Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File:                     7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier:          eI1boqBXjB50KLQrHKDTNiVxXM6zWGe0O+FjHgYCKSk=
Subject key identifier:   E6:15:4A:B6:42:08:02:54:30:C5:D7:F7:48:A3:99:C7:08:31:82:CC
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer:       /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial:       01A149182836AAC735DA41EE386D86AFB856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number:          0A2E
Signing time:             Sat 17 Oct 2026 09:01:22 +0000
Manifest this update:     Sat 17 Oct 2026 09:01:22 +0000
Manifest next update:     Sun 18 Oct 2026 09:01:22 +0000
Files and hashes:         1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: NaQm0d30ptTtQXUCVlrggESDmI+Z1xXPcuWY1EiiK0k=)
                          2: ci8f7Y86uB9atamo1D3e8sszzV0.roa (hash: JE0+am3liaO3am6zHqUi0SmfiCv9crbc5X4aX8Cwg8E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:49:18:28:36:aa:c7:35:da:41:ee:38:6d:86:af:b8:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
        Validity
            Not Before: Oct 17 09:01:22 2026 GMT
            Not After : Oct 18 09:01:22 2026 GMT
        Subject: CN=e6154ab64208025430c5d7f748a399c7083182cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5c:ed:d9:a7:18:12:46:78:ea:d9:45:10:61:
                    aa:16:59:80:b1:a0:66:b8:f9:0e:06:ba:30:a7:eb:
                    d6:04:f0:cf:21:d0:ab:e2:32:1f:5c:97:51:de:19:
                    51:31:47:5a:01:54:da:45:7c:0c:0e:6e:45:63:ae:
                    df:89:da:3a:2d:9d:88:53:34:68:0a:c6:e2:fc:9e:
                    ac:bb:b3:a1:6b:62:b5:c7:fd:5d:6b:d2:eb:e4:9a:
                    93:4b:49:b4:ea:bc:16:c5:ad:bc:1a:cd:c3:f5:ad:
                    81:1e:1d:b8:82:2f:3d:39:30:18:d9:b7:c6:f3:74:
                    35:2d:e7:f0:0b:12:61:99:6d:f8:c0:30:48:6d:b8:
                    e3:f5:ed:3e:c2:11:87:ff:ee:c7:fa:5a:34:df:44:
                    a3:75:51:3c:1d:7c:74:9b:0e:ce:fe:8c:47:e0:b4:
                    a1:89:51:1a:47:4d:82:cf:d8:3a:70:2a:c6:0d:44:
                    e1:d1:4b:24:bd:d9:90:14:82:fc:31:4e:7e:ea:db:
                    f1:f3:78:de:fa:94:1e:97:c1:24:aa:6e:0b:96:9a:
                    d6:d5:7f:a0:dc:d3:0f:5f:63:98:ab:a0:c7:e9:c7:
                    fd:d6:79:01:fe:a0:7b:65:69:79:6c:6a:ba:a0:a2:
                    bf:0e:2a:96:6e:16:6f:d4:a7:e7:0b:9d:60:94:4a:
                    c6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:15:4A:B6:42:08:02:54:30:C5:D7:F7:48:A3:99:C7:08:31:82:CC
            X509v3 Authority Key Identifier:
                keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:aa:12:15:af:63:9b:d4:53:ed:18:21:a2:ff:5b:a8:89:bf:
         12:7c:88:a5:e2:ad:7d:dc:b8:cd:48:99:1d:5c:ec:dc:e9:00:
         24:d7:0b:89:66:68:19:f7:87:ea:bb:34:b4:4e:31:db:dd:c1:
         c9:2b:18:a1:69:e0:88:32:6b:73:8b:af:f2:92:ec:2d:b8:b8:
         9d:ec:f1:cd:ab:f1:5a:76:db:2c:2d:de:e3:e9:3f:74:41:66:
         52:66:30:54:35:08:4f:0f:8b:cf:e3:4d:63:61:2e:df:a5:c4:
         29:c2:68:c7:82:51:50:1e:47:70:bd:ef:54:ee:63:e3:03:41:
         e0:21:5c:f0:fb:dd:b9:0e:62:02:8b:b4:15:77:98:fc:28:ad:
         0e:25:0a:5f:e2:f5:1f:c4:74:cc:b0:97:7b:76:cb:d0:bc:9a:
         51:c5:b7:a1:e4:00:86:45:90:f8:21:8e:22:2a:1b:eb:e6:ed:
         42:6d:b4:6c:54:69:87:34:cf:6d:00:2b:5f:c4:92:13:81:05:
         18:0e:76:85:04:77:2e:61:1b:f6:b6:93:e2:bd:59:d8:07:91:
         ec:56:d0:14:f6:60:83:34:a9:99:cf:e0:21:c3:48:ad:6b:44:
         5c:ac:45:78:a5:80:5a:67:c9:54:a9:54:15:73:4e:65:e8:68:
         92:2e:1d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:33:31 2026 by rpki-client