Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
File:                     1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft (raw, json)
Hash identifier:          hlF8BIeoXwCyX2IetiwywLbnUN2wryt1chfXKkSTi2U=
Subject key identifier:   EC:BC:C9:14:55:51:9C:4B:07:95:9D:25:BC:56:B8:36:9F:A2:4B:57
Authority key identifier: F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F
Certificate issuer:       /CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
Certificate serial:       01A1242FAA2A6DBB05FB5D89594CFAFFCCD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
Manifest number:          05A5
Signing time:             Sat 10 Oct 2026 05:01:05 +0000
Manifest this update:     Sat 10 Oct 2026 05:01:05 +0000
Manifest next update:     Sun 11 Oct 2026 05:01:05 +0000
Files and hashes:         1: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl (hash: Nj8R8xFdG37JXVi5F5o2OYGg/x6FZpfC/6s6SzR1YiU=)
                          2: Om8hYJFWIm8pdYISoMz7ReVcWUI.roa (hash: c7dJNXWNQCnqpXhattRk9ZyKNskwQkIBWvzcQA9kNBw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 05:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:2f:aa:2a:6d:bb:05:fb:5d:89:59:4c:fa:ff:cc:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
        Validity
            Not Before: Oct 10 05:01:05 2026 GMT
            Not After : Oct 11 05:01:05 2026 GMT
        Subject: CN=ecbcc91455519c4b07959d25bc56b8369fa24b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:56:e2:10:99:c0:a9:c3:c3:7a:76:76:51:6f:
                    42:99:0a:ab:e5:2d:5c:9e:b9:28:c0:4a:0f:51:f6:
                    7f:11:cb:1e:4c:9f:32:9a:fc:6d:0c:9e:e8:67:35:
                    53:be:44:82:09:10:78:8b:67:53:32:7a:c1:0a:e2:
                    87:5b:22:5d:7d:74:de:61:78:b1:84:b7:d2:81:13:
                    76:6b:e1:8d:7a:72:43:17:23:99:61:93:54:c5:9c:
                    8c:88:9f:f7:53:ab:7c:82:d3:ee:01:3e:97:37:f5:
                    35:f7:06:39:79:c6:34:27:8e:31:fa:4c:69:7a:40:
                    84:7c:94:5a:bc:66:19:27:31:89:b5:d3:b3:b8:7b:
                    32:a3:1b:bc:e1:96:51:ea:b5:c8:11:43:d2:6a:89:
                    17:bf:c0:8c:e0:0e:87:53:20:bd:de:0e:1b:1b:24:
                    8f:c5:8a:d3:ed:40:94:64:41:2a:b0:18:48:d9:e9:
                    a7:e9:26:30:d0:9e:6a:75:30:cc:74:45:96:03:64:
                    15:42:aa:de:ed:28:52:5a:ae:e6:48:6f:31:fe:f2:
                    89:27:2e:4b:0b:a2:79:44:f2:bd:2d:99:19:26:54:
                    a6:1d:04:da:ae:de:7f:53:ef:cf:b5:09:02:f5:e2:
                    00:8f:c9:51:49:5e:fc:c3:c4:91:56:23:b4:ee:35:
                    b7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:BC:C9:14:55:51:9C:4B:07:95:9D:25:BC:56:B8:36:9F:A2:4B:57
