Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
File:                     T1VxCj6EBcGv2mxj6edzZu_GHnw.mft (raw, json)
Hash identifier:          ihFeIRVPHX7Mda7ClvDFimyOcvU3RbrSZJsf2yN7zQk=
Subject key identifier:   F2:C4:E3:20:17:34:17:19:C2:38:BA:65:3B:DE:DD:99:19:60:F9:C3
Authority key identifier: 4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C
Certificate issuer:       /CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
Certificate serial:       01A0F18C0EE8A148F8F144209679CAD89A2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
Manifest number:          0681
Signing time:             Wed 30 Sep 2026 09:01:22 +0000
Manifest this update:     Wed 30 Sep 2026 09:01:22 +0000
Manifest next update:     Thu 01 Oct 2026 09:01:22 +0000
Files and hashes:         1: T1VxCj6EBcGv2mxj6edzZu_GHnw.crl (hash: XM/Gc7nwKzIgTtiQyz8f4nG9wD/Jb7dt867duvEFLZM=)
                          2: W5VWeCgeMH31LiSdes2U3Q6aIIY.asa (hash: wKeoYtqhAcqu4A/KO7i8oY8n2kNsBWSJA7RAqOZK0vU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 09:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:8c:0e:e8:a1:48:f8:f1:44:20:96:79:ca:d8:9a:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f55710a3e8405c1afda6c63e9e77366efc61e7c
        Validity
            Not Before: Sep 30 09:01:22 2026 GMT
            Not After : Oct  1 09:01:22 2026 GMT
        Subject: CN=f2c4e32017341719c238ba653bdedd991960f9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:15:bf:a5:85:84:a9:f5:0e:a8:7b:45:23:45:
                    21:45:44:80:19:31:73:69:57:6e:ee:30:26:f4:79:
                    79:f2:5b:f2:89:32:86:fb:f1:9f:73:fa:b5:1e:50:
                    9f:20:02:9d:c4:ad:25:06:cc:2b:76:ff:14:c8:b5:
                    d2:d1:5c:4a:48:78:ad:e7:a0:9d:df:b1:a3:fa:f5:
                    93:a2:03:7c:5f:03:86:c1:c3:50:18:69:01:31:b3:
                    e8:c3:19:33:ef:fa:83:fc:1b:de:96:49:2d:c9:0d:
                    0d:09:1a:0d:f2:f2:cb:cc:cf:a6:14:f1:cf:b1:a3:
                    3f:64:6b:ab:62:70:00:e5:c2:31:27:45:0a:3d:f8:
                    d5:6b:43:a6:95:5e:c7:e9:82:4a:72:d3:6e:54:a5:
                    f3:60:05:af:a1:61:e5:d4:7d:3b:ae:bd:82:a4:4e:
                    9a:ae:48:a0:28:24:cc:b2:17:20:64:6b:03:a2:70:
                    7b:d1:97:70:c4:c5:4c:57:cf:54:8f:df:f1:eb:bc:
                    89:c0:e9:1b:95:fc:9b:46:72:a5:3c:fb:77:4c:d0:
                    17:f3:c3:22:c6:28:ed:ca:35:64:73:cb:58:3e:f0:
                    24:5b:98:c3:de:90:07:19:c5:05:c7:da:9a:3c:b8:
                    e3:47:0d:10:a4:b5:59:b2:84:f8:d8:d8:44:ff:ef:
                    3f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:C4:E3:20:17:34:17:19:C2:38:BA:65:3B:DE:DD:99:19:60:F9:C3
            X509v3 Authority Key Identifier:
                keyid:4F:55:71:0A:3E:84:05:C1:AF:DA:6C:63:E9:E7:73:66:EF:C6:1E:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1VxCj6EBcGv2mxj6edzZu_GHnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/0355f6-270c-42b8-b264-b0d7117d794f/1/T1VxCj6EBcGv2mxj6edzZu_GHnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:75:b0:90:06:b3:e2:a0:38:24:0a:31:fe:36:90:b0:ff:94:
         7f:25:d2:87:50:34:e1:1a:24:cf:08:27:4b:f5:14:75:a7:b5:
         3b:f6:ef:04:a0:e8:1e:22:b2:f8:16:41:41:ce:6e:07:6a:27:
         6f:09:28:74:8e:f4:6e:97:7d:43:36:23:b5:8e:a0:20:a9:c6:
         85:08:7b:31:df:4e:dd:b4:06:ab:58:a2:fb:21:e4:ef:eb:d4:
         ae:2b:28:53:5c:69:d4:19:70:ec:66:4b:19:5f:45:60:38:cf:
         53:f5:7c:92:03:05:46:30:e9:c9:03:b2:35:00:1e:58:e1:21:
         81:af:ad:65:1a:6c:c4:95:c8:c0:8b:b8:93:74:88:a6:8a:bf:
         86:e5:36:ef:24:40:6f:26:71:de:66:02:00:45:08:11:d3:14:
         6d:dc:0f:22:79:c7:9c:4d:d2:fb:c6:13:e3:fb:06:6a:f7:73:
         03:a3:e2:c4:64:c5:25:d9:6c:62:a2:79:e8:96:87:86:ed:43:
         07:9d:8e:5e:6e:d7:ef:ba:94:4b:20:99:ce:86:83:26:5d:5e:
         fa:3d:97:8b:c9:b0:da:4a:51:3b:e0:88:73:a6:7e:5e:11:ad:
         c6:35:19:1e:ec:bb:c3:2b:a4:ab:3e:be:b2:f0:b9:24:d4:23:
         fe:41:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:59:26 2026 by rpki-client