Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
File:                     1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft (raw, json)
Hash identifier:          GFhNt2jzwAxyVgb3pYPI90yjwIbfO7mOIy4hiU2xcoU=
Subject key identifier:   F1:34:A1:00:01:10:F4:18:CE:01:46:58:17:E9:1B:39:9D:38:DD:9E
Authority key identifier: D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA
Certificate issuer:       /CN=d46c9be46cba3051066233ca4f9628a26df8fcca
Certificate serial:       01A0C09EA722F6293C919F54F3C4757B9FD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
Manifest number:          13DF
Signing time:             Sun 20 Sep 2026 21:00:17 +0000
Manifest this update:     Sun 20 Sep 2026 21:00:17 +0000
Manifest next update:     Mon 21 Sep 2026 21:00:17 +0000
Files and hashes:         1: 1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl (hash: RUo15/UQXJS7TTRhgO3Q1nhwEJrV0Fse5r5K+/tf3U8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:9e:a7:22:f6:29:3c:91:9f:54:f3:c4:75:7b:9f:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d46c9be46cba3051066233ca4f9628a26df8fcca
        Validity
            Not Before: Sep 20 21:00:17 2026 GMT
            Not After : Sep 21 21:00:17 2026 GMT
        Subject: CN=f134a1000110f418ce01465817e91b399d38dd9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:43:65:48:8c:2d:45:c5:df:79:25:1f:85:bc:
                    5a:b8:13:1e:3a:51:b5:8f:67:23:54:7d:a4:ed:71:
                    7d:2c:8c:b6:ed:b0:55:05:91:b6:67:81:8b:f6:17:
                    14:b8:38:1b:96:73:48:4e:6e:fd:57:17:55:d1:b0:
                    d7:af:07:d2:50:31:e2:0f:d6:8e:fa:8f:dd:d7:32:
                    d2:fb:df:29:5a:02:d3:3e:0f:0a:55:47:95:1b:6c:
                    9e:2c:86:fb:78:e0:11:7a:fe:e5:b2:d4:10:59:36:
                    8f:c4:04:66:47:54:99:20:48:19:ed:6a:11:65:76:
                    69:88:a9:3d:5f:12:e9:01:d5:71:f9:67:2a:8f:70:
                    55:d8:25:37:8d:5e:15:79:7d:24:b7:3f:56:e1:f6:
                    dc:d2:dc:10:71:34:01:b4:07:52:d9:08:62:6e:e8:
                    ea:84:d1:4e:ec:a4:b6:cf:ba:2b:93:94:06:b4:df:
                    1b:fd:1d:a2:03:d7:6a:58:63:10:ad:94:77:f7:0a:
                    65:ac:56:1c:57:31:2f:73:f9:63:2d:8e:1b:2b:41:
                    d5:89:f1:bb:ab:ea:a1:34:a7:79:49:9a:33:6e:b6:
                    16:06:5e:ea:f0:f0:8d:c4:db:a4:ac:d9:8b:63:ee:
                    d0:6c:1e:be:91:01:d4:fe:6b:42:38:79:8d:e8:64:
                    96:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:34:A1:00:01:10:F4:18:CE:01:46:58:17:E9:1B:39:9D:38:DD:9E
            X509v3 Authority Key Identifier:
                keyid:D4:6C:9B:E4:6C:BA:30:51:06:62:33:CA:4F:96:28:A2:6D:F8:FC:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb2dc-da06-467b-b312-73c8671a90f6/1/1Gyb5Gy6MFEGYjPKT5Yoom34_Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:08:02:50:c2:c3:67:da:57:70:d1:26:98:3c:36:bf:69:d5:
         29:76:93:56:46:27:c4:9c:f9:50:d1:93:32:19:e2:9a:dd:5d:
         3a:38:eb:2e:3e:ea:c1:c3:6e:69:ce:35:b4:cb:0e:5b:4b:ae:
         3f:b5:a6:b3:66:10:90:b5:24:7d:95:a7:2e:4c:50:38:c4:a9:
         62:85:2f:4f:e2:0d:f9:c6:98:d6:ad:04:66:71:aa:60:50:30:
         80:d2:ec:1f:eb:b9:58:ba:21:91:6c:39:c0:19:e2:6c:04:7b:
         d1:c5:02:5a:16:d7:80:79:1f:f4:39:ac:25:ba:74:96:b1:2e:
         99:ba:b6:59:fc:7d:99:43:64:4a:ac:ca:ba:56:8f:28:d1:f1:
         7c:e9:3a:fa:3d:b4:4d:aa:b1:31:8f:c6:f8:c9:70:00:8d:ae:
         aa:f5:67:84:9e:39:dd:60:6f:7a:dd:9c:b9:0b:f9:0e:e7:0b:
         37:a3:79:f1:1d:51:fd:9d:17:3b:69:7e:4c:b0:4b:8d:57:59:
         19:95:75:77:cf:f6:a3:1e:93:83:d1:44:9b:3c:3e:ed:7e:33:
         64:6b:71:2a:ba:17:f7:7e:72:14:9a:c8:76:23:9b:ac:f1:36:
         4c:3f:6e:1d:91:d0:2a:6f:7c:75:4f:e4:50:c4:76:64:01:62:
         cd:67:03:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:04:51 2026 by rpki-client