Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
File:                     cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft (raw, json)
Hash identifier:          IdGeXibmcz5wBewZbbQ6oxbEsqlJ9l8wJbFW4Wp3h9o=
Subject key identifier:   9D:66:3B:38:C5:70:38:2B:43:BB:91:55:20:72:BC:54:C1:C6:F0:40
Authority key identifier: 72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48
Certificate issuer:       /CN=72e13915fa1bc579f5856f58ecb24786379a5d48
Certificate serial:       01A135C8386941CF9B652FEF05A8C0F2E629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
Manifest number:          0559
Signing time:             Tue 13 Oct 2026 15:01:16 +0000
Manifest this update:     Tue 13 Oct 2026 15:01:16 +0000
Manifest next update:     Wed 14 Oct 2026 15:01:16 +0000
Files and hashes:         1: 1tgtjL3B3YdYAU03MUR31VYv6CI.roa (hash: 16zjErqZd+Fe3OsAh8pnaOrjHjMKr/IPGlIT7NNIBL0=)
                          2: cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl (hash: pH6My+PppPOeB2671aOMnhaTGEBiICj360aO1mxLbjo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 14:02:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:c8:38:69:41:cf:9b:65:2f:ef:05:a8:c0:f2:e6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e13915fa1bc579f5856f58ecb24786379a5d48
        Validity
            Not Before: Oct 13 15:01:16 2026 GMT
            Not After : Oct 14 15:01:16 2026 GMT
        Subject: CN=9d663b38c570382b43bb91552072bc54c1c6f040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3e:55:a3:d1:96:56:4c:09:1b:fb:42:68:fd:
                    c7:71:c8:a0:1f:46:fe:c4:a0:71:89:d8:eb:73:86:
                    d5:6a:a2:20:1c:56:c2:c9:90:43:9c:c0:1f:60:b1:
                    99:bb:73:e8:34:f3:c1:ac:ab:e8:f4:50:17:5c:4a:
                    26:92:a6:5b:65:4c:03:9a:d3:9b:9f:5a:04:b3:bd:
                    06:4d:70:8d:74:c7:97:f7:76:8a:6d:20:b2:3c:1b:
                    7f:b6:1d:a6:c9:96:55:61:1e:5d:81:d3:b2:1f:15:
                    e3:8a:23:67:5c:e4:00:b4:07:e9:ea:57:6e:91:a5:
                    f4:c8:eb:4c:10:59:c6:1f:5e:62:35:bb:2d:a6:c5:
                    b1:ce:cb:a8:a8:39:e3:16:24:10:67:3e:22:10:b0:
                    2c:1a:81:a6:74:2d:e6:d0:0e:ca:49:68:3d:2d:da:
                    4a:e7:f4:7f:3b:32:96:2d:53:94:52:38:e7:6a:b1:
                    d0:99:63:7e:59:11:f5:eb:a1:78:1e:64:d9:aa:d9:
                    47:9c:9f:ab:3a:16:09:19:b1:b9:47:6f:e9:56:31:
                    ee:63:a7:4b:fc:cd:de:bb:d6:6c:be:be:09:20:83:
                    5d:ab:5c:10:73:5d:b2:a5:55:f3:4d:72:1b:6e:36:
                    bc:dd:7c:67:88:3d:3b:b7:ff:31:f7:91:78:9d:17:
                    3a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:66:3B:38:C5:70:38:2B:43:BB:91:55:20:72:BC:54:C1:C6:F0:40
            X509v3 Authority Key Identifier:
                keyid:72:E1:39:15:FA:1B:C5:79:F5:85:6F:58:EC:B2:47:86:37:9A:5D:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuE5FfobxXn1hW9Y7LJHhjeaXUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/92bbbf-9f93-4741-8682-f1e8bd74180c/1/cuE5FfobxXn1hW9Y7LJHhjeaXUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:86:10:f2:4c:af:3f:22:0c:50:12:9b:83:1a:e8:3c:f7:a7:
         3c:49:c5:5e:45:a6:71:8c:1d:cf:75:61:bc:92:7b:2b:9c:50:
         56:9c:20:42:0c:2b:d2:4a:fa:c6:04:0a:a4:5e:4d:49:a3:c8:
         8d:4d:cf:06:25:1b:cb:31:24:79:1c:7e:ac:b3:18:ba:28:c8:
         11:f7:75:84:8c:b0:44:52:66:08:1c:07:54:15:e8:2f:3d:2f:
         e9:b8:2c:85:e9:fc:fb:32:ac:88:5b:73:51:e1:35:4a:b0:cb:
         1c:c2:71:4e:12:61:62:ed:7b:95:13:fb:90:d0:43:2f:a3:75:
         c0:6d:1e:ac:94:74:f4:28:74:6d:cd:e4:57:0b:16:a8:d1:ac:
         ad:02:cf:95:64:a1:c6:47:0d:d9:fe:31:32:20:59:c3:67:66:
         48:67:76:98:08:cb:b8:25:db:10:20:b1:37:21:5d:eb:e9:78:
         23:0d:ae:d8:d5:08:53:6c:7f:43:df:c4:66:2b:44:8e:04:8d:
         83:b7:ba:5a:22:46:40:0f:9d:b2:64:81:8f:32:db:09:11:68:
         4a:d5:23:91:ff:af:3b:40:83:c0:00:e3:c9:ca:c0:9e:30:de:
         d1:cb:c7:cf:92:60:a8:0f:fd:d1:d1:5a:53:34:5c:48:3c:bd:
         b0:39:ed:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:01:00 2026 by rpki-client