Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
File:                     ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft (raw, json)
Hash identifier:          3dos146wvvwr+kbNN3rvSyvbj+JuUvEQr/D+6mrNVyM=
Subject key identifier:   CE:F6:F1:53:62:24:C7:F0:C3:E8:F3:4C:A1:C3:64:F3:03:24:8B:D5
Authority key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
Certificate issuer:       /CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Certificate serial:       01A130D8DAD698A762B8FDDDC240F1ED6E53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
Manifest number:          09ED
Signing time:             Mon 12 Oct 2026 16:01:20 +0000
Manifest this update:     Mon 12 Oct 2026 16:01:20 +0000
Manifest next update:     Tue 13 Oct 2026 16:01:20 +0000
Files and hashes:         1: ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl (hash: psNCesTRTi3eJb7HCqk8ibhZ+P03+9VWl8RKwZJahO0=)
                          2: pld-KrrSH2O3PZyUQtP_Kuvp-2s.roa (hash: JZBBxha8VilEBln8tqWZaEhgr9V20qoqkX6/Lbo7/s8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:30:d8:da:d6:98:a7:62:b8:fd:dd:c2:40:f1:ed:6e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
        Validity
            Not Before: Oct 12 16:01:20 2026 GMT
            Not After : Oct 13 16:01:20 2026 GMT
        Subject: CN=cef6f1536224c7f0c3e8f34ca1c364f303248bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:71:9e:25:c7:d3:b1:ca:ce:16:2f:61:f6:0d:
                    82:37:14:6c:59:53:22:99:e6:78:f3:b1:69:82:c0:
                    17:91:4b:51:1c:50:23:1f:ab:24:a0:e5:ee:f3:f4:
                    97:19:a0:26:a0:ac:d4:8a:4d:10:7b:59:cd:fa:80:
                    96:38:06:f3:ec:e5:fa:c6:96:ac:13:3d:66:45:7e:
                    e0:8b:b0:47:51:31:e7:9d:77:a1:f5:2b:79:2f:aa:
                    5b:ed:67:c1:cf:ca:f2:d0:37:57:a2:59:7f:c6:93:
                    eb:d4:c7:05:52:45:39:05:57:93:b9:f3:8f:d1:1c:
                    27:1d:5f:ee:3a:f8:0d:11:f7:38:36:4d:0e:53:22:
                    82:13:f1:ac:ac:91:93:80:14:1b:99:a9:c9:fe:16:
                    ac:6b:44:96:28:75:04:77:21:85:51:23:fa:98:81:
                    a4:fe:f4:86:cb:ea:ab:36:1d:e6:6c:be:21:e4:83:
                    6e:e3:3b:70:24:47:1e:1d:02:e4:b1:4a:98:16:a7:
                    e9:b7:ae:a2:96:2b:a3:55:c7:86:74:6b:a0:18:3d:
                    85:ff:c6:f2:dd:e3:c5:65:77:d3:f6:f5:7f:a6:35:
                    b3:21:88:e9:47:1c:d4:c9:95:88:21:b1:41:77:25:
                    46:b7:25:49:4d:c6:fd:fb:5b:f4:91:71:b4:19:ec:
                    fe:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F6:F1:53:62:24:C7:F0:C3:E8:F3:4C:A1:C3:64:F3:03:24:8B:D5
            X509v3 Authority Key Identifier:
                keyid:8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ca:15:d9:2e:64:34:7d:ce:92:36:a0:03:a9:e4:a4:38:c4:
         90:9b:3b:1c:a4:56:9c:0d:ef:48:25:1b:06:d0:d7:30:a5:05:
         20:b9:c6:54:4f:11:24:64:d8:fe:93:fd:18:4a:09:9d:02:74:
         11:46:df:9e:7b:36:82:ec:68:30:71:fd:72:5e:0b:37:57:bd:
         ff:89:30:8f:4c:02:c1:77:47:88:6f:e2:80:e0:0b:cd:28:91:
         81:5e:59:74:db:35:82:57:0b:ed:05:d0:73:1e:f0:b5:85:62:
         2e:4a:a9:7f:33:37:2e:20:0c:d7:46:c8:91:31:da:27:7f:48:
         ef:2c:92:a5:fa:2f:3f:b2:b9:59:5b:10:5c:c3:65:60:a2:62:
         10:d0:8a:31:9c:48:56:5a:b7:60:c6:50:d4:4a:6c:88:14:9f:
         68:10:f0:79:38:fa:d2:d6:4e:4b:2a:5b:76:03:9a:a9:3f:20:
         41:75:a0:5c:3e:a5:79:30:08:e4:41:53:f3:c0:0e:09:fc:88:
         3b:49:f0:71:65:14:58:51:50:06:11:08:f1:f1:b3:65:5d:f8:
         97:5c:4d:6c:43:18:d4:c5:4c:f9:b9:b6:09:c1:54:62:94:0d:
         78:2f:43:24:34:a1:6f:aa:10:fe:cf:01:cc:c8:3d:a0:83:56:
         6a:b0:88:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:02:25 2026 by rpki-client