Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
File:                     1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft (raw, json)
Hash identifier:          xkXKGCKebk81YjgwNJP9ewITn2VliQiAN9ssl0myWaQ=
Subject key identifier:   AC:9D:D2:8E:9E:D9:58:96:BB:B0:93:06:CF:E0:33:FD:EA:B6:C6:4E
Authority key identifier: FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22
Certificate issuer:       /CN=fb02f648de95b88479364346ed01e78769577922
Certificate serial:       01A0D6B9C135EAC138856686D5AA2AEFDF60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
Manifest number:          1A6B
Signing time:             Fri 25 Sep 2026 04:01:32 +0000
Manifest this update:     Fri 25 Sep 2026 04:01:32 +0000
Manifest next update:     Sat 26 Sep 2026 04:01:32 +0000
Files and hashes:         1: 1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl (hash: y84u7FWLPdSWjdQF04CPc0gPqpYajJZgCXZTt3vhyds=)
                          2: MDzL3FdO7fvyyBkKk6vdxUTiCwo.roa (hash: PnGHgebP3UovxlfbIsUeajZPOhGSEQYNlKiEGzPopd8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:b9:c1:35:ea:c1:38:85:66:86:d5:aa:2a:ef:df:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb02f648de95b88479364346ed01e78769577922
        Validity
            Not Before: Sep 25 04:01:32 2026 GMT
            Not After : Sep 26 04:01:32 2026 GMT
        Subject: CN=ac9dd28e9ed95896bbb09306cfe033fdeab6c64e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:e8:97:aa:15:b3:49:78:18:69:e0:9a:77:fd:
                    74:b2:71:84:3a:df:d9:2f:a4:14:ae:c2:c1:91:de:
                    0b:c9:13:1c:cb:99:ab:cc:49:ba:b6:7f:f9:fc:59:
                    26:00:d7:f9:d6:21:20:b4:68:a2:50:1e:4a:ac:12:
                    57:88:e5:dd:3b:57:41:a5:6d:03:95:c0:f9:d0:d9:
                    c3:01:90:41:0c:ef:b7:de:be:34:db:2e:c1:c3:52:
                    94:e4:3f:92:e5:50:ef:7a:a9:b7:b6:7b:f4:21:db:
                    14:c5:d8:8f:51:46:0c:9a:d1:47:8c:f6:0d:70:33:
                    3b:e5:4f:46:dd:1f:df:80:8e:a9:11:20:ee:25:9e:
                    fa:c1:a0:d6:3a:16:22:6d:9d:82:d6:90:b6:15:8d:
                    92:1a:2d:74:84:f9:20:c6:14:dd:7d:94:91:95:1a:
                    19:af:52:fb:a7:0f:98:b2:4e:7a:03:87:44:b1:fb:
                    0c:01:92:7c:a7:55:dc:7c:35:e3:c2:5a:62:bb:29:
                    8f:78:80:e9:c6:3f:e5:6f:13:b8:8b:9f:74:21:c3:
                    5a:e4:29:44:01:f6:47:9d:c7:a4:a2:a2:62:f7:36:
                    df:a4:a6:76:81:f5:f5:94:60:19:c0:cc:94:d8:fa:
                    08:f8:4b:7e:37:f6:a6:6c:69:50:6d:8f:f0:37:d3:
                    84:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9D:D2:8E:9E:D9:58:96:BB:B0:93:06:CF:E0:33:FD:EA:B6:C6:4E
            X509v3 Authority Key Identifier:
                keyid:FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:eb:76:40:95:7a:0b:3c:1e:00:46:c8:98:37:38:fe:34:6f:
         e4:15:c4:8f:1b:b8:03:bd:a3:f1:9a:7b:bb:5f:40:2f:bd:35:
         fb:ff:72:b0:c1:84:30:fe:83:28:f4:b9:e6:7b:4d:88:9c:77:
         7b:51:71:20:2a:9b:e1:e1:1a:88:3f:df:e9:2f:51:8d:aa:71:
         3f:d3:d3:d7:63:34:56:3e:85:c9:bd:7f:ad:c8:96:de:16:64:
         f5:ec:79:bb:c0:a5:cf:a1:51:49:7c:d6:4c:0c:63:85:27:ef:
         6a:ee:4a:91:5d:57:45:2c:64:79:98:1f:6b:6c:69:27:0a:a4:
         47:38:db:f2:f0:87:72:db:27:f8:82:00:48:e0:5a:3b:06:23:
         6f:4f:df:ed:4d:8b:fd:80:5f:b6:da:5f:85:72:19:4d:cc:ad:
         be:17:8a:04:73:45:91:e5:1e:2d:35:2f:7c:46:e8:5f:04:45:
         ea:60:dc:7a:cc:26:96:36:85:3a:de:37:cb:86:f7:9c:72:3b:
         69:22:ac:69:cb:7d:ff:d9:41:4a:fc:dc:29:bc:11:38:cc:05:
         70:69:0b:a5:f1:a7:13:3c:59:88:47:aa:fe:17:fc:23:0c:f7:
         e2:b4:e5:b9:22:08:d1:ed:eb:92:d8:29:1a:a1:03:5e:35:84:
         4f:0c:f6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:13:13 2026 by rpki-client