Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
File:                     C6BoSDrLyWox4ovNpUu-r-NILRk.mft (raw, json)
Hash identifier:          lWxqzyl02lApBiRyh8u3O88iojIjwi87WWrSEkYG+No=
Subject key identifier:   26:D5:23:D8:BB:45:3D:FB:86:3B:E5:07:F8:08:AB:74:CA:04:60:D5
Authority key identifier: 0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19
Certificate issuer:       /CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
Certificate serial:       01A13BC9D8368A5E64B8D4D22AA5F41E5F2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
Manifest number:          1AA3
Signing time:             Wed 14 Oct 2026 19:00:46 +0000
Manifest this update:     Wed 14 Oct 2026 19:00:46 +0000
Manifest next update:     Thu 15 Oct 2026 19:00:46 +0000
Files and hashes:         1: C6BoSDrLyWox4ovNpUu-r-NILRk.crl (hash: 0ND/2GErapbNxN/eeVyxxQfwq/w9Bz1iKRs4gJTFXAk=)
                          2: g9UJbML95L_TyHitniLbb9E7L0g.roa (hash: xAbi3dR1ksPLZFCaHva+G7hmMyWiUrNdlBOJzZB47WI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:c9:d8:36:8a:5e:64:b8:d4:d2:2a:a5:f4:1e:5f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ba068483acbc96a31e28bcda54bbeafe3482d19
        Validity
            Not Before: Oct 14 19:00:46 2026 GMT
            Not After : Oct 15 19:00:46 2026 GMT
        Subject: CN=26d523d8bb453dfb863be507f808ab74ca0460d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f4:27:27:94:be:1f:da:d6:e3:b6:de:a4:3f:
                    13:59:f9:53:de:12:4d:80:f8:92:bb:20:ec:89:87:
                    fb:d3:19:9f:a7:df:91:fe:fa:5a:54:0c:0d:be:53:
                    e3:de:35:12:86:89:0b:3e:19:9f:e1:e7:ed:91:56:
                    7a:71:c4:01:52:91:fc:96:53:a4:c3:a5:af:4f:5f:
                    c5:45:19:5f:4c:21:1c:e5:fa:e1:6c:1a:a5:7a:86:
                    ca:72:73:71:0a:ca:31:ec:5a:7a:3b:76:d1:52:96:
                    31:8d:61:a9:28:d8:f9:01:ee:80:2f:89:ee:e9:30:
                    fe:d2:aa:c3:8d:45:3c:36:6a:f5:c7:cf:63:26:db:
                    9f:31:67:f8:d3:f2:f2:31:47:ad:18:a4:36:8e:15:
                    80:74:60:82:3a:ef:a1:20:70:54:e8:dc:6f:36:a1:
                    d3:c0:4b:6c:5d:2f:04:2f:ca:57:0f:5b:22:80:11:
                    7c:68:da:39:8b:d6:f7:2a:14:d5:c2:2a:5d:4d:ad:
                    8a:0c:79:4c:97:f8:05:4f:7e:23:b3:06:22:be:6f:
                    af:f6:00:d5:20:92:c9:27:85:06:08:73:49:af:bd:
                    1a:e6:e2:45:be:d3:3c:8c:b2:f9:e3:3f:44:f0:b5:
                    71:aa:65:7e:bb:31:3a:dc:b5:47:77:82:2a:b9:20:
                    65:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D5:23:D8:BB:45:3D:FB:86:3B:E5:07:F8:08:AB:74:CA:04:60:D5
            X509v3 Authority Key Identifier:
                keyid:0B:A0:68:48:3A:CB:C9:6A:31:E2:8B:CD:A5:4B:BE:AF:E3:48:2D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6BoSDrLyWox4ovNpUu-r-NILRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/c6570e-f22b-488b-a3fe-fdcb93b491e5/1/C6BoSDrLyWox4ovNpUu-r-NILRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:8c:07:9a:42:c1:0f:6e:2f:31:db:3b:83:e4:94:18:ec:02:
         c1:a2:0a:9a:38:a8:31:67:70:33:51:0d:97:9d:d0:88:9e:70:
         26:d4:ee:43:31:3a:e0:32:4b:21:14:33:0f:23:49:88:60:74:
         02:ec:a0:f0:c4:63:d3:15:de:ea:f2:7e:ea:19:6b:54:07:bb:
         28:9d:93:37:57:2e:32:fd:5f:6d:37:13:cc:88:96:40:df:e5:
         0e:ff:f5:b9:f9:d1:5d:5c:4b:b7:e9:8f:1a:7b:bb:f4:93:ee:
         ec:30:51:66:76:81:19:e3:a0:1b:3c:a4:03:2f:2f:ed:aa:6e:
         22:42:b3:8a:02:5e:0d:6e:06:d6:2d:3f:e3:84:66:5a:d3:1a:
         67:57:ad:c2:bc:39:fd:d1:ac:7b:8a:96:5f:10:8a:33:39:ab:
         d5:35:da:e1:2f:7b:56:b0:3e:20:55:ac:a3:98:53:74:60:21:
         4c:c6:3e:83:47:7a:3c:64:95:ee:9b:2d:a9:f5:d2:ec:af:2b:
         41:92:14:5c:ec:8f:de:81:e1:2c:b4:80:fe:e8:82:e2:35:bc:
         80:bc:8e:81:9b:18:36:eb:15:65:2d:88:55:08:bf:a8:51:dc:
         4e:e8:a6:a6:2f:21:bf:ab:a3:12:d9:91:5d:95:9f:ce:46:5e:
         9a:ac:5e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 05:29:57 2026 by rpki-client