Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
File:                     IwWuBiEvPC-PVzoLVJJEHljyHE4.mft (raw, json)
Hash identifier:          XqrvWHTLf0cHhrRU30oCjVEll3vJo2+6BJP8hCU2Uag=
Subject key identifier:   73:CE:7D:E0:BD:A3:1A:9C:3D:6E:9C:D6:17:DF:5D:A7:D1:80:D6:8B
Authority key identifier: 23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E
Certificate issuer:       /CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
Certificate serial:       01A13E946697204B770E7E4DFC4094D2519F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
Manifest number:          1AA4
Signing time:             Thu 15 Oct 2026 08:01:15 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:15 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:15 +0000
Files and hashes:         1: IwWuBiEvPC-PVzoLVJJEHljyHE4.crl (hash: gDYZg/5ANwt6g969IrsapVHDlm0txPRHIFFJoXwctxA=)
                          2: Oe7wTUeOifNOrZPE6s11kQOKX-4.roa (hash: gsLsf04/fdLsccMrWMJ4qLZbQv2ayrUfRSE5fjnchYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:66:97:20:4b:77:0e:7e:4d:fc:40:94:d2:51:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2305ae06212f3c2f8f573a0b5492441e58f21c4e
        Validity
            Not Before: Oct 15 08:01:15 2026 GMT
            Not After : Oct 16 08:01:15 2026 GMT
        Subject: CN=73ce7de0bda31a9c3d6e9cd617df5da7d180d68b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3b:68:31:0d:2b:53:1d:e7:16:81:4b:55:dd:
                    7b:de:25:99:10:20:a0:0a:ee:5f:bf:f9:00:21:74:
                    36:16:dd:d6:67:07:6f:80:5f:31:d1:f2:11:f7:8a:
                    99:a2:df:04:5c:e2:3b:f1:a6:66:f5:57:f5:d8:e9:
                    0b:fd:7d:b2:1d:48:e0:1f:6e:e6:4b:1c:bc:60:84:
                    b6:81:84:d5:be:41:06:30:53:f4:41:25:60:4d:4c:
                    3d:8d:4e:78:e0:6d:98:6c:17:fd:59:6b:ce:e4:87:
                    92:2a:83:ae:29:c9:81:d4:cb:63:6d:f9:1a:40:88:
                    40:bc:4e:6c:7f:8f:3b:2b:81:fe:b1:45:57:45:ba:
                    35:0c:77:62:b1:31:66:ef:3d:f1:4a:f6:75:06:7f:
                    65:08:96:af:76:bf:f8:16:eb:eb:f6:c1:c1:2a:9f:
                    dd:e1:89:1c:a4:d7:3e:52:40:e7:f9:16:25:ee:ee:
                    c6:f9:05:ae:ed:23:25:2d:f8:de:10:10:0e:f7:18:
                    8f:ab:c6:66:f6:a4:60:a8:7c:4c:dd:2d:b2:fe:bf:
                    2b:c1:70:50:e8:06:86:44:bf:4e:39:05:b5:1d:5f:
                    5a:a3:db:df:c2:9d:76:27:e6:4c:5a:86:bb:4e:7f:
                    b6:dc:b1:09:34:96:f7:00:44:21:af:48:d9:19:5e:
                    32:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:CE:7D:E0:BD:A3:1A:9C:3D:6E:9C:D6:17:DF:5D:A7:D1:80:D6:8B
            X509v3 Authority Key Identifier:
