Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
File:                     1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft (raw, json)
Hash identifier:          0O2AvK3xssA/7QHHAb/6mBTJVqHEiyI6/AgMJgQvIpk=
Subject key identifier:   06:DA:3B:5E:28:11:D1:99:BE:CF:EE:64:EF:0F:AD:EE:F3:D6:9D:53
Authority key identifier: D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5
Certificate issuer:       /CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5
Certificate serial:       01A0CAB5026A0BAC70F1C15A3BADED87EC39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
Manifest number:          0780
Signing time:             Tue 22 Sep 2026 20:00:55 +0000
Manifest this update:     Tue 22 Sep 2026 20:00:55 +0000
Manifest next update:     Wed 23 Sep 2026 20:00:55 +0000
Files and hashes:         1: 1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl (hash: d5iYvl67TpABcfBfXVtYCLqPRW5ZtnrYalcLaJ/IkZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 20:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ca:b5:02:6a:0b:ac:70:f1:c1:5a:3b:ad:ed:87:ec:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5f623da4cd2eeddc2c87c515c62518c431d3fb5
        Validity
            Not Before: Sep 22 20:00:55 2026 GMT
            Not After : Sep 23 20:00:55 2026 GMT
        Subject: CN=06da3b5e2811d199becfee64ef0fadeef3d69d53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:b1:85:58:d6:2f:62:51:91:5b:30:8b:49:
                    07:ab:6e:1f:e9:89:44:0c:68:8c:54:9b:90:e9:f8:
                    e5:23:30:ba:a4:1b:f9:e5:29:c7:3c:01:a9:2f:72:
                    c5:53:2d:35:92:65:a3:77:8d:67:db:ea:d9:21:f2:
                    38:1c:b0:56:61:32:dd:35:88:24:33:99:35:c0:1c:
                    fa:38:e0:02:52:d5:c0:da:4d:d8:97:08:a1:9e:79:
                    c8:1b:b0:ca:c7:11:ae:7f:21:13:51:ff:d3:b1:78:
                    75:a4:24:6e:f9:61:36:7c:eb:1a:b5:93:a7:bc:1e:
                    b9:19:10:c2:df:62:4d:44:28:91:be:3b:4d:d2:cd:
                    7c:ac:53:cf:e0:ef:8f:c6:e5:5b:fa:7c:bc:ab:f9:
                    bf:a7:dd:ab:f7:27:cc:54:04:a5:41:39:f7:7e:d1:
                    50:96:6d:60:a0:5c:43:bc:8b:36:4c:76:9a:75:92:
                    7f:6f:13:19:b1:fc:e5:ff:8a:94:49:a0:a3:66:87:
                    d0:c4:7b:ff:9d:f2:61:0a:8d:85:7b:8c:44:ab:cb:
                    6d:b1:75:d4:1d:19:05:89:b9:d1:c4:0c:30:0c:0c:
                    5f:ab:46:5e:31:11:b7:61:15:a2:99:84:6a:3a:c0:
                    86:9b:40:d1:9e:4e:89:5d:11:7e:ee:12:29:51:7b:
                    dd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DA:3B:5E:28:11:D1:99:BE:CF:EE:64:EF:0F:AD:EE:F3:D6:9D:53
            X509v3 Authority Key Identifier:
                keyid:D5:F6:23:DA:4C:D2:EE:DD:C2:C8:7C:51:5C:62:51:8C:43:1D:3F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fYj2kzS7t3CyHxRXGJRjEMdP7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/313c11-df87-4d77-8739-04f1dcec320e/1/1fYj2kzS7t3CyHxRXGJRjEMdP7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:48:fd:9b:62:78:b5:9e:dd:81:26:7a:76:24:39:ec:ff:46:
         e1:bf:0d:c0:9b:ac:bb:29:95:96:1c:1a:d3:52:b9:86:ae:62:
         9e:56:e0:d3:3a:a2:2f:a0:85:99:b3:a0:1e:6b:85:3c:4e:15:
         94:f0:47:d9:aa:40:bc:2d:f2:31:59:a8:67:b2:69:4f:18:72:
         93:80:7b:21:0f:4a:41:04:2d:7e:39:c3:fc:39:da:9f:3f:f5:
         41:1b:8f:08:9a:4a:f5:fd:8b:4d:5b:c1:48:d9:97:3d:eb:a5:
         3b:c6:4c:d2:37:11:3d:dc:7a:17:4d:17:75:d3:e1:cd:86:46:
         a5:ea:a1:92:69:ed:c9:18:24:70:f3:69:1e:1d:22:50:15:db:
         1e:1f:44:7a:87:4f:45:7a:76:0e:e0:db:1b:ea:f0:45:4f:30:
         a1:79:26:51:f2:c6:dd:2d:40:60:28:b1:85:b3:3b:04:50:2b:
         d8:44:35:18:e8:33:01:23:2e:1a:8e:01:7b:37:9f:ef:44:59:
         b1:df:a3:f3:bc:a5:bc:cf:81:3e:b8:18:c6:cf:60:d3:ef:a9:
         4e:2d:26:c3:dc:70:e8:a0:85:a2:bd:bd:75:72:f1:d8:74:96:
         23:ec:b0:52:d7:b7:9e:c4:56:85:2f:8d:bb:c5:d8:3f:4e:69:
         e3:d0:16:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:42:34 2026 by rpki-client