Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
File:                     0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft (raw, json)
Hash identifier:          C9mF+5fd+jdCaWey018iolzKMsTqlFA1eQQCJCC0bwg=
Subject key identifier:   FF:4D:AD:CB:6D:E1:39:F0:CE:BF:A9:87:C1:9A:44:C0:32:A4:42:4F
Authority key identifier: D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32
Certificate issuer:       /CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
Certificate serial:       01A101DA61BC8659EF45CFF9A4A248683A8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
Manifest number:          1754
Signing time:             Sat 03 Oct 2026 13:00:51 +0000
Manifest this update:     Sat 03 Oct 2026 13:00:51 +0000
Manifest next update:     Sun 04 Oct 2026 13:00:51 +0000
Files and hashes:         1: 0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl (hash: I8RmwZKhlRVFwSnOCo+c4mrBjnmaJCJN5jvzYC4zDJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 11:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:01:da:61:bc:86:59:ef:45:cf:f9:a4:a2:48:68:3a:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2e0bd13b9b466c32e137658088d282a3b7d5632
        Validity
            Not Before: Oct  3 13:00:51 2026 GMT
            Not After : Oct  4 13:00:51 2026 GMT
        Subject: CN=ff4dadcb6de139f0cebfa987c19a44c032a4424f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:5d:8a:7e:46:ab:98:e5:17:1c:df:45:fa:2a:
                    ec:e2:cc:41:c2:d0:fd:85:55:a0:92:a1:b4:4e:9e:
                    e7:ef:ec:07:3e:e5:0d:9d:62:ad:6d:1a:20:d6:75:
                    cc:ff:d8:6d:95:bf:7a:d8:f6:4e:26:4a:c6:2b:ba:
                    4f:d9:a3:34:d5:4e:2c:95:c3:61:a9:5b:32:02:2e:
                    de:6f:73:43:8f:fb:c4:2c:f0:7f:23:dc:33:bb:36:
                    3e:10:a5:07:5c:4a:45:b8:80:fd:89:ec:95:5a:c4:
                    fb:84:fa:60:46:27:02:a2:54:03:a1:a2:b6:1c:8a:
                    de:a4:e7:52:09:92:48:ec:cc:99:7c:f5:c2:12:db:
                    e3:f8:f9:f5:ab:a7:eb:39:c8:18:ef:ea:3d:b7:03:
                    30:a8:1c:a6:28:24:11:b2:ec:71:d6:db:ec:5d:fa:
                    c4:d3:82:c6:b0:13:e9:e2:13:33:c8:b6:7c:fa:f5:
                    d0:2d:ff:72:96:5e:f8:e8:71:af:29:af:86:b0:df:
                    42:ec:48:a7:53:8a:37:cd:f1:f2:cc:44:95:64:d4:
                    83:16:88:40:23:1f:ac:95:c5:d1:29:71:c8:d9:64:
                    83:22:9d:49:29:23:35:ef:35:26:c3:de:09:d6:0f:
                    33:53:fb:16:f2:4d:2f:36:aa:0a:61:d7:4a:fb:de:
                    c8:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:4D:AD:CB:6D:E1:39:F0:CE:BF:A9:87:C1:9A:44:C0:32:A4:42:4F
            X509v3 Authority Key Identifier:
                keyid:D2:E0:BD:13:B9:B4:66:C3:2E:13:76:58:08:8D:28:2A:3B:7D:56:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9d799f-c5eb-44bc-a439-6f3a23ff0c58/1/0uC9E7m0ZsMuE3ZYCI0oKjt9VjI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ba:68:cf:7c:c3:6f:58:11:5f:83:f4:fe:50:c5:c3:1f:ef:
         a9:83:e6:bf:f3:10:9b:3d:b1:3b:02:d3:f1:d5:43:3a:40:1b:
         bf:12:36:54:09:82:83:c4:42:cd:dc:55:76:51:ec:4c:3a:86:
         5f:37:65:62:dd:10:ef:fd:e3:0b:e3:70:85:a0:cb:3e:ab:21:
         b1:17:64:97:29:a4:c7:bb:55:ba:9b:74:8f:eb:e9:8a:48:38:
         fc:3b:68:fd:d1:80:3f:c0:72:76:ed:1f:ab:d6:5e:22:28:26:
         9b:30:55:37:5c:71:39:96:47:60:69:9c:ef:35:9f:aa:f1:47:
         e4:6c:b5:fd:cd:ba:31:34:f5:2b:ad:71:09:04:7a:b2:2a:96:
         77:f2:06:3b:87:a1:d0:11:f6:7f:7b:42:18:df:e6:c6:2e:d4:
         e6:e8:38:6b:8f:bb:ac:1d:6f:5f:ec:54:88:2a:47:5b:76:01:
         08:f6:bf:33:33:4b:d1:8b:b5:c2:11:9b:60:1d:a3:64:f0:e5:
         ed:8e:0c:a0:4a:11:07:f8:d8:e7:cb:ed:73:86:cf:74:52:38:
         4c:9e:c2:52:b6:d6:bc:87:1f:28:fd:8f:5b:84:0a:e2:46:f6:
         19:85:36:80:3d:a8:9b:76:d6:3d:25:cf:02:ca:32:e9:9a:51:
         ed:17:ee:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 16:44:25 2026 by rpki-client