Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
File:                     8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft (raw, json)
Hash identifier:          RvjP0vgIteThUls3zMe1ziyZHM1z45eMwyvdJVySzyI=
Subject key identifier:   F0:24:C6:B4:A2:2B:8E:C2:A5:31:7D:63:B6:0B:44:48:2D:9F:AD:10
Authority key identifier: F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
Certificate issuer:       /CN=f04e3c322db11c10491e5e835fc66efd42e59015
Certificate serial:       01A1DE034FF296F40B342BDE4D7CF2B93861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
Manifest number:          1AF4
Signing time:             Sun 15 Nov 2026 07:02:01 +0000
Manifest this update:     Sun 15 Nov 2026 07:02:01 +0000
Manifest next update:     Mon 16 Nov 2026 07:02:01 +0000
Files and hashes:         1: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl (hash: PHxYm2w04+dmQCnLbNMAZFYjV1YvkXa+VrS92UAGw4k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:03:4f:f2:96:f4:0b:34:2b:de:4d:7c:f2:b9:38:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04e3c322db11c10491e5e835fc66efd42e59015
        Validity
            Not Before: Nov 15 07:02:01 2026 GMT
            Not After : Nov 16 07:02:01 2026 GMT
        Subject: CN=f024c6b4a22b8ec2a5317d63b60b44482d9fad10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:35:6c:0d:59:65:24:71:a3:f8:51:83:33:10:
                    ce:37:27:57:7b:c1:8b:b7:19:36:1a:2e:bd:06:de:
                    f5:77:95:40:cd:21:8d:18:ab:21:02:d0:3f:73:1a:
                    5c:84:0e:8e:50:26:01:83:ef:ff:f4:a7:e4:9f:77:
                    52:2b:d4:94:b8:85:ab:f5:b7:1b:fa:e7:05:23:90:
                    1c:19:97:cd:b4:a8:3e:fc:42:17:6c:2b:35:11:d4:
                    a6:e5:f3:1b:7d:53:ea:81:43:ee:96:b5:2e:96:93:
                    a2:dc:4f:fb:7d:f4:f8:79:99:14:b0:fc:68:b0:f6:
                    29:ec:e1:1a:df:1e:b3:45:9f:7b:3f:2d:a3:16:79:
                    0c:03:b2:7a:fb:c3:21:82:47:81:9f:dd:1c:1d:fd:
                    13:98:73:51:91:f3:22:32:3f:bc:2c:1f:ed:50:be:
                    49:ee:a8:59:27:f8:9b:d5:b6:e4:84:72:79:35:d9:
                    aa:13:3d:e7:57:69:84:b5:73:63:7d:9b:b1:9e:f6:
                    d1:ef:04:96:47:29:e7:39:5a:9d:0a:f1:76:b2:a6:
                    fb:1c:aa:85:ba:e2:ea:6c:2c:e1:45:1f:53:f1:52:
                    dd:a4:36:80:6d:b3:8b:17:ae:ae:d8:0b:22:b8:92:
                    fd:8c:26:fd:36:e9:92:c4:0a:89:81:a1:f3:00:12:
                    86:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:24:C6:B4:A2:2B:8E:C2:A5:31:7D:63:B6:0B:44:48:2D:9F:AD:10
            X509v3 Authority Key Identifier:
