Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
File:                     8WBdCa0sbEN7bC-Gg___viF0_mw.mft (raw, json)
Hash identifier:          V0p4mPjb7V2S3DUo00Or4ZKklpdua4RvBG0og9iO2/0=
Subject key identifier:   5B:56:1B:59:3D:E8:A9:52:83:D6:F5:C6:BD:EE:F8:03:B0:3F:15:46
Authority key identifier: F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C
Certificate issuer:       /CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
Certificate serial:       01A1254230A70D1BF99A9A66221AF91F5E6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
Manifest number:          1402
Signing time:             Sat 10 Oct 2026 10:00:57 +0000
Manifest this update:     Sat 10 Oct 2026 10:00:57 +0000
Manifest next update:     Sun 11 Oct 2026 10:00:57 +0000
Files and hashes:         1: 8WBdCa0sbEN7bC-Gg___viF0_mw.crl (hash: yFN73KKOAAKr8gwjelWrrw1O/q54OWSQgdtxO140szU=)
                          2: D8FKo30pQrTU9mJYfYQg9avocxA.roa (hash: eTwcKoj9qVJBPhmvJcocW9ihZIrUpzbDq33DB90KBWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 10:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:42:30:a7:0d:1b:f9:9a:9a:66:22:1a:f9:1f:5e:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1605d09ad2c6c437b6c2f8683ffffbe2174fe6c
        Validity
            Not Before: Oct 10 10:00:57 2026 GMT
            Not After : Oct 11 10:00:57 2026 GMT
        Subject: CN=5b561b593de8a95283d6f5c6bdeef803b03f1546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:20:e2:24:04:49:15:da:a9:8e:24:56:0b:5b:
                    46:9e:1c:36:a6:95:61:b0:da:36:b2:87:b6:cd:d6:
                    2a:a4:a0:b0:09:44:76:91:1d:8a:0d:4f:ad:9b:d6:
                    a9:b0:91:ab:81:46:7b:07:52:ee:7a:e7:e0:8d:c0:
                    5e:e1:b1:c5:88:a2:6a:01:88:47:ed:ae:20:34:e6:
                    4b:a5:2d:68:59:78:3d:69:77:a5:1c:bd:94:7f:23:
                    a2:26:a1:13:64:c4:bf:c3:1c:d3:b9:f7:2b:fd:1d:
                    68:62:27:dd:ed:f3:b4:85:7e:f6:4b:33:6b:d4:67:
                    06:fa:a2:7b:28:f8:78:4c:42:6d:dd:56:3f:af:72:
                    05:48:08:da:35:50:9c:13:ff:e4:da:ba:35:96:48:
                    94:50:20:1b:d1:dd:1c:39:23:18:d7:1f:50:78:30:
                    98:58:3a:4b:18:e5:02:d5:2e:ad:4e:80:a7:08:ea:
                    20:ab:a6:6c:8b:28:33:37:55:c8:a5:29:ee:28:7c:
                    b6:0c:99:d6:9c:d8:9e:1b:7d:36:a8:04:b7:2c:b5:
                    a8:fd:c1:f8:49:b9:44:b9:cc:85:ab:cc:cf:b5:69:
                    d8:2f:48:5f:ab:4f:7c:0a:a1:0d:fd:51:73:4f:b9:
                    99:9e:76:fb:2e:1c:f0:48:75:e1:c3:aa:64:0c:29:
                    2c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:56:1B:59:3D:E8:A9:52:83:D6:F5:C6:BD:EE:F8:03:B0:3F:15:46
            X509v3 Authority Key Identifier:
                keyid:F1:60:5D:09:AD:2C:6C:43:7B:6C:2F:86:83:FF:FF:BE:21:74:FE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WBdCa0sbEN7bC-Gg___viF0_mw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/36b040-f57b-4ae2-ab42-228733245cd1/1/8WBdCa0sbEN7bC-Gg___viF0_mw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b5:ae:87:4e:3c:fe:0f:51:09:5a:c7:36:73:f5:83:8a:6b:
         9f:c0:36:66:16:2c:eb:80:2a:e4:ef:d9:1f:f3:6b:7b:bf:57:
         a4:d1:5f:48:50:4d:f3:94:86:65:56:b0:5f:40:ca:c0:2d:8f:
         46:bb:33:2b:5f:7c:21:69:ed:fb:f2:41:d6:fe:56:2c:5f:fa:
         78:89:fe:aa:c9:db:21:ee:2e:fd:4b:d5:e8:ff:05:c3:0c:06:
         bd:03:87:0f:b6:6f:d3:b1:b3:40:30:76:5a:62:be:98:62:b3:
         02:c0:aa:25:42:cb:c1:0b:d4:c9:60:2a:a8:3e:af:98:98:b3:
         fb:29:ac:fe:e8:f8:f0:a5:6c:c3:0d:b6:0f:56:bd:fa:dd:15:
         ca:a7:f5:da:89:2d:88:c6:e8:a0:41:a4:2f:82:58:e4:df:2f:
         70:53:9f:6b:cf:b3:73:d1:22:0e:f8:e6:73:16:35:af:cc:62:
         a8:49:be:a1:9d:cb:15:cf:e9:41:00:17:b6:62:bf:d8:1c:b8:
         16:e5:e0:de:fd:80:69:4d:51:8c:6d:90:4f:84:ff:16:05:aa:
         ee:7a:d0:c3:2b:e3:f1:51:e9:b4:a8:b1:9a:f9:76:bc:9c:9a:
         ed:26:70:59:9e:f6:fd:48:e0:da:8e:64:68:99:b9:2a:cc:25:
         0c:79:b2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 16:52:45 2026 by rpki-client