Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
File:                     9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft (raw, json)
Hash identifier:          BdLoa9MOzczPDxpLzjS7ZZjVwrbwiOyP42hOlhuQs10=
Subject key identifier:   F9:DC:B9:62:50:F0:C8:EC:75:F5:B0:D1:1C:30:87:08:9B:74:79:F7
Authority key identifier: F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12
Certificate issuer:       /CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
Certificate serial:       01A1DFF0B67536CEBE0A01A2B46FF4D8F608
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
Manifest number:          10C1
Signing time:             Sun 15 Nov 2026 16:00:56 +0000
Manifest this update:     Sun 15 Nov 2026 16:00:56 +0000
Manifest next update:     Mon 16 Nov 2026 16:00:56 +0000
Files and hashes:         1: 9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl (hash: 24IW+NdQZw/Zc0McAnD5AvtIAnoSvS6pnMlmQS9e/Ho=)
                          2: I3Cwe_JfIHDw-5FguYkJbkBPot8.roa (hash: NhXNbLKSK6Zii6NTvjleq3atjNt9Qq9hOl62FzoteKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:f0:b6:75:36:ce:be:0a:01:a2:b4:6f:f4:d8:f6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69527a06a035cbcaecf00daca2fd88399cf9d12
        Validity
            Not Before: Nov 15 16:00:56 2026 GMT
            Not After : Nov 16 16:00:56 2026 GMT
        Subject: CN=f9dcb96250f0c8ec75f5b0d11c3087089b7479f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9b:ff:cf:02:f0:fa:33:bb:97:a6:15:12:7f:
                    89:47:39:6a:fd:b6:95:aa:74:5c:8e:45:d0:f9:6c:
                    d9:57:4a:bb:f4:0a:ae:89:d0:5e:08:95:90:28:84:
                    98:96:5e:c2:0b:d1:bd:71:86:cb:8e:43:04:b4:19:
                    ce:c8:82:26:a8:96:0b:e5:d4:57:23:96:3c:74:b0:
                    87:13:b8:17:bd:9f:43:e8:7c:18:2b:50:c8:da:5f:
                    4c:0c:5e:1b:33:82:1b:17:ba:ba:d7:50:b5:f5:57:
                    e8:5c:2c:1a:80:7e:22:97:59:a7:e5:b2:95:e9:31:
                    3e:b0:fd:ca:a2:86:1b:e3:18:ca:98:c1:cd:15:dd:
                    17:14:ff:ab:c2:1b:a0:91:46:a6:cc:39:cc:45:fa:
                    23:f3:0f:5b:a7:51:db:8d:af:e3:cd:2b:37:96:20:
                    1a:12:35:ac:60:af:a5:83:a4:57:af:bd:05:b1:9f:
                    32:59:7f:69:cd:a6:8f:6b:58:35:64:92:02:dd:cf:
                    63:3b:8c:26:bf:7e:f9:13:b0:9f:5d:47:26:03:76:
                    04:24:36:64:25:60:3e:95:f5:71:d6:bd:21:bc:d8:
                    0c:58:7f:8c:cb:e7:c2:18:11:cd:e6:55:8f:e4:d9:
                    97:df:22:41:63:2a:4f:3f:10:fc:c5:9c:31:da:87:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:DC:B9:62:50:F0:C8:EC:75:F5:B0:D1:1C:30:87:08:9B:74:79:F7
            X509v3 Authority Key Identifier:
                keyid:F6:95:27:A0:6A:03:5C:BC:AE:CF:00:DA:CA:2F:D8:83:99:CF:9D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pUnoGoDXLyuzwDayi_Yg5nPnRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d45531-d6c8-4dce-b606-85c855227b23/1/9pUnoGoDXLyuzwDayi_Yg5nPnRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:3d:35:1b:9f:43:9e:a8:ae:be:00:1a:e6:f9:e0:45:ad:57:
         17:ba:98:a9:91:bb:8c:89:52:ec:ed:e4:e3:d5:17:2c:54:55:
         1f:a4:24:4e:e6:c2:ed:ce:cf:f4:b0:c9:14:f1:63:93:8a:5c:
         90:42:fa:29:d7:5f:29:a2:72:37:bb:55:1d:52:da:f6:70:f6:
         ae:f0:da:35:3a:3f:b0:e3:e7:c9:3b:6c:3b:af:cc:de:ce:e7:
         9e:f9:a6:21:c1:bb:15:8c:0a:d8:cf:87:06:c5:56:bc:c7:90:
         7d:91:46:5d:6e:c6:e0:a7:12:36:2b:e3:39:a7:61:7b:b4:8c:
         bb:25:19:f5:1d:4e:7d:42:3a:57:89:dc:be:54:6c:76:0b:df:
         41:34:21:20:b0:bb:6c:8e:d5:ed:f7:44:01:56:f8:88:e4:9a:
         36:61:7d:d2:be:70:5a:ab:11:1c:d1:4d:ae:a5:a8:11:ee:cc:
         c6:5b:be:15:22:5b:30:9b:a2:3d:f2:00:38:c3:93:29:b8:c6:
         e2:3a:ee:a1:8a:b3:54:08:22:21:8c:6b:ba:03:6d:30:fd:2d:
         4b:1f:41:1d:3a:75:8b:21:3f:a2:d5:ac:b4:2d:b1:6a:06:1e:
         a1:3b:f9:7d:71:cb:a3:fa:1c:42:3f:95:3d:3b:ad:4e:bf:bb:
         ef:b8:ba:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:22:06 2026 by rpki-client