Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
File:                     1-6DtkuyUMh3LIZ03842QfhgyRL0.mft (raw, json)
Hash identifier:          IVnADjwJiwhAprvj19hJKMPEuYsCjqdt46kmzh0v7Ww=
Subject key identifier:   5E:DA:6B:E2:F9:3E:85:03:37:7C:36:5B:65:EE:D9:69:31:B3:9A:E8
Authority key identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
Certificate issuer:       /CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Certificate serial:       01A1065C56A0741E9A1E8B2357B967AD248A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
Manifest number:          0E49
Signing time:             Sun 04 Oct 2026 10:01:17 +0000
Manifest this update:     Sun 04 Oct 2026 10:01:17 +0000
Manifest next update:     Mon 05 Oct 2026 10:01:17 +0000
Files and hashes:         1: 1-6DtkuyUMh3LIZ03842QfhgyRL0.crl (hash: IZeJiz2TqV0msmX6vR9DFMuU0WqdLOCgv7taFYTrhC0=)
                          2: 6aMislTch3zZwMzO58eJDtWMabg.asa (hash: LTp3zb/0TL8PMFq/FYhsEKwMy+Y343ohy5Z9X0x0oss=)
                          3: mwF9VOIvrElH23ZHoopKdym-Aho.roa (hash: W+Ohr/XPhsb0nPw8AWIrEke6fDAFH5wEmSuFFviMKNc=)
                          4: nRIsafAf78Gs7rWD8avvMiri3pc.roa (hash: bbrHnQr4yvaMpEsNaLQjRLRfE7DnAQFoP/N3kLyMl3I=)
                          5: pB_jEBT845qiq_XLt-ZbMdSYI9Y.roa (hash: EXgWfKPbjwdqrdAv9y6pI3rTT0729xGjj1/jOYtBdig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:5c:56:a0:74:1e:9a:1e:8b:23:57:b9:67:ad:24:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba0ed92ec94321dcb219d37f38d907e183244bd
        Validity
            Not Before: Oct  4 10:01:17 2026 GMT
            Not After : Oct  5 10:01:17 2026 GMT
        Subject: CN=5eda6be2f93e8503377c365b65eed96931b39ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6f:86:e3:55:12:1b:6d:a0:f3:ae:ce:1c:2a:
                    9c:8b:da:9b:c8:88:4f:5b:fe:96:82:06:8c:6b:6d:
                    88:f9:f8:a3:5f:7a:a7:f8:61:5f:ae:a1:db:a3:9f:
                    14:a4:e3:69:51:cc:d4:4a:8c:9d:91:f3:c0:cd:c6:
                    a1:64:fd:63:a6:28:d5:ec:ad:2a:12:73:ac:cf:ec:
                    e5:20:64:6c:72:b6:8b:e3:26:d0:d7:70:95:e5:c7:
                    aa:cd:35:4f:7f:cc:48:8a:e1:37:07:cf:6a:c0:cb:
                    6a:18:4e:2c:13:21:24:1f:40:cd:cb:1b:58:bb:73:
                    32:e8:62:cb:21:4a:46:d4:60:f6:70:94:97:7f:92:
                    dc:72:2d:5f:1d:07:88:cb:01:94:24:2b:2a:13:8e:
                    eb:fc:2a:71:70:9d:38:00:5f:52:73:43:7b:d6:ee:
                    f6:08:83:a2:9a:d4:fd:03:1e:54:f0:a2:8c:85:6b:
                    6f:e0:6d:52:f3:e4:42:17:8b:1e:a8:da:9a:de:f7:
                    01:ca:60:ca:b5:68:1d:d2:be:36:83:cd:82:89:14:
                    bc:01:81:6f:e4:7b:19:6c:d1:0b:1b:c7:b5:2d:e7:
                    28:49:fe:95:dd:d7:9b:10:cb:ed:89:7c:83:a2:3b:
                    82:dd:b6:fc:9d:90:44:f9:33:9a:a1:75:99:ea:17:
                    77:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DA:6B:E2:F9:3E:85:03:37:7C:36:5B:65:EE:D9:69:31:B3:9A:E8
            X509v3 Authority Key Identifier:
                keyid:FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:66:6b:72:ef:c8:7a:ce:6d:7e:0e:6b:4c:17:15:c4:2d:3b:
         2d:b2:41:9d:8d:8c:15:07:f9:a9:29:48:fd:81:ba:0a:65:8b:
         71:d7:ae:db:69:67:1f:63:75:f2:c5:de:a7:8e:89:f7:06:5f:
         18:df:41:7d:34:6c:cc:49:a8:30:ec:68:56:08:86:a1:c7:72:
         2d:3b:95:95:34:83:8c:6a:67:18:aa:55:c8:39:cf:9e:c1:6b:
         b7:59:a1:92:a1:35:b2:de:88:c6:ea:90:9c:e3:36:f5:c0:cd:
         d1:9f:5c:d6:1a:36:b1:31:24:fa:6a:42:60:59:1f:cd:fe:18:
         a2:7d:dc:2f:bd:0d:6e:c0:a0:d8:dd:10:89:a6:07:81:0b:37:
         27:4e:02:0e:4f:f5:a2:22:e3:81:c2:a6:42:b3:4e:28:0d:b9:
         b2:ab:fe:86:d9:93:bf:44:f8:d0:9c:a5:a4:04:63:d7:0e:1c:
         2b:1a:9a:d6:07:7e:29:a4:7c:25:ad:a2:40:ca:88:dd:8b:8f:
         c1:e9:ee:25:8a:fb:5d:80:ec:ee:e2:a6:36:5d:c6:c8:71:1c:
         c6:e3:20:10:cf:d1:36:8a:cb:6c:0d:27:07:81:b2:37:d1:f6:
         26:4f:6f:ab:76:72:da:94:43:19:37:ea:2d:ba:fc:46:eb:27:
         6b:e5:3e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:16:31 2026 by rpki-client