Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
File:                     169EtH8IvQvo_AX5sMFaWrxiA6o.mft (raw, json)
Hash identifier:          zMQBwHW2WV7vDtbiPnXkvRgIwV/WM7gKGJOg0xXKr1s=
Subject key identifier:   C3:A8:FA:96:93:58:DF:E8:33:D4:79:79:BF:25:90:A0:89:E0:8B:19
Authority key identifier: D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
Certificate issuer:       /CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Certificate serial:       01A0C6A16D765651B7638A7FE4824E796B98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
Manifest number:          100F
Signing time:             Tue 22 Sep 2026 01:01:03 +0000
Manifest this update:     Tue 22 Sep 2026 01:01:03 +0000
Manifest next update:     Wed 23 Sep 2026 01:01:03 +0000
Files and hashes:         1: 169EtH8IvQvo_AX5sMFaWrxiA6o.crl (hash: FT4XQ1uOD44I3sYimGyl+gQTqw7wMs/Z/0AiSVxvvx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:a1:6d:76:56:51:b7:63:8a:7f:e4:82:4e:79:6b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
        Validity
            Not Before: Sep 22 01:01:03 2026 GMT
            Not After : Sep 23 01:01:03 2026 GMT
        Subject: CN=c3a8fa969358dfe833d47979bf2590a089e08b19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:28:27:57:14:61:07:c9:39:6b:4f:f8:d4:84:
                    85:cf:ec:eb:8f:70:b2:62:1f:18:c8:3c:94:5a:03:
                    66:7f:cd:7f:d4:24:39:da:01:70:6b:31:b6:aa:c0:
                    e5:43:40:60:20:18:05:8c:af:12:97:9b:27:df:67:
                    66:77:89:9d:a9:bc:1f:69:18:c0:5c:a8:97:e9:d9:
                    9e:7c:8f:ae:c8:dd:fe:25:01:79:f9:cf:3f:9b:98:
                    82:20:ef:e4:39:a5:a6:68:5a:52:e2:6b:41:e6:fc:
                    32:48:4f:56:eb:84:e9:4a:a6:84:89:04:cd:e5:d9:
                    2a:e4:54:c7:09:0a:74:6f:ab:10:9a:99:51:04:fe:
                    f1:76:15:19:6a:ed:6e:86:5d:68:cd:cd:be:06:3e:
                    17:71:fe:e3:c9:d0:e7:8d:4f:16:28:08:e6:60:9c:
                    17:91:bf:82:a5:59:2e:20:63:9d:88:3a:50:4b:a0:
                    31:78:ae:1b:e4:bf:da:b9:4f:6f:7b:e2:cc:8e:bc:
                    ba:79:be:16:9a:b1:16:18:24:7d:49:c5:a6:de:96:
                    fb:fc:b5:75:58:14:b6:27:9f:ae:27:fd:4d:0e:b4:
                    07:f2:19:8b:0f:a2:eb:52:ac:54:5d:af:79:e3:37:
                    e1:7e:45:4b:4e:52:a8:71:e3:3e:a7:f0:35:e6:41:
                    93:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:A8:FA:96:93:58:DF:E8:33:D4:79:79:BF:25:90:A0:89:E0:8B:19
            X509v3 Authority Key Identifier:
                keyid:D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:56:6c:3f:75:cf:ae:96:e0:a7:e0:bc:84:eb:6d:e6:10:bd:
         a9:f2:fb:f1:3d:fa:88:96:c9:85:f6:d8:46:0f:93:42:cf:97:
         a3:cd:ce:98:93:91:40:23:cd:c4:34:b3:f1:4d:2c:19:f1:73:
         89:09:0b:d1:19:a7:52:73:6a:b8:4f:4d:9a:53:14:13:6d:a2:
         7b:89:d1:2e:e4:a9:12:fe:7f:58:93:f8:58:42:65:52:78:89:
         26:05:ea:f9:40:d3:a2:1a:d2:13:6a:d1:f0:a6:b7:18:d0:9f:
         f6:6c:f8:b9:20:1c:7e:48:ed:a3:0e:7e:e5:4d:d6:3c:f4:42:
         1b:c5:45:8c:ec:72:35:eb:db:85:56:c5:41:9b:04:ee:a8:7f:
         d5:e3:9b:46:bd:9d:a3:67:4b:1d:c1:50:b1:10:11:1f:70:2e:
         b5:a3:d2:3a:f5:e2:eb:29:f5:14:18:ad:70:76:db:e1:4a:ed:
         21:68:76:cf:2d:04:c2:54:8f:18:13:6f:8d:eb:ca:b1:96:13:
         d4:0c:a9:5e:95:72:cb:a0:ee:93:49:bd:75:17:4d:fb:9c:83:
         17:78:ee:8c:c6:b3:7a:1f:55:e5:d2:d9:e8:09:19:01:77:92:
         8d:ef:8e:fd:c2:ff:0f:9c:64:35:33:83:72:78:5c:c0:ce:3f:
         38:51:00:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:47:21 2026 by rpki-client