Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File:                     8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier:          AKg9ju3/Q9d+bIsPc7XeL6fLMIdI4WXPPUlXf7PmmbM=
Subject key identifier:   AF:60:C3:50:2D:BE:8D:F6:5F:4D:F7:B8:97:C8:FC:2C:64:5E:C3:16
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer:       /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial:       01A116736F6EFD9057272D4306ACF1B24CC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number:          0A10
Signing time:             Wed 07 Oct 2026 13:00:26 +0000
Manifest this update:     Wed 07 Oct 2026 13:00:26 +0000
Manifest next update:     Thu 08 Oct 2026 13:00:26 +0000
Files and hashes:         1: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: IYhglCGaPiqq/ACw+fWwo3cgP5UAYbeIuN4jWFDHFnc=)
                          2: wn5elTtGmUxo3vgmfjZchTK_VTo.roa (hash: fkotHNjPjFd/IcwShz9KIRbGoJkmT3yrX5z9oh73hjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 13:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:73:6f:6e:fd:90:57:27:2d:43:06:ac:f1:b2:4c:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
        Validity
            Not Before: Oct  7 13:00:26 2026 GMT
            Not After : Oct  8 13:00:26 2026 GMT
        Subject: CN=af60c3502dbe8df65f4df7b897c8fc2c645ec316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4f:93:e6:ff:41:16:aa:75:04:ac:97:76:70:
                    af:51:f0:c0:30:4f:33:10:11:05:b4:06:2a:98:01:
                    5e:9f:28:6d:70:cd:5c:4e:e3:96:23:ef:4b:ba:c1:
                    bf:45:31:dc:df:4d:20:74:f3:93:b2:26:05:f2:58:
                    f4:fa:2e:5b:38:79:61:a1:82:14:1a:e3:dc:85:02:
                    53:75:65:13:39:59:92:fb:0e:e4:10:ed:24:1b:b9:
                    60:f3:0f:10:0d:e2:56:35:dd:05:b4:9c:0c:74:f7:
                    b8:f8:48:66:78:01:0f:03:55:9b:d9:e2:3d:6f:70:
                    af:98:36:07:ce:03:01:50:c3:dd:8b:43:8b:39:8d:
                    fa:dd:84:1d:47:67:11:46:6c:50:f1:0f:cc:a0:b1:
                    2b:bd:5c:be:4d:2c:b3:a8:14:64:95:b1:4b:9c:76:
                    8f:99:63:b7:a7:0d:3f:09:fc:2e:cf:86:21:f2:d3:
                    ce:ff:f5:68:f5:48:d1:f1:f1:38:3f:fb:5d:03:ac:
                    a9:8e:47:32:74:e2:1b:2b:56:da:1a:91:5c:ed:1d:
                    73:07:06:d2:e6:dc:f7:2a:4f:44:67:52:e8:48:c7:
                    3d:67:72:5f:ef:cc:53:8f:d5:84:41:b1:12:cf:9c:
                    3a:79:da:a1:db:10:70:b1:d6:c4:aa:2c:0c:d5:24:
                    97:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:60:C3:50:2D:BE:8D:F6:5F:4D:F7:B8:97:C8:FC:2C:64:5E:C3:16
            X509v3 Authority Key Identifier:
                keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:db:30:da:21:1f:0b:60:d9:7b:24:1b:31:07:9e:7c:aa:5b:
         fa:1f:d5:9c:f5:e0:2f:7c:34:7c:c5:a2:ac:12:fb:69:bc:94:
         03:1f:a3:a9:e9:64:c4:7c:59:5f:97:e7:91:e4:6c:75:0b:fb:
         3b:a5:78:7c:0c:6e:13:a3:be:1a:07:07:f6:8e:ae:bd:f1:b5:
         75:67:43:fd:e3:1f:6c:b0:fa:f1:ff:a6:f6:cd:d0:c0:98:6c:
         6c:a6:87:33:44:75:ca:bb:dc:ad:c4:ae:4c:4d:38:3f:61:a7:
         7f:e8:6f:c9:2b:01:b9:6b:6a:1c:0a:ed:15:fb:14:f1:1b:0e:
         33:c7:61:68:b1:91:2e:b3:f8:8e:0c:97:b5:d3:5c:4c:b0:5f:
         ba:8c:51:02:b1:a3:75:53:91:22:86:6a:cf:38:de:44:25:65:
         28:ba:ba:93:fa:0f:98:75:24:3d:3e:ae:84:62:8d:15:99:b9:
         f1:be:43:cc:f6:c7:87:36:1c:42:cb:11:33:ad:03:c1:1a:2d:
         8a:8b:84:d2:42:be:ca:81:c3:09:e2:a0:0e:c5:8c:f9:65:7a:
         23:56:57:ea:bc:85:97:50:70:ac:b0:d9:b2:ca:ed:4f:a6:d2:
         e0:b8:77:3e:40:bd:2e:a0:5c:ad:af:19:55:5b:e8:a2:c0:fa:
         01:89:7d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 00:14:16 2026 by rpki-client