Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
File:                     A8rxExkhh6RIXy4twOzIt2ZCSU8.mft (raw, json)
Hash identifier:          WOB3g3e6eK0Qk3apu9Igyh8JV9cEvagHv24bmxvlnPE=
Subject key identifier:   0C:66:8B:DB:40:39:23:26:25:D5:B3:9C:D6:1F:99:5F:DE:84:73:81
Authority key identifier: 03:CA:F1:13:19:21:87:A4:48:5F:2E:2D:C0:EC:C8:B7:66:42:49:4F
Certificate issuer:       /CN=03caf113192187a4485f2e2dc0ecc8b76642494f
Certificate serial:       01A12E7C6D03A7F2434AAC641D79BE35577A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
Manifest number:          0116
Signing time:             Mon 12 Oct 2026 05:01:08 +0000
Manifest this update:     Mon 12 Oct 2026 05:01:08 +0000
Manifest next update:     Tue 13 Oct 2026 05:01:08 +0000
Files and hashes:         1: A8rxExkhh6RIXy4twOzIt2ZCSU8.crl (hash: MHOJwey6HBs9/5SsEAsxPTxljYxo7Y21nwosq8KBnCA=)
                          2: BG9Hu9jLmCjA4BBi3hGmd-3DS2w.asa (hash: uSyPZI0IqhvZuKQPYBOk/ziXElw5bf8paV7OKILbWQo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 05:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2e:7c:6d:03:a7:f2:43:4a:ac:64:1d:79:be:35:57:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03caf113192187a4485f2e2dc0ecc8b76642494f
        Validity
            Not Before: Oct 12 05:01:08 2026 GMT
            Not After : Oct 13 05:01:08 2026 GMT
        Subject: CN=0c668bdb4039232625d5b39cd61f995fde847381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:6d:93:21:73:c6:c7:22:69:46:8c:5e:be:cf:
                    ad:ab:20:47:c0:6f:b5:17:e2:27:02:79:ca:bd:70:
                    46:24:ab:16:de:c6:8a:65:0f:8a:b8:c7:5f:05:20:
                    5e:6a:90:8d:3d:f3:ff:f7:05:3d:71:c1:13:72:30:
                    7c:d3:3f:b0:4f:fe:22:1d:46:c2:05:fe:4d:6d:94:
                    51:28:c8:bd:3c:f1:bc:5c:fa:48:c2:61:64:30:48:
                    6d:5d:65:55:62:93:25:30:dc:bd:98:31:b9:2a:8e:
                    a9:65:81:82:c6:e6:e0:50:c8:36:05:a1:d5:e1:92:
                    0d:ca:f2:3d:65:98:e2:d0:45:ba:b5:63:c0:5e:6f:
                    13:08:81:22:e6:54:d5:bd:c5:a8:28:f2:89:7f:2f:
                    f4:0c:81:df:a4:17:1f:7e:86:d5:e4:c3:f7:b2:4b:
                    a5:9d:32:a4:51:a2:5f:bd:9d:1d:c4:66:6e:2c:a7:
                    f1:95:63:39:50:85:9c:74:ad:f4:4a:03:d8:a0:b9:
                    dc:22:67:47:d8:1c:a2:5d:21:b3:59:eb:78:20:f4:
                    39:4b:70:f2:f9:39:04:f1:ef:d7:11:59:b5:b2:89:
                    35:94:4a:46:45:56:0b:16:c3:de:90:aa:f8:2f:85:
                    31:7a:c0:37:1e:04:18:0b:a5:f2:e0:b0:c0:78:f7:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:66:8B:DB:40:39:23:26:25:D5:B3:9C:D6:1F:99:5F:DE:84:73:81
            X509v3 Authority Key Identifier:
                keyid:03:CA:F1:13:19:21:87:A4:48:5F:2E:2D:C0:EC:C8:B7:66:42:49:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8rxExkhh6RIXy4twOzIt2ZCSU8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/57092c-9de8-46e1-aa43-91cd8c936924/1/A8rxExkhh6RIXy4twOzIt2ZCSU8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e9:c8:81:4c:cc:ec:21:85:03:f2:b7:71:bc:fb:78:c5:a9:
         b9:9d:42:8c:5d:e8:0f:d5:7d:7e:66:12:7d:e4:07:d5:c5:2c:
         68:89:6f:ac:b9:49:1a:85:61:cc:3d:b1:12:83:52:3d:a4:10:
         b6:76:ca:a3:65:80:5f:6a:57:30:43:81:4b:98:80:93:e9:ce:
         78:86:3d:8b:dd:bf:9c:39:2e:fe:cf:4f:60:bc:bb:51:58:f8:
         8e:7f:26:92:ca:6b:dd:90:24:bd:c7:bf:7c:5b:0e:29:66:54:
         2c:0a:3d:08:05:d6:c4:4f:46:64:a8:4c:a4:43:04:8a:49:5d:
         83:c3:2e:33:c0:c4:44:7a:34:97:d1:fb:8b:ba:94:2d:da:1e:
         42:58:95:fb:58:f9:69:3e:3d:7e:d0:fe:8a:57:a9:7b:6c:12:
         1e:63:4b:26:7c:ef:86:49:f2:6a:f9:44:1a:9a:67:1a:ac:92:
         03:66:2e:51:47:f0:5e:cf:56:34:8e:60:75:7a:12:ca:df:ae:
         b7:50:ab:5d:df:7d:ef:a9:7c:ee:4e:02:3e:84:ef:c6:98:ba:
         e2:57:c9:2d:fa:a1:32:f8:ae:55:4b:24:1a:97:6f:83:8e:49:
         b0:04:46:59:ca:1b:d7:0b:bf:83:79:b1:97:25:e7:f6:0a:9e:
         bc:74:c1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 14:37:04 2026 by rpki-client