Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File:                     8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier:          E4j58v+JBLcPg91SDosRcCdnDKFJnrldLY3lForBBi4=
Subject key identifier:   7E:E3:ED:02:85:60:B3:DF:5B:D6:6E:1D:4D:2C:0C:D4:D1:D8:DC:2F
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer:       /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial:       01A1341109D0C2276CEF4E59C1A82C8269B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number:          17D5
Signing time:             Tue 13 Oct 2026 07:01:34 +0000
Manifest this update:     Tue 13 Oct 2026 07:01:34 +0000
Manifest next update:     Wed 14 Oct 2026 07:01:34 +0000
Files and hashes:         1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: 9IOeAZPA7xnixwwY8sROSH1F1qTBspZnAYm5AfY+GLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 07:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:11:09:d0:c2:27:6c:ef:4e:59:c1:a8:2c:82:69:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
        Validity
            Not Before: Oct 13 07:01:34 2026 GMT
            Not After : Oct 14 07:01:34 2026 GMT
        Subject: CN=7ee3ed028560b3df5bd66e1d4d2c0cd4d1d8dc2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fa:e8:9d:b6:2d:96:b4:3c:e3:4a:0f:9f:b9:
                    c9:c5:d0:80:52:0e:30:a8:98:fd:20:3c:df:ee:8a:
                    35:76:07:12:10:8f:94:2e:21:a3:b3:6e:a9:f5:dd:
                    26:65:92:3c:02:c7:17:f5:ab:c1:ff:48:fb:7e:85:
                    84:34:59:4d:b9:4b:97:5f:92:79:a6:7b:07:3b:53:
                    44:3b:dc:db:d5:4f:cc:22:75:69:f5:30:39:d0:ec:
                    9b:86:57:ba:cf:be:06:17:b5:b7:bb:63:02:83:94:
                    61:75:f4:95:1a:19:7d:65:00:bb:2c:5a:3c:17:ca:
                    2f:7f:28:68:00:4b:27:cd:29:a3:e5:40:0f:d2:e5:
                    83:b5:b5:54:b5:60:c4:a8:47:a6:fa:3a:1e:3d:c3:
                    7e:a6:e6:cd:42:25:b9:e1:f2:59:bf:e8:7d:ab:9e:
                    84:85:08:7f:af:73:29:21:ac:63:15:e8:e5:eb:61:
                    b5:e3:6f:11:a0:22:62:15:61:6e:49:ea:01:4c:2f:
                    4d:5c:7a:6b:f2:a9:a0:74:02:39:4d:9d:03:3f:06:
                    33:46:1f:e0:ba:a3:b7:2c:eb:72:3d:2d:11:29:53:
                    9c:bf:27:30:a9:92:be:f3:5d:a7:71:f7:47:e0:a9:
                    7c:33:82:48:d8:14:b4:58:d5:10:fe:d3:9f:80:e4:
                    3a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E3:ED:02:85:60:B3:DF:5B:D6:6E:1D:4D:2C:0C:D4:D1:D8:DC:2F
            X509v3 Authority Key Identifier:
                keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:3a:34:e5:c7:56:04:4b:ce:f8:6f:9d:67:ab:0f:15:27:7e:
         be:ba:12:68:62:d7:7d:a7:5e:24:52:2c:c0:2c:16:26:b8:c8:
         1a:44:39:5b:21:db:ee:8e:69:93:d3:ef:65:23:1a:04:94:c3:
         00:6d:4c:59:08:81:5f:28:24:56:e9:fe:aa:c2:ad:7c:fa:8f:
         97:28:67:55:28:6d:2d:7f:a6:0a:69:80:db:44:bc:75:b9:0b:
         5a:10:45:e2:86:07:78:04:3f:35:79:eb:1f:a6:c9:c6:9d:32:
         72:b9:8c:01:9c:17:48:80:2c:78:eb:91:16:97:eb:af:3f:3b:
         f8:a4:c5:0c:7d:39:e1:41:84:1f:66:88:eb:db:01:d2:2f:b0:
         45:fc:d7:1f:c3:96:3b:b4:46:cd:ab:7d:15:e3:43:93:0c:2d:
         a1:0b:c0:01:90:eb:40:af:1a:42:9b:f8:ae:aa:48:78:1e:cd:
         9c:fc:d3:4b:60:ed:8b:6f:42:c9:59:4c:be:fe:d7:84:dd:62:
         39:97:f4:76:fd:b1:7d:55:d4:f9:ed:93:02:60:bd:f8:ec:ea:
         a6:81:6e:ac:d8:81:89:69:10:d4:21:1c:10:d5:84:56:21:eb:
         6c:2f:5b:82:84:5e:a3:ad:61:ab:6b:6f:a2:f2:d0:a1:a1:01:
         25:44:00:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE0EQnQwids705Zwagsgmm2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzMDliMjE5ODk3YmM1YzJhZGI0ODcwMmFjMmRhMzBkZTU2
M2QzY2IwHhcNMjYxMDEzMDcwMTM0WhcNMjYxMDE0MDcwMTM0WjAzMTEwLwYDVQQD
Eyg3ZWUzZWQwMjg1NjBiM2RmNWJkNjZlMWQ0ZDJjMGNkNGQxZDhkYzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPronbYtlrQ840oPn7nJxdCAUg4w
qJj9IDzf7oo1dgcSEI+ULiGjs26p9d0mZZI8AscX9avB/0j7foWENFlNuUuXX5J5
pnsHO1NEO9zb1U/MInVp9TA50Oybhle6z74GF7W3u2MCg5RhdfSVGhl9ZQC7LFo8
F8ovfyhoAEsnzSmj5UAP0uWDtbVUtWDEqEem+joePcN+pubNQiW54fJZv+h9q56E
hQh/r3MpIaxjFejl62G1428RoCJiFWFuSeoBTC9NXHpr8qmgdAI5TZ0DPwYzRh/g
uqO3LOtyPS0RKVOcvycwqZK+812ncfdH4Kl8M4JI2BS0WNUQ/tOfgOQ6MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7j7QKFYLPfW9ZuHU0sDNTR2NwvMB8GA1UdIwQY
MBaAFPMJshmJe8XCrbSHAqwtow3lY9PLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xNGMzZGItZDAwMy00ODM2LTg4ZGMt
ODBhMzliYTQ4ODc1LzEvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC8xNGMzZGItZDAwMy00ODM2LTg4ZGMtODBhMzliYTQ4ODc1
LzEvOHdteUdZbDd4Y0t0dEljQ3JDMmpEZVZqMDhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqTo05cdW
BEvO+G+dZ6sPFSd+vroSaGLXfadeJFIswCwWJrjIGkQ5WyHb7o5pk9PvZSMaBJTD
AG1MWQiBXygkVun+qsKtfPqPlyhnVShtLX+mCmmA20S8dbkLWhBF4oYHeAQ/NXnr
H6bJxp0ycrmMAZwXSIAseOuRFpfrrz87+KTFDH054UGEH2aI69sB0i+wRfzXH8OW
O7RGzat9FeNDkwwtoQvAAZDrQK8aQpv4rqpIeB7NnPzTS2Dti29CyVlMvv7XhN1i
OZf0dv2xfVXU+e2TAmC9+OzqpoFurNiBiWkQ1CEcENWEViHrbC9bgoReo61hq2tv
ovLQoaEBJUQASA==
-----END CERTIFICATE-----
Generated at Tue Oct 13 09:20:15 2026 by rpki-client