Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
File:                     6oss0R-FmHiYVHRQySF4Efzeoos.mft (raw, json)
Hash identifier:          VIbNhahvMXf6cqzy84F+Dd3PUwebx8VOcP7ttCTlQfM=
Subject key identifier:   41:88:0B:03:DE:AA:06:38:ED:F9:EE:22:0E:5E:E7:E3:2A:3B:FD:EC
Authority key identifier: EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B
Certificate issuer:       /CN=ea8b2cd11f85987898547450c9217811fcdea28b
Certificate serial:       01A1A902F3AB559EF5B6E56E442ECEAE890E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
Manifest number:          1482
Signing time:             Thu 05 Nov 2026 00:01:45 +0000
Manifest this update:     Thu 05 Nov 2026 00:01:45 +0000
Manifest next update:     Fri 06 Nov 2026 00:01:45 +0000
Files and hashes:         1: 48DMS82RLLSM-TVCfV4Nt8Qw43I.asa (hash: aSVVqKy7RylMshK2NIbvdXzTmSH8waLTBV97YiEjuDY=)
                          2: 6oss0R-FmHiYVHRQySF4Efzeoos.crl (hash: PGOnE2ymCR/9sr98vP1oAQ6tzRtPP9dJ+jyp1BZrFiE=)
                          3: FCkS32niDqTieJEg273lZaADBO4.asa (hash: X7OKZkohiCA52OimXwo3Rcigub3BUOIbW9Q5dXYSznI=)
                          4: hy0L33f4XYPJIFw4uTmXJiUPFo8.roa (hash: XB4hQn9qah0YMaucNvWe5oAHXy3OWMVyQoyP7siUAZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Nov 2026 00:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a9:02:f3:ab:55:9e:f5:b6:e5:6e:44:2e:ce:ae:89:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea8b2cd11f85987898547450c9217811fcdea28b
        Validity
            Not Before: Nov  5 00:01:45 2026 GMT
            Not After : Nov  6 00:01:45 2026 GMT
        Subject: CN=41880b03deaa0638edf9ee220e5ee7e32a3bfdec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f6:85:0f:5b:28:17:04:9e:cc:42:26:4d:91:
                    7e:67:0a:64:81:42:e8:7b:a2:dc:32:71:6d:b3:d5:
                    b2:90:b8:f0:03:2e:b5:47:95:67:b5:f4:f0:91:0d:
                    36:78:69:b5:f2:af:92:63:6e:60:50:c3:7b:27:e6:
                    f3:1b:42:f6:97:e0:8e:64:69:c5:13:dc:e3:23:05:
                    ff:74:02:cb:0f:38:9d:84:52:ac:ee:56:2b:ed:d1:
                    0f:87:2b:a7:ad:d2:0a:4f:76:26:cf:23:4c:88:5b:
                    91:cd:28:83:5d:63:97:eb:27:fd:7b:fb:f3:5a:6f:
                    f3:be:bd:cc:26:d7:40:f0:62:d0:fd:de:59:e7:1c:
                    37:d7:d7:7a:8d:21:be:59:f1:46:16:e1:f4:f2:a3:
                    4e:bc:de:19:cb:29:0c:ab:68:66:27:60:9e:09:4f:
                    ca:f5:ff:e4:8e:95:6a:82:bd:c8:28:70:58:fd:0d:
                    e9:96:d0:08:1a:a5:d6:66:c7:39:25:0d:f0:9a:60:
                    dd:11:55:75:f0:a5:81:f1:cf:3c:85:d2:0b:1a:cd:
                    e9:17:0b:f2:9b:31:c3:78:1f:0c:3d:0e:ba:26:70:
                    db:5f:c5:ad:cd:dd:b9:17:e6:32:a2:2e:82:fc:91:
                    f2:fd:5d:c3:d6:22:50:4a:a8:7d:c4:9f:df:31:45:
                    ec:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:88:0B:03:DE:AA:06:38:ED:F9:EE:22:0E:5E:E7:E3:2A:3B:FD:EC
            X509v3 Authority Key Identifier:
                keyid:EA:8B:2C:D1:1F:85:98:78:98:54:74:50:C9:21:78:11:FC:DE:A2:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6oss0R-FmHiYVHRQySF4Efzeoos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/1ff7ea-bc13-4b54-898d-1d1cd215275d/1/6oss0R-FmHiYVHRQySF4Efzeoos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:c5:3b:bf:cf:87:06:2d:1c:9a:5d:4f:1e:7a:01:be:b8:bb:
         fa:7a:52:b7:53:06:a0:7b:0d:11:f9:8b:14:b4:72:0e:3a:75:
         68:64:98:d5:2b:8b:cb:16:19:2e:9a:74:ec:e6:56:ca:f0:35:
         7b:5b:f5:4f:df:1b:65:f1:5c:a8:d8:4a:3c:bb:35:48:81:c2:
         20:52:3e:c7:15:79:9d:97:83:8f:1e:4b:e0:ab:47:26:1f:44:
         41:1a:2b:7a:ca:a6:c6:c6:5f:6a:57:73:58:92:f7:1a:00:3f:
         14:73:a4:da:4e:31:b9:23:eb:b9:bf:18:b3:1b:9f:2b:78:59:
         4e:c8:52:5d:82:77:73:6c:cd:e6:45:76:7d:7a:c7:52:12:5e:
         fc:fc:4b:92:ca:60:6e:71:60:5b:df:24:f0:f2:4a:e7:72:6e:
         76:4a:bc:a7:85:c1:1b:8e:67:b7:aa:95:a5:f0:eb:be:6c:65:
         95:f6:b5:36:53:b9:d8:29:a8:95:16:a5:13:24:48:b0:3d:3b:
         65:99:35:a6:f7:09:4d:03:3f:92:e5:68:3d:09:65:72:11:de:
         17:01:c2:51:f3:35:43:f9:87:e6:86:f8:0e:59:88:ea:a5:f4:
         67:d2:4c:0a:2e:d0:ed:71:64:58:ed:01:40:70:d6:53:50:59:
         d9:4e:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 08:15:37 2026 by rpki-client