Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
File:                     aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft (raw, json)
Hash identifier:          JRDeV32GY7okevpiWhwLLLU0f1Rm6s96FlZpeUpjTos=
Subject key identifier:   1B:75:85:52:52:FD:BD:A6:93:15:A3:7D:CB:CF:B8:4B:C3:0F:FE:6C
Authority key identifier: 69:75:30:A6:F7:4F:A8:1E:D3:D6:CC:6C:34:E2:95:B4:28:09:E4:FF
Certificate issuer:       /CN=697530a6f74fa81ed3d6cc6c34e295b42809e4ff
Certificate serial:       01A10D7054EF190F38E3578DB2F0B599FF70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
Manifest number:          01FB
Signing time:             Mon 05 Oct 2026 19:00:27 +0000
Manifest this update:     Mon 05 Oct 2026 19:00:27 +0000
Manifest next update:     Tue 06 Oct 2026 19:00:27 +0000
Files and hashes:         1: J3pOwzGDG_7DYEuvKCzD1jZg8wE.asa (hash: Y9Sl5qo068W4cXHevYj8cD+ueqCNlhqEdVBmw2lUsvI=)
                          2: aXUwpvdPqB7T1sxsNOKVtCgJ5P8.crl (hash: f1Y2r/h6VsgOX167uWSwjWUeJRnbMOqWAZSyqssY5ZY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 14:13:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0d:70:54:ef:19:0f:38:e3:57:8d:b2:f0:b5:99:ff:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=697530a6f74fa81ed3d6cc6c34e295b42809e4ff
        Validity
            Not Before: Oct  5 19:00:27 2026 GMT
            Not After : Oct  6 19:00:27 2026 GMT
        Subject: CN=1b75855252fdbda69315a37dcbcfb84bc30ffe6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:4d:55:83:c5:d7:96:af:17:06:cb:97:26:
                    76:23:a4:68:ce:a9:69:63:a0:04:23:58:4a:c1:e8:
                    21:2a:78:ee:0d:27:a6:70:cd:28:9d:40:1a:65:0f:
                    43:ed:ae:48:3e:54:85:3b:36:44:b2:93:c6:dd:45:
                    46:33:c9:64:e9:3f:92:44:6d:4c:ce:19:3a:9c:30:
                    10:05:e5:b5:d9:5d:4d:c6:9d:66:69:d5:08:a9:8d:
                    aa:10:34:8f:2f:fc:85:da:df:4b:2d:fd:3a:38:e7:
                    9f:91:53:e2:85:e9:8d:0f:14:89:9f:12:00:74:89:
                    d9:cc:93:18:8c:87:cf:36:05:20:df:a1:3d:9e:b3:
                    7b:db:ad:51:98:64:73:d9:5f:8c:28:db:ff:22:cb:
                    a3:78:3d:fe:5d:d0:3a:b0:a1:a5:8a:44:8e:c5:85:
                    ea:9d:d5:ab:9e:37:8c:ff:85:4f:f2:79:3f:d0:fd:
                    4f:19:69:5e:bf:47:7a:92:b3:44:fe:9a:6a:b2:06:
                    f7:3f:9e:5e:8e:f0:3a:4e:a6:7b:7b:da:16:0e:31:
                    f7:6e:8c:d3:ce:ac:9f:27:95:ff:49:d5:56:58:e8:
                    1f:62:ea:bd:d0:c8:c1:37:51:ba:51:c9:8e:95:29:
                    0e:9c:52:ee:c8:06:56:13:21:25:67:e2:c1:79:6a:
                    28:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:75:85:52:52:FD:BD:A6:93:15:A3:7D:CB:CF:B8:4B:C3:0F:FE:6C
            X509v3 Authority Key Identifier:
                keyid:69:75:30:A6:F7:4F:A8:1E:D3:D6:CC:6C:34:E2:95:B4:28:09:E4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/13de70-434d-459b-959e-450318d375ff/1/aXUwpvdPqB7T1sxsNOKVtCgJ5P8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:1b:d3:47:5d:83:99:66:e4:b8:1a:ff:50:cb:79:65:3f:3a:
         b4:3b:b8:0a:3c:48:0a:e5:86:5d:70:d3:c2:de:c1:78:2a:0c:
         91:c8:92:b3:48:a0:50:8b:48:cd:1a:1d:98:c9:2b:29:36:1c:
         34:b7:84:da:be:87:75:9e:fa:22:29:b8:4c:a2:7d:a3:ef:90:
         49:a2:68:07:4c:f3:e5:1e:34:c6:59:31:6a:b6:3f:d5:ac:4c:
         fe:97:cb:6e:78:6b:34:c5:9b:1e:70:62:01:7b:d1:36:96:10:
         b8:5a:f5:2a:87:f8:ad:ce:36:bd:0a:f6:57:18:08:73:13:90:
         71:68:fd:bc:7e:38:f0:76:32:03:35:8c:f4:4e:f9:5f:32:17:
         6a:dc:e3:36:e4:b6:fe:7f:7c:18:85:45:94:08:e4:8a:1d:ad:
         f1:e9:93:2b:68:c4:c4:53:ba:39:77:2e:b7:7e:e2:19:cc:a4:
         f9:be:74:84:eb:ec:17:e2:ed:99:b6:df:ad:d5:7a:b8:b4:8f:
         ac:22:e6:b5:1f:93:b4:a7:d4:98:9b:97:cd:48:a2:ae:ec:c5:
         5b:74:bd:53:06:34:37:0a:ef:28:e3:16:3d:da:65:64:bf:89:
         3b:20:c0:89:d1:ad:06:b5:ee:95:6b:63:fc:2f:6f:e4:fa:47:
         7d:e4:d8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:10:34 2026 by rpki-client