:BD:D4:6E
Authority key identifier: D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7
Certificate issuer:       /CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
Certificate serial:       01A13DEEE28C33D8118AC771CAD6CD368EAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
Manifest number:          09AE
Signing time:             Thu 15 Oct 2026 05:00:28 +0000
Manifest this update:     Thu 15 Oct 2026 05:00:28 +0000
Manifest next update:     Fri 16 Oct 2026 05:00:28 +0000
Files and hashes:         1: 01CzV9ze5o--vcVVPbMknG6Clsc.crl (hash: uXHLPPh+5x4CtSdioXrJQjNJ/OIlORaofv6OT9UwDI8=)
                          2: 4VA7wZJaiHWG2GAPtA5u1BDcn4I.roa (hash: PqJvEzmh32UVxsDr7waFI7G4gmqJkPLZ5CaOrNIefv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:ee:e2:8c:33:d8:11:8a:c7:71:ca:d6:cd:36:8e:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d350b357dcdee68fbebdc5553db3249c6e8296c7
        Validity
            Not Before: Oct 15 05:00:28 2026 GMT
            Not After : Oct 16 05:00:28 2026 GMT
        Subject: CN=aa4c32c54e4a5033bc2a18bab6b26b1fdebdd46e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b4:88:06:4a:34:7d:d3:f9:18:bf:d8:69:e2:
                    06:88:fb:99:4e:64:94:c5:22:15:c1:56:b9:50:07:
                    fa:d5:73:1b:0b:6c:9a:70:88:dc:f2:65:28:c6:d0:
                    e8:95:f5:1c:2e:3e:18:14:9a:c9:64:4b:8d:1c:c3:
                    bf:8c:f4:9c:bc:e7:01:ce:e1:e3:9e:11:44:35:5b:
                    ed:29:18:9d:a5:f5:2f:9a:96:fd:1f:de:c5:12:3c:
                    94:33:3b:f2:40:ef:f0:6e:a8:8d:d2:c3:f6:96:42:
                    26:cc:dc:f1:9e:10:0b:eb:73:f2:3b:27:63:37:d1:
                    60:de:c6:8d:f5:92:35:5a:18:e0:85:82:45:07:45:
                    3e:a2:6d:3e:c0:d5:94:c0:cf:18:43:2e:6d:2b:45:
                    fc:f3:5b:b8:2a:cd:46:c0:f5:73:6a:fb:0d:ac:24:
                    8f:4c:11:8e:4f:00:c0:51:41:f9:e3:18:65:bc:fb:
                    37:e2:51:75:8a:0a:ae:9e:ec:ce:15:cf:6e:a7:28:
                    a8:95:9a:5f:3e:80:ae:ac:6e:99:49:2f:dd:41:3c:
                    42:e9:58:05:d0:69:51:99:9c:56:e4:b3:67:4e:a7:
                    e9:39:64:75:cb:8c:3f:9b:d2:60:f4:fd:4c:7f:0c:
                    fa:6a:c6:2f:74:56:90:df:f9:30:27:23:9e:23:2f:
                    d7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:4C:32:C5:4E:4A:50:33:BC:2A:18:BA:B6:B2:6B:1F:DE:BD:D4:6E
            X509v3 Authority Key Identifier:
                keyid:D3:50:B3:57:DC:DE:E6:8F:BE:BD:C5:55:3D:B3:24:9C:6E:82:96:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01CzV9ze5o--vcVVPbMknG6Clsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0b5696-e776-4021-badf-ffed53f45ded/1/01CzV9ze5o--vcVVPbMknG6Clsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:45:4e:96:d3:99:33:72:aa:1a:9f:ec:c6:f9:70:1a:d8:be:
         58:61:c5:d0:cb:1a:9f:f4:ac:69:64:60:cb:78:10:27:5f:06:
         4d:26:f2:26:62:26:68:4d:51:66:f7:49:a0:6d:ba:e2:ec:8c:
         43:51:58:28:95:15:af:92:1f:41:f0:20:41:9b:27:69:88:8f:
         73:03:59:bd:f9:19:dd:81:ff:03:1f:6b:30:24:30:4c:6a:ad:
         9d:8a:87:ec:af:ea:cd:5f:f4:75:bb:25:30:6c:e9:9a:dd:8b:
         e0:7a:79:88:bc:ae:d0:49:79:82:fb:55:86:a5:ef:55:e6:7e:
         7e:a0:0c:c2:ce:99:73:60:6c:ad:5d:68:75:9a:45:84:29:5d:
         22:b9:5d:26:36:ad:3e:a8:f9:6e:b0:49:30:0c:99:e0:da:65:
         fb:31:f0:a0:be:27:fb:8f:b7:c5:86:6c:33:f7:ac:0b:23:50:
         1d:f2:18:71:e4:45:29:91:d5:ee:e4:77:81:b5:70:05:76:cd:
         a6:79:d5:e4:d8:10:03:2f:59:68:06:79:42:67:46:60:c5:0d:
         b8:12:6c:d7:5e:c9:2a:e8:69:1f:09:37:8a:ab:f9:8b:1a:87:
         8e:4c:35:36:85:6e:aa:3a:eb:2b:e7:2a:7b:99:36:ad:9c:7e:
         75:6a:de:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:23 2026 by rpki-client