Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File:                     1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier:          pXHLWvEB+MsUQCqmflqCFpObuAMWjtq9J5+ceMiv5Ig=
Subject key identifier:   6C:CA:98:7B:2B:C6:4D:A4:C8:9A:CB:A1:9B:22:37:FA:FD:31:3E:85
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer:       /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial:       01A0C2FADF0E28145EDCCCBFD61FE306A56A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number:          1A62
Signing time:             Mon 21 Sep 2026 08:00:16 +0000
Manifest this update:     Mon 21 Sep 2026 08:00:16 +0000
Manifest next update:     Tue 22 Sep 2026 08:00:16 +0000
Files and hashes:         1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: MJsDm3nGQzx0px4JCkSo+6r8wL1KAK077dtkIKZUJNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 08:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:fa:df:0e:28:14:5e:dc:cc:bf:d6:1f:e3:06:a5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
        Validity
            Not Before: Sep 21 08:00:16 2026 GMT
            Not After : Sep 22 08:00:16 2026 GMT
        Subject: CN=6cca987b2bc64da4c89acba19b2237fafd313e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a4:d9:a8:3b:c2:41:0d:3a:fb:25:26:75:42:
                    f6:c6:45:e0:1f:c9:eb:76:37:c2:04:eb:68:c7:5b:
                    fa:ab:e2:18:a6:05:2b:ed:f2:dc:d2:61:cd:20:0f:
                    5c:37:7b:b8:90:21:be:0b:51:b2:68:e5:6c:7f:cd:
                    99:09:8a:b0:90:9d:f4:83:c2:9f:c5:f2:de:fb:71:
                    e5:8f:2f:8d:49:d2:2c:3f:f4:0d:ec:77:91:4a:80:
                    04:6d:91:15:e5:9f:9b:cf:12:d3:a0:74:d0:dd:1f:
                    e7:3d:2f:87:12:86:b5:33:a1:9b:e4:37:1a:9c:f3:
                    47:23:ef:a3:30:7c:30:4a:fa:3f:76:09:f6:e2:6a:
                    d5:3f:33:dc:6f:50:e5:33:7d:17:59:e7:a2:3e:e3:
                    3c:9b:3b:22:af:11:ae:23:5a:bb:8a:d6:bd:94:97:
                    d5:ea:22:1e:4a:62:99:a9:f0:30:72:99:47:50:a3:
                    f5:11:bc:18:49:8c:49:51:6c:2f:f7:41:05:fb:60:
                    e8:2d:59:51:53:16:99:6d:e0:81:36:e1:e8:00:66:
                    98:45:78:87:d2:62:28:99:8e:1e:d2:af:48:64:8e:
                    0b:40:0e:cb:cc:ea:20:af:08:e0:bd:41:a8:01:27:
                    4c:a9:1f:35:da:fb:c2:95:c0:c0:ce:15:fc:90:7b:
                    a4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:CA:98:7B:2B:C6:4D:A4:C8:9A:CB:A1:9B:22:37:FA:FD:31:3E:85
            X509v3 Authority Key Identifier:
                keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:93:65:3f:11:a1:3c:9b:da:49:41:75:8c:0e:3e:8c:a2:d0:
         17:2b:f1:fa:33:67:32:c0:26:80:11:b4:d6:a2:60:b0:d4:b1:
         79:74:a2:4e:da:d6:7b:27:a1:72:e1:10:56:b7:9d:ad:71:77:
         a4:14:2f:60:95:78:24:e1:d8:0c:48:15:35:98:cb:01:6d:e2:
         81:e3:b4:dd:43:b0:61:72:8c:c5:81:c7:8a:29:99:8b:8c:2a:
         f0:5a:88:84:b7:45:9e:9b:78:46:7d:17:dd:6b:cb:46:a9:de:
         1e:60:cf:13:d4:0a:c6:24:e8:52:1e:93:e8:89:a0:26:53:71:
         ae:a6:29:ac:8e:7a:a1:d0:34:5d:bc:af:81:5f:38:6b:c6:9a:
         cf:64:cc:cc:e8:99:82:70:6f:a1:d9:f1:ec:20:11:ff:4b:cc:
         bb:a0:3c:56:54:22:f8:d6:f1:e4:70:b3:ba:3b:44:3f:7d:7c:
         2e:b2:63:60:e3:24:41:2c:14:79:bf:9e:4d:23:f1:16:f7:83:
         a2:7d:a6:b7:4e:6e:1d:b6:6b:ec:ce:b9:c2:86:55:4f:f8:9e:
         4e:1b:19:ac:80:80:7b:c5:24:48:8e:09:15:a1:74:41:99:a3:
         85:9b:2f:2b:5d:a7:8c:e8:24:87:2c:37:06:f3:b3:de:98:32:
         ba:e9:8a:ff
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDC+t8OKBRe3My/1h/jBqVqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMzM1NjZjOGM1YjgzYjJmM2UxNjk4Yjk3MTEyNTk0ZTgy
MTA4MTgwHhcNMjYwOTIxMDgwMDE2WhcNMjYwOTIyMDgwMDE2WjAzMTEwLwYDVQQD
Eyg2Y2NhOTg3YjJiYzY0ZGE0Yzg5YWNiYTE5YjIyMzdmYWZkMzEzZTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtaTZqDvCQQ06+yUmdUL2xkXgH8nr
djfCBOtox1v6q+IYpgUr7fLc0mHNIA9cN3u4kCG+C1GyaOVsf82ZCYqwkJ30g8Kf
xfLe+3Hljy+NSdIsP/QN7HeRSoAEbZEV5Z+bzxLToHTQ3R/nPS+HEoa1M6Gb5Dca
nPNHI++jMHwwSvo/dgn24mrVPzPcb1DlM30XWeeiPuM8mzsirxGuI1q7ita9lJfV
6iIeSmKZqfAwcplHUKP1EbwYSYxJUWwv90EF+2DoLVlRUxaZbeCBNuHoAGaYRXiH
0mIomY4e0q9IZI4LQA7LzOogrwjgvUGoASdMqR812vvClcDAzhX8kHukHwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGzKmHsrxk2kyJrLoZsiN/r9MT6FMB8GA1UdIwQY
MBaAFPozVmyMW4Oy8+Fpi5cRJZToIQgYMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qTldiSXhiZzdMejRXbUxseEVsbE9naENCZy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvZTMxMzQ3LWQ3OWItNDE0NC04NzQ5
LWMzMzM3OTRhN2I5Ny8xLzEtak5XYkl4Ymc3THo0V21MbHhFbGxPZ2hDQmcubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzFjL2UzMTM0Ny1kNzliLTQxNDQtODc0OS1jMzMzNzk0YTdi
OTcvMS8xLWpOV2JJeGJnN0x6NFdtTGx4RWxsT2doQ0JnLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw5Nl
PxGhPJvaSUF1jA4+jKLQFyvx+jNnMsAmgBG01qJgsNSxeXSiTtrWeyehcuEQVred
rXF3pBQvYJV4JOHYDEgVNZjLAW3igeO03UOwYXKMxYHHiimZi4wq8FqIhLdFnpt4
Rn0X3WvLRqneHmDPE9QKxiToUh6T6ImgJlNxrqYprI56odA0XbyvgV84a8aaz2TM
zOiZgnBvodnx7CAR/0vMu6A8VlQi+Nbx5HCzujtEP318LrJjYOMkQSwUeb+eTSPx
FveDon2mt05uHbZr7M65woZVT/ieThsZrICAe8UkSI4JFaF0QZmjhZsvK12njOgk
hyw3BvOz3pgyuumK/w==
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:23:33 2026 by rpki-client