                keyid:F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:19:02:42:fe:a6:3b:b7:85:fc:f0:4a:2b:7b:cf:b9:0a:d0:
         cc:50:63:8a:f8:8a:dd:27:1c:0d:ff:b3:7e:a3:c2:e8:5a:d8:
         ed:e6:ac:5a:7c:d4:2c:ec:8e:68:df:6e:1c:79:82:a5:9f:6b:
         b9:12:68:f3:d2:c4:27:36:0e:03:9a:f7:0c:f6:fe:35:2f:f3:
         1f:a2:9a:f3:04:3d:2f:0d:2b:17:21:9f:38:7f:73:07:a9:17:
         f1:6a:21:d3:bb:37:c4:ad:33:fd:f8:09:ee:fe:3b:e1:54:f1:
         53:7d:81:9a:89:94:c4:b4:51:06:98:c3:67:b0:bd:82:a3:37:
         27:18:45:dc:17:7d:05:8c:07:39:03:88:d1:e8:95:a2:0b:75:
         31:cd:7c:25:b2:55:21:a7:da:d8:4b:80:6e:f7:27:29:a3:5a:
         bc:5f:b7:10:e1:87:51:94:0f:0b:20:b8:24:5e:f8:42:8d:03:
         4b:85:d6:a6:f1:35:19:c9:ca:a1:b5:09:cc:45:1b:14:0b:61:
         1d:ee:cc:0a:73:33:49:10:19:d6:82:db:81:a2:fa:5f:65:70:
         d1:f0:c0:c8:54:4a:46:21:e4:57:ee:22:c1:7c:4c:67:f3:cf:
         94:fc:c9:37:c5:dd:89:90:4a:2f:d8:4f:41:05:a8:47:96:ce:
         bc:27:8c:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeA0/ylvQLNCveTXzyuThhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGUzYzMyMmRiMTFjMTA0OTFlNWU4MzVmYzY2ZWZkNDJl
NTkwMTUwHhcNMjYxMTE1MDcwMjAxWhcNMjYxMTE2MDcwMjAxWjAzMTEwLwYDVQQD
EyhmMDI0YzZiNGEyMmI4ZWMyYTUzMTdkNjNiNjBiNDQ0ODJkOWZhZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArTVsDVllJHGj+FGDMxDONydXe8GL
txk2Gi69Bt71d5VAzSGNGKshAtA/cxpchA6OUCYBg+//9Kfkn3dSK9SUuIWr9bcb
+ucFI5AcGZfNtKg+/EIXbCs1EdSm5fMbfVPqgUPulrUulpOi3E/7ffT4eZkUsPxo
sPYp7OEa3x6zRZ97Py2jFnkMA7J6+8MhgkeBn90cHf0TmHNRkfMiMj+8LB/tUL5J
7qhZJ/ib1bbkhHJ5NdmqEz3nV2mEtXNjfZuxnvbR7wSWRynnOVqdCvF2sqb7HKqF
uuLqbCzhRR9T8VLdpDaAbbOLF66u2AsiuJL9jCb9NumSxAqJgaHzABKGVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAkxrSiK47CpTF9Y7YLREgtn60QMB8GA1UdIwQY
MBaAFPBOPDItsRwQSR5eg1/Gbv1C5ZAVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEU0OE1pMnhIQkJKSGw2RFg4WnVfVUxsa0JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9mNzZkNGYtZjQxZi00OTA1LWJlYzct
ZTY3MGUzZGQ1YzIxLzEvOEU0OE1pMnhIQkJKSGw2RFg4WnVfVUxsa0JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9mNzZkNGYtZjQxZi00OTA1LWJlYzctZTY3MGUzZGQ1YzIx
LzEvOEU0OE1pMnhIQkJKSGw2RFg4WnVfVUxsa0JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxkCQv6m
O7eF/PBKK3vPuQrQzFBjiviK3SccDf+zfqPC6FrY7easWnzULOyOaN9uHHmCpZ9r
uRJo89LEJzYOA5r3DPb+NS/zH6Ka8wQ9Lw0rFyGfOH9zB6kX8Woh07s3xK0z/fgJ
7v474VTxU32BmomUxLRRBpjDZ7C9gqM3JxhF3Bd9BYwHOQOI0eiVogt1Mc18JbJV
Iafa2EuAbvcnKaNavF+3EOGHUZQPCyC4JF74Qo0DS4XWpvE1GcnKobUJzEUbFAth
He7MCnMzSRAZ1oLbgaL6X2Vw0fDAyFRKRiHkV+4iwXxMZ/PPlPzJN8XdiZBKL9hP
QQWoR5bOvCeMsw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 15:42:17 2026 by rpki-client