Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
File:                     navGJqwmQGaxxccJpIR383iDYd4.mft (raw, json)
Hash identifier:          OzWLkaIJ4wCZEIB5IDtf7FDoeq4agpiXBz14sHTkB1I=
Subject key identifier:   6C:68:8E:02:FD:EB:76:B8:3E:D6:33:87:E2:9D:2C:15:39:F8:59:A1
Authority key identifier: 9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE
Certificate issuer:       /CN=9dabc626ac264066b1c5c709a48477f3788361de
Certificate serial:       01A13C37C8C358A1869B666312E22E083468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
Manifest number:          187C
Signing time:             Wed 14 Oct 2026 21:00:51 +0000
Manifest this update:     Wed 14 Oct 2026 21:00:51 +0000
Manifest next update:     Thu 15 Oct 2026 21:00:51 +0000
Files and hashes:         1: navGJqwmQGaxxccJpIR383iDYd4.crl (hash: mAjq2xHb9J//WEt/NFpfu5Cosdo0XLTvNdBNdUvTrGU=)
                          2: r-YbuiLOjDtLbgqIKWUGylG27HA.roa (hash: CKYtlUTCJPkniQ27OPoJcO3BQmhOoE6SvFv1q1Znej0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:37:c8:c3:58:a1:86:9b:66:63:12:e2:2e:08:34:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dabc626ac264066b1c5c709a48477f3788361de
        Validity
            Not Before: Oct 14 21:00:51 2026 GMT
            Not After : Oct 15 21:00:51 2026 GMT
        Subject: CN=6c688e02fdeb76b83ed63387e29d2c1539f859a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:92:b2:ff:dc:66:f6:7a:20:85:c1:ac:5d:e3:
                    7c:0d:56:a4:6b:26:4e:08:3c:1c:bd:3b:14:1b:7c:
                    e7:89:66:bb:a4:2e:11:12:28:c8:14:4b:b0:3e:16:
                    52:2b:f5:07:0f:89:48:a2:ad:ad:24:14:bb:2f:cd:
                    49:b3:e1:6a:84:b4:80:47:b6:ac:13:c2:f0:72:56:
                    20:b6:25:92:ed:61:02:d4:31:4a:e1:ac:b1:f9:fb:
                    88:79:49:72:ea:81:6c:e7:6c:28:57:a1:ab:08:1e:
                    1f:04:2e:05:2f:7c:14:6d:9c:9b:8c:ce:c1:b0:0a:
                    0b:21:ad:99:db:3a:b5:89:b8:8c:3e:cf:8a:f7:f2:
                    6b:2f:95:bd:6a:b9:55:e2:1a:c7:f0:6a:ad:17:5e:
                    ff:4e:0c:fd:b0:4c:c3:f7:a2:2a:a4:24:95:ac:d9:
                    38:39:75:4b:ff:90:b8:fa:86:d8:95:a4:76:b8:36:
                    45:32:b7:d8:ca:d8:b1:72:1c:ad:c3:33:83:d3:bc:
                    13:48:de:26:dd:de:37:3f:7b:29:8b:1f:ba:4b:3e:
                    4b:59:9c:2c:32:64:6f:d5:1c:ee:69:d0:08:84:b8:
                    ba:02:b9:93:39:79:a2:c5:eb:df:c1:79:cc:95:f1:
                    38:5e:95:bb:90:ca:3c:ee:bf:01:0b:9e:21:11:88:
                    47:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:68:8E:02:FD:EB:76:B8:3E:D6:33:87:E2:9D:2C:15:39:F8:59:A1
            X509v3 Authority Key Identifier:
                keyid:9D:AB:C6:26:AC:26:40:66:B1:C5:C7:09:A4:84:77:F3:78:83:61:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/navGJqwmQGaxxccJpIR383iDYd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/19b008-b6f9-4271-b130-0b7e38a122fe/1/navGJqwmQGaxxccJpIR383iDYd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:82:cc:fa:73:6f:04:83:3a:6b:2f:3b:9d:a4:d9:68:76:c6:
         58:b5:26:8e:b6:05:03:cc:0d:dd:1d:33:76:e3:b9:90:96:30:
         d7:a8:a7:9e:7f:1a:aa:5b:da:13:58:86:23:63:58:a8:2d:45:
         a4:63:aa:aa:35:10:e0:cc:0c:e4:9e:e5:0a:6e:7d:be:99:d7:
         0e:3e:07:66:62:c9:35:eb:d1:06:7c:87:0f:cf:78:b5:aa:d3:
         15:c5:6b:7c:f5:06:0e:bb:0c:6a:6b:8a:06:5c:22:c6:59:14:
         f8:ab:fb:df:68:01:64:45:24:c3:98:fa:57:2e:c1:32:63:92:
         ab:35:80:4b:43:7b:9b:12:64:25:5a:3d:ab:6f:09:67:82:6f:
         94:61:ac:b6:ba:d4:77:41:28:ab:d1:23:8e:31:c9:50:18:4a:
         10:d1:3f:a0:13:ec:18:aa:d8:e9:85:a1:a9:31:c3:93:cd:5e:
         d4:32:17:88:96:c9:f9:35:c1:cb:f6:25:78:17:7d:1f:45:02:
         17:0f:e5:0a:e7:be:2a:df:93:01:e8:92:c1:63:9d:e5:32:bc:
         4e:e4:8d:d6:44:ec:17:86:2a:87:2b:0d:86:35:a2:78:c9:5a:
         cc:fc:61:db:66:09:a9:a8:41:ca:c1:eb:07:f3:89:10:48:bd:
         68:53:6d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:03:52 2026 by rpki-client