Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
File:                     0yJ36jBLKESnhomzqg2SGeM2Z3M.mft (raw, json)
Hash identifier:          ytMq8cd+7Z9h9UkBPb5pfwcEJiFIo0+qUzSAxU7a5k0=
Subject key identifier:   62:92:A8:8C:CF:F7:1E:EA:C8:C2:FD:BC:B2:94:45:E4:C6:DD:9C:71
Authority key identifier: D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73
Certificate issuer:       /CN=d32277ea304b2844a78689b3aa0d9219e3366773
Certificate serial:       01A134B59F3DA7D26D080B63BB04F13958D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
Manifest number:          19D0
Signing time:             Tue 13 Oct 2026 10:01:20 +0000
Manifest this update:     Tue 13 Oct 2026 10:01:20 +0000
Manifest next update:     Wed 14 Oct 2026 10:01:20 +0000
Files and hashes:         1: 0yJ36jBLKESnhomzqg2SGeM2Z3M.crl (hash: ndYpmEG7AsOKyLhKsw40zbBzBhNsMqHTkS9fFaD+rMw=)
                          2: _hM3H1qZ9X2c4qZvxbmxIdT7K78.roa (hash: OwXX274c7WiCLwDlzUWHfVwNDY75hqlVdtdPyNCFPX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:b5:9f:3d:a7:d2:6d:08:0b:63:bb:04:f1:39:58:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d32277ea304b2844a78689b3aa0d9219e3366773
        Validity
            Not Before: Oct 13 10:01:20 2026 GMT
            Not After : Oct 14 10:01:20 2026 GMT
        Subject: CN=6292a88ccff71eeac8c2fdbcb29445e4c6dd9c71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:13:1d:e4:fa:05:6a:a4:ee:d2:b2:0e:da:a8:
                    9f:20:9f:7b:23:8a:8a:30:a8:32:4e:b8:e5:b4:64:
                    9c:25:47:4e:bd:87:d9:41:b6:3c:4a:a1:24:c0:71:
                    1e:9c:dc:c3:17:81:0f:dc:8b:22:4f:db:1d:c0:5f:
                    2b:e5:69:81:ab:01:79:e2:37:77:dd:7c:ea:16:94:
                    ce:52:4d:b3:8e:d8:84:e8:af:06:32:76:c0:22:50:
                    e2:01:c8:42:15:0b:74:b8:7f:44:39:93:23:a4:63:
                    c4:85:8f:87:e2:4c:9d:dd:9d:4c:f5:bc:53:aa:35:
                    2a:7e:bc:ff:4d:7e:0b:93:9a:f3:72:be:b0:ed:09:
                    ed:27:d8:38:07:7a:c5:86:9f:10:39:1a:4c:23:da:
                    69:aa:a9:87:5c:94:33:63:df:93:f9:f3:08:e7:63:
                    4c:69:df:42:3d:34:97:7b:82:1f:6e:c2:b3:2d:c3:
                    56:43:0e:c5:20:7b:b3:c6:c1:1a:d4:4f:a9:50:4c:
                    f4:14:0e:4a:19:c5:2f:47:fb:bb:81:7b:80:4d:4e:
                    90:68:40:37:9d:ca:12:12:49:97:05:07:85:86:3e:
                    b0:62:ec:7f:1c:c1:d2:39:d5:f7:1e:17:af:0b:76:
                    44:8b:cb:73:9f:4e:f4:e9:d4:21:e5:b3:f1:c0:64:
                    53:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:92:A8:8C:CF:F7:1E:EA:C8:C2:FD:BC:B2:94:45:E4:C6:DD:9C:71
            X509v3 Authority Key Identifier:
                keyid:D3:22:77:EA:30:4B:28:44:A7:86:89:B3:AA:0D:92:19:E3:36:67:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yJ36jBLKESnhomzqg2SGeM2Z3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8533c3-29e0-4506-b00d-36c87396923a/1/0yJ36jBLKESnhomzqg2SGeM2Z3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:8f:d2:e3:a0:3c:6a:2d:a0:08:b9:59:22:ea:60:a4:bd:4f:
         52:58:11:73:ba:d3:4e:9a:08:c4:f6:b6:3d:0e:fd:0b:83:0e:
         c7:9d:c2:28:6b:59:90:f5:8e:dd:9c:99:78:07:78:36:3a:d0:
         6c:09:70:ce:b9:62:bd:e5:44:22:7e:39:79:a2:89:00:54:82:
         2d:ad:5e:7c:c1:08:3b:78:57:41:b6:b0:ab:81:47:bd:5a:24:
         db:04:d4:db:61:4c:99:8e:39:b9:0a:d9:3b:f5:8b:51:a1:c1:
         0c:8e:ed:3c:ce:6b:1a:0d:88:a3:b2:9b:72:0f:b1:c2:0e:27:
         59:7f:4f:4d:ff:be:84:02:e4:a4:53:99:3e:b8:e0:6c:1b:ab:
         08:ca:15:02:08:f9:38:e2:37:4e:a2:5b:bc:43:2c:72:3e:0c:
         16:e4:6d:fe:30:e8:2b:83:1c:4d:0d:9d:8c:7f:2a:46:aa:d9:
         a1:8f:59:33:1d:6f:fb:35:bb:8d:89:b9:66:5a:e0:77:be:6a:
         e8:d0:5d:38:e1:88:cf:fd:68:1a:a9:26:cb:ec:31:37:81:63:
         7a:6d:2f:da:49:91:80:cd:4e:7f:ca:e7:da:5e:e0:a7:02:42:
         86:34:64:d2:b7:5b:ea:4f:57:2e:60:1b:d5:5e:95:2c:53:33:
         13:60:e5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:24:52 2026 by rpki-client