Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
File:                     95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft (raw, json)
Hash identifier:          JwoiaI88HjchXQBevGyi6EiSej0z5My5ecLgVQXTJEo=
Subject key identifier:   7F:EE:31:8E:3A:FF:88:6F:98:11:B9:57:A2:F7:70:92:3D:9A:02:60
Authority key identifier: F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26
Certificate issuer:       /CN=f79647cacd20f9447d050538331b1fe7e04c1a26
Certificate serial:       01A131EB7B066EB7C454640C2B594AB59517
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
Manifest number:          0265
Signing time:             Mon 12 Oct 2026 21:01:18 +0000
Manifest this update:     Mon 12 Oct 2026 21:01:18 +0000
Manifest next update:     Tue 13 Oct 2026 21:01:18 +0000
Files and hashes:         1: 95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl (hash: 8GfNzBB6Q5w3i2ShD5n1qGDB4CwtU9RqMRthvNMh7D0=)
                          2: HuJBN6AfhqhXIRZ8ILNlTWiiraA.roa (hash: gmQ8jHjVVJegJN8LEqze9kvBK45PavMcmXxJ1nGKBrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:eb:7b:06:6e:b7:c4:54:64:0c:2b:59:4a:b5:95:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f79647cacd20f9447d050538331b1fe7e04c1a26
        Validity
            Not Before: Oct 12 21:01:18 2026 GMT
            Not After : Oct 13 21:01:18 2026 GMT
        Subject: CN=7fee318e3aff886f9811b957a2f770923d9a0260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:9f:42:7e:e7:e4:19:09:b4:02:a6:31:82:37:
                    de:dc:64:a2:d5:ce:ba:33:aa:9f:5a:8f:8c:d7:f2:
                    1b:f8:07:8d:e7:47:3a:ae:f2:b6:b2:36:eb:12:d1:
                    08:9a:23:2c:ad:ad:77:c1:33:f0:46:dc:18:f3:e5:
                    58:d8:0d:67:86:7b:dc:eb:d6:c1:08:93:a9:68:12:
                    d4:2e:7a:6d:23:f5:ff:3a:97:63:50:94:f7:72:8e:
                    58:28:9c:ea:2e:91:6f:ea:f7:50:7f:7c:13:78:1f:
                    f8:94:42:9b:f2:33:d0:5d:fa:6e:88:e0:66:44:22:
                    d0:b0:e6:9e:95:9d:17:df:e7:08:91:e7:22:ef:f9:
                    45:81:07:1b:71:39:3a:6a:52:52:5d:33:0f:60:4e:
                    37:3d:66:dc:27:42:aa:2b:88:eb:9a:32:b3:06:cf:
                    ca:d0:ca:94:52:9a:64:88:27:da:af:41:00:b5:9f:
                    7d:96:e9:1f:05:6f:9d:48:9d:6d:90:f4:ff:b7:ca:
                    ea:34:62:85:15:39:2b:40:23:20:26:53:1e:3b:cf:
                    cd:af:f6:2e:68:90:49:56:bd:cc:8e:da:7b:ad:ed:
                    9a:95:34:d2:f5:48:dc:f9:5d:b7:6b:5f:d7:08:2b:
                    c3:b2:22:d0:29:30:b7:f7:5d:95:a5:8e:d1:26:86:
                    44:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:EE:31:8E:3A:FF:88:6F:98:11:B9:57:A2:F7:70:92:3D:9A:02:60
            X509v3 Authority Key Identifier:
                keyid:F7:96:47:CA:CD:20:F9:44:7D:05:05:38:33:1B:1F:E7:E0:4C:1A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/95ZHys0g-UR9BQU4Mxsf5-BMGiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b34747-659b-4670-876c-22c8862bec1d/1/95ZHys0g-UR9BQU4Mxsf5-BMGiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:77:91:fe:1a:e3:53:66:e4:14:51:0a:df:e9:86:31:cd:6a:
         95:8e:a4:a3:2f:00:41:73:be:f4:3a:d7:57:1c:a5:f5:48:a3:
         92:7b:0c:1b:1d:e0:3d:b5:ab:8b:92:57:70:50:7c:c7:6e:55:
         84:b8:52:36:99:36:b1:5e:a8:80:26:4b:74:a0:26:9f:08:af:
         98:dc:6b:03:69:f0:ff:a2:35:d0:10:65:c7:21:a5:49:09:06:
         88:fe:16:01:57:1a:90:47:7b:db:29:b3:b3:ff:03:94:81:9d:
         e1:3e:d6:c3:17:b2:b8:ea:11:40:8f:16:9c:27:45:fc:2b:78:
         76:4d:b8:17:fb:fc:45:8d:64:4d:84:d8:a8:bf:ef:d6:20:49:
         2d:c1:04:20:3c:30:30:6e:ab:f0:6a:2a:4c:c1:ea:33:f5:fd:
         5c:99:e5:0b:9c:58:92:80:8c:a0:86:ad:ff:f7:a7:a0:c2:d0:
         07:d2:b5:c0:2b:fc:80:ce:d7:61:fa:a3:4f:f4:2a:6c:15:e0:
         86:a7:51:ae:66:21:99:0c:2a:b8:e9:39:94:a9:88:fa:72:03:
         7e:85:95:50:f4:ba:0c:c6:80:1e:82:12:08:43:e2:50:2c:fb:
         28:97:af:44:9d:1c:ce:30:a5:b0:4a:6e:30:ae:75:bd:51:15:
         83:7f:ba:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:43:24 2026 by rpki-client