            X509v3 Authority Key Identifier:
                keyid:F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1e:9b:0b:fc:06:e9:7a:a5:bc:ec:c1:9e:d3:3b:1a:75:72:
         d4:94:f9:eb:8a:90:b4:67:8a:f9:19:e1:fe:06:81:f6:05:31:
         70:72:b1:ab:37:16:60:5b:b9:19:57:e2:fc:03:ef:40:56:52:
         5e:4e:1e:88:5a:2a:28:57:79:d8:5a:96:96:8e:34:ba:11:81:
         d4:ac:29:c8:32:ba:54:77:d2:10:14:f5:2f:4f:0b:4e:e4:8f:
         03:0f:2e:29:f1:43:08:83:9b:b5:60:20:5a:02:a6:64:d5:6d:
         2c:0e:da:59:1f:98:a8:97:53:1a:29:6d:74:eb:ac:a4:35:e3:
         f6:2a:17:ab:8f:62:8b:f7:ea:61:68:7b:70:8b:72:3e:1e:cf:
         4b:7e:a9:cb:4c:5b:62:57:a2:fc:dc:d6:84:1b:44:af:ec:b1:
         62:7d:a2:ae:63:c4:f7:9b:19:7f:fe:93:aa:cf:db:c1:d5:95:
         43:86:a5:9d:fa:06:00:70:fb:77:57:4b:4f:4d:cc:57:2b:82:
         e9:41:bb:11:e7:ce:8b:2d:58:ae:c9:0c:38:78:49:40:30:3a:
         56:ed:ea:65:9b:54:54:c3:4d:de:31:0d:69:a5:55:28:1f:45:
         9b:ee:40:f2:b1:40:b4:26:db:84:75:c5:12:82:7c:5b:a7:2f:
         3a:19:14:cf
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaEkL6oqbbsF+12JWUz6/8zZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjBjN2FiM2M0YmNjM2ZjYTgzZTQ5MzMxNjc3YjQ0YmI3
YTk0NmYwHhcNMjYxMDEwMDUwMTA1WhcNMjYxMDExMDUwMTA1WjAzMTEwLwYDVQQD
EyhlY2JjYzkxNDU1NTE5YzRiMDc5NTlkMjViYzU2YjgzNjlmYTI0YjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1biEJnAqcPDenZ2UW9CmQqr5S1c
nrkowEoPUfZ/EcseTJ8ymvxtDJ7oZzVTvkSCCRB4i2dTMnrBCuKHWyJdfXTeYXix
hLfSgRN2a+GNenJDFyOZYZNUxZyMiJ/3U6t8gtPuAT6XN/U19wY5ecY0J44x+kxp
ekCEfJRavGYZJzGJtdOzuHsyoxu84ZZR6rXIEUPSaokXv8CM4A6HUyC93g4bGySP
xYrT7UCUZEEqsBhI2emn6SYw0J5qdTDMdEWWA2QVQqre7ShSWq7mSG8x/vKJJy5L
C6J5RPK9LZkZJlSmHQTart5/U+/PtQkC9eIAj8lRSV78w8SRViO07jW3lwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFOy8yRRVUZxLB5WdJbxWuDafoktXMB8GA1UdIwQY
MBaAFPlgx6s8S8w/yoPkkzFne0S7epRvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XREhxenhMekRfS2ctU1RNV2Q3Ukx0NmxHOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZWU0N2RlLTMzNWEtNDk5OS1iNjEz
LTI2OTBiNTVmNTBmZC8xLzEtV0RIcXp4THpEX0tnLVNUTVdkN1JMdDZsRzgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzYyL2VlNDdkZS0zMzVhLTQ5OTktYjYxMy0yNjkwYjU1ZjUw
ZmQvMS8xLVdESHF6eEx6RF9LZy1TVE1XZDdSTHQ2bEc4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZh6b
C/wG6XqlvOzBntM7GnVy1JT564qQtGeK+Rnh/gaB9gUxcHKxqzcWYFu5GVfi/APv
QFZSXk4eiFoqKFd52FqWlo40uhGB1KwpyDK6VHfSEBT1L08LTuSPAw8uKfFDCIOb
tWAgWgKmZNVtLA7aWR+YqJdTGiltdOuspDXj9ioXq49ii/fqYWh7cItyPh7PS36p
y0xbYlei/NzWhBtEr+yxYn2irmPE95sZf/6Tqs/bwdWVQ4alnfoGAHD7d1dLT03M
VyuC6UG7EefOiy1YrskMOHhJQDA6Vu3qZZtUVMNN3jENaaVVKB9Fm+5A8rFAtCbb
hHXFEoJ8W6cvOhkUzw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 14:45:55 2026 by rpki-client