Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/L6amU3ABSNrWihlrQ2sLIAXM54k.mft
File:                     L6amU3ABSNrWihlrQ2sLIAXM54k.mft (raw, json)
Hash identifier:          Vz9YXVS3WgDCT9wPgbuoI20YCMGmc/gdruWt8wpkkIc=
Subject key identifier:   3E:6F:A2:06:65:14:59:79:90:D5:8F:8A:1F:8B:2D:C8:D0:49:B7:57
Authority key identifier: 2F:A6:A6:53:70:01:48:DA:D6:8A:19:6B:43:6B:0B:20:05:CC:E7:89
Certificate issuer:       /CN=2fa6a653700148dad68a196b436b0b2005cce789
Certificate serial:       01A1DFB9DE7BC0D5DC5A6DB5B45603FCF546
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L6amU3ABSNrWihlrQ2sLIAXM54k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/L6amU3ABSNrWihlrQ2sLIAXM54k.mft
Manifest number:          A5
Signing time:             Sun 15 Nov 2026 15:01:02 +0000
Manifest this update:     Sun 15 Nov 2026 15:01:02 +0000
Manifest next update:     Mon 16 Nov 2026 15:01:02 +0000
Files and hashes:         1: L6amU3ABSNrWihlrQ2sLIAXM54k.crl (hash: F6HYnbw5y+RCP50A/GELCYQ96nMJ6UsRaPSYbHQsb9s=)
                          2: UJZpG357k7EGbknZSHdOivaa5_0.asa (hash: JQnhb+8OI2Shir+TzUBTBrDHCyb9Kq2uxUwWX8hwOcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/L6amU3ABSNrWihlrQ2sLIAXM54k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/L6amU3ABSNrWihlrQ2sLIAXM54k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L6amU3ABSNrWihlrQ2sLIAXM54k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:b9:de:7b:c0:d5:dc:5a:6d:b5:b4:56:03:fc:f5:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fa6a653700148dad68a196b436b0b2005cce789
        Validity
            Not Before: Nov 15 15:01:02 2026 GMT
            Not After : Nov 16 15:01:02 2026 GMT
        Subject: CN=3e6fa2066514597990d58f8a1f8b2dc8d049b757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:20:a9:7d:1f:e2:71:7e:b9:ce:15:cc:45:
                    75:9a:3d:87:9b:04:c3:30:46:a0:4a:d2:71:e7:d1:
                    bf:2b:6b:b8:64:36:0b:75:11:a6:21:bb:0a:31:d0:
                    dd:b5:10:32:28:3a:b3:4f:79:3e:0a:31:7a:e5:59:
                    06:bc:0d:9b:f7:20:27:50:4a:b6:91:d1:da:0d:ce:
                    3f:18:e4:59:3a:34:ca:65:f9:cf:af:30:14:d3:f3:
                    62:bb:07:5c:3a:e2:0e:f7:59:f7:c9:bd:90:94:47:
                    24:2b:be:c1:4a:42:bc:5f:d9:f5:e2:8c:8c:79:9a:
                    d6:48:0e:da:1b:9d:2b:7c:cf:7a:54:02:73:c6:8f:
                    51:02:45:89:77:49:ea:5e:e7:95:04:f0:26:75:82:
                    47:b4:04:34:e1:9a:3e:38:21:bd:be:fa:e1:2d:d6:
                    05:16:1d:16:1a:c0:fd:cb:0b:06:a7:d1:2d:76:a4:
                    4b:e2:88:58:8f:e7:33:fd:03:ee:94:94:af:56:65:
                    0d:01:a4:ce:a9:df:87:34:f7:9b:6a:42:d6:92:58:
                    de:bb:1a:c6:3b:24:44:71:0a:a6:f9:4a:99:0e:81:
                    53:67:45:4c:ba:1a:1d:c8:8f:da:ed:d4:1f:7b:3f:
                    02:44:a6:47:42:67:2d:54:4f:f2:e7:95:57:46:96:
                    7a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:6F:A2:06:65:14:59:79:90:D5:8F:8A:1F:8B:2D:C8:D0:49:B7:57
            X509v3 Authority Key Identifier:
                keyid:2F:A6:A6:53:70:01:48:DA:D6:8A:19:6B:43:6B:0B:20:05:CC:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6amU3ABSNrWihlrQ2sLIAXM54k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/L6amU3ABSNrWihlrQ2sLIAXM54k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f8997f-426f-418d-bf76-8ccd89c18d1e/1/L6amU3ABSNrWihlrQ2sLIAXM54k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:b1:67:56:8b:9f:a3:fd:2a:e3:6a:db:c1:bb:8d:39:26:4f:
         94:b1:c9:3a:13:ab:43:54:ee:0b:07:3a:e2:f0:f2:92:d1:e8:
         2a:cb:ac:2a:e5:9c:9b:cf:26:79:d9:7c:f4:9e:17:a4:50:cf:
         70:37:d7:d9:9c:b3:80:f2:4b:c8:4a:6d:93:63:e4:0e:59:a4:
         ca:42:84:30:25:96:f0:22:5c:58:07:ff:1b:e2:5b:e8:2d:67:
         cb:51:eb:64:ea:8e:49:2d:14:eb:c1:52:de:40:b7:f0:dc:f9:
         8f:fc:32:6b:ef:87:fe:5f:ae:9a:91:74:33:0a:1c:fd:1a:d5:
         3a:3c:75:4e:66:d3:c7:8c:38:63:85:f3:01:3e:67:a6:00:35:
         09:32:c6:37:f8:1f:d0:79:91:a6:b5:4f:7b:b8:5f:2d:d6:43:
         77:0d:b2:0f:b6:ed:59:af:eb:37:44:9a:0d:e9:ef:0d:95:ca:
         60:1c:2d:f0:94:a9:6f:a4:d3:28:06:36:ff:38:ea:c7:96:62:
         7e:62:25:e9:66:e1:43:73:f7:a2:1a:c6:81:93:3f:52:54:3c:
         1b:44:c6:08:b9:16:9a:30:3e:ef:fb:62:bd:52:48:e8:5c:4f:
         45:f7:bd:34:78:65:e3:cf:86:b4:ff:7c:63:44:92:70:2f:32:
         58:c3:79:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:33:38 2026 by rpki-client