                keyid:23:05:AE:06:21:2F:3C:2F:8F:57:3A:0B:54:92:44:1E:58:F2:1C:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwWuBiEvPC-PVzoLVJJEHljyHE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6cade-d425-4d89-a0c1-cf6b23d2617c/1/IwWuBiEvPC-PVzoLVJJEHljyHE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         df:db:1a:8a:e2:06:1e:7a:77:77:77:c7:a9:c3:e5:6f:81:60:
         f0:6e:4c:bb:0c:a4:b6:12:3a:6e:97:de:67:02:d1:83:1d:c0:
         b3:26:c9:11:e1:e2:0d:89:c5:cb:1a:24:87:91:07:b6:23:69:
         05:e0:0b:65:3f:fe:7f:e5:07:a9:16:a8:31:88:62:6f:c1:c6:
         b6:52:1b:df:27:4e:d2:ec:aa:ef:81:b8:44:98:09:71:67:a8:
         86:9a:db:b2:34:61:78:3f:37:df:83:0a:bd:15:7a:99:69:fd:
         9c:dc:90:a3:83:da:5a:03:1a:3f:53:c8:df:ab:65:85:16:3c:
         91:96:12:d3:0e:a5:4a:40:91:a0:a4:a6:bc:b0:09:98:66:2f:
         97:8f:2d:7b:28:f7:7b:eb:e1:84:7e:54:c2:ec:6c:10:a2:b5:
         17:0d:b7:a4:82:a8:b1:fd:ca:a8:f6:6d:18:d5:a6:2f:bb:bf:
         64:82:aa:08:3f:1d:0f:c2:bc:57:7e:ae:c8:a4:ce:72:45:a0:
         97:87:f0:cd:f2:db:7a:8c:68:9c:15:fb:e2:fc:ab:a9:c9:bf:
         74:64:52:5e:4b:8b:5f:76:00:5f:45:a2:71:b3:c4:5f:49:f5:
         c1:35:0e:ca:19:95:80:af:db:9b:db:63:73:42:04:82:e0:9f:
         af:b8:76:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+lGaXIEt3Dn5N/ECU0lGfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMDVhZTA2MjEyZjNjMmY4ZjU3M2EwYjU0OTI0NDFlNThm
MjFjNGUwHhcNMjYxMDE1MDgwMTE1WhcNMjYxMDE2MDgwMTE1WjAzMTEwLwYDVQQD
Eyg3M2NlN2RlMGJkYTMxYTljM2Q2ZTljZDYxN2RmNWRhN2QxODBkNjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DtoMQ0rUx3nFoFLVd173iWZECCg
Cu5fv/kAIXQ2Ft3WZwdvgF8x0fIR94qZot8EXOI78aZm9Vf12OkL/X2yHUjgH27m
Sxy8YIS2gYTVvkEGMFP0QSVgTUw9jU544G2YbBf9WWvO5IeSKoOuKcmB1Mtjbfka
QIhAvE5sf487K4H+sUVXRbo1DHdisTFm7z3xSvZ1Bn9lCJavdr/4Fuvr9sHBKp/d
4YkcpNc+UkDn+RYl7u7G+QWu7SMlLfjeEBAO9xiPq8Zm9qRgqHxM3S2y/r8rwXBQ
6AaGRL9OOQW1HV9ao9vfwp12J+ZMWoa7Tn+23LEJNJb3AEQhr0jZGV4yQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPOfeC9oxqcPW6c1hffXafRgNaLMB8GA1UdIwQY
MBaAFCMFrgYhLzwvj1c6C1SSRB5Y8hxOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXdXdUJpRXZQQy1QVnpvTFZKSkVIbGp5SEU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9hNmNhZGUtZDQyNS00ZDg5LWEwYzEt
Y2Y2YjIzZDI2MTdjLzEvSXdXdUJpRXZQQy1QVnpvTFZKSkVIbGp5SEU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9hNmNhZGUtZDQyNS00ZDg5LWEwYzEtY2Y2YjIzZDI2MTdj
LzEvSXdXdUJpRXZQQy1QVnpvTFZKSkVIbGp5SEU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA39saiuIG
Hnp3d3fHqcPlb4Fg8G5MuwykthI6bpfeZwLRgx3AsybJEeHiDYnFyxokh5EHtiNp
BeALZT/+f+UHqRaoMYhib8HGtlIb3ydO0uyq74G4RJgJcWeohprbsjRheD8334MK
vRV6mWn9nNyQo4PaWgMaP1PI36tlhRY8kZYS0w6lSkCRoKSmvLAJmGYvl48teyj3
e+vhhH5UwuxsEKK1Fw23pIKosf3KqPZtGNWmL7u/ZIKqCD8dD8K8V36uyKTOckWg
l4fwzfLbeoxonBX74vyrqcm/dGRSXkuLX3YAX0WicbPEX0n1wTUOyhmVgK/bm9tj
c0IEguCfr7h25g==
-----END CERTIFICATE-----
Generated at Thu Oct 15 13:46:31 2026 by rpki-client