Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
File:                     1-99pi190ocbR4AmLIlGb3FgwBVo.mft (raw, json)
Hash identifier:          tcsxMbWSNiSp/92a/9HafgcK7h3cnsvoVKyM7+pGtyw=
Subject key identifier:   0B:3B:5F:9C:05:F7:23:6D:ED:C1:F6:21:B4:1F:25:C5:3E:4A:F2:FA
Authority key identifier: FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A
Certificate issuer:       /CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
Certificate serial:       01A0E70A16A8E77921C6552058497B49E38B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
Manifest number:          0E88
Signing time:             Mon 28 Sep 2026 08:03:13 +0000
Manifest this update:     Mon 28 Sep 2026 08:03:13 +0000
Manifest next update:     Tue 29 Sep 2026 08:03:13 +0000
Files and hashes:         1: 1-99pi190ocbR4AmLIlGb3FgwBVo.crl (hash: NHg3fck2J0kUmvwA1Lxzk+kgwCM2CfjkuUuYEWS3EJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 08:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:0a:16:a8:e7:79:21:c6:55:20:58:49:7b:49:e3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbdf698b5f74a1c6d1e0098b22519bdc5830055a
        Validity
            Not Before: Sep 28 08:03:13 2026 GMT
            Not After : Sep 29 08:03:13 2026 GMT
        Subject: CN=0b3b5f9c05f7236dedc1f621b41f25c53e4af2fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d6:88:32:93:74:3e:3b:86:74:a1:99:ae:7d:
                    f1:5d:3b:40:96:52:ee:2d:94:58:dd:81:78:88:01:
                    40:83:22:3b:d1:f3:31:8e:26:4f:cd:c8:22:1b:b1:
                    17:b0:7c:d1:41:c3:2d:27:2f:ec:4b:15:d5:92:25:
                    d4:6b:44:65:df:19:7c:32:54:aa:83:ff:e8:b2:25:
                    52:3b:5c:fc:fb:ba:a1:9a:85:f8:89:cd:a5:10:e9:
                    6a:6c:03:f2:29:5e:38:14:55:4e:1a:a9:b0:ec:33:
                    16:01:6a:01:e6:1b:d1:36:6b:e3:ab:b8:a0:de:10:
                    b5:49:ce:bf:b5:2c:29:7e:0c:4b:ed:ca:75:11:35:
                    2b:98:27:61:64:20:02:c7:1a:7a:45:ef:00:9a:d7:
                    43:38:4a:12:87:d7:1e:5d:e9:f9:48:de:20:ed:95:
                    f6:54:b5:fa:69:1d:0f:e3:3a:35:aa:6e:94:42:2a:
                    ac:4f:24:aa:9d:30:03:82:7d:14:03:79:63:fc:46:
                    2a:00:e1:74:83:65:dd:d5:56:1c:38:fd:d9:f7:72:
                    bb:52:21:83:2b:44:3c:65:c4:b2:35:bb:1f:33:3f:
                    16:59:9e:92:c0:e9:e0:82:63:99:77:45:29:95:65:
                    0c:a2:fa:11:1a:9d:2c:ba:f1:eb:00:f9:fd:7d:ea:
                    f7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:3B:5F:9C:05:F7:23:6D:ED:C1:F6:21:B4:1F:25:C5:3E:4A:F2:FA
            X509v3 Authority Key Identifier:
                keyid:FB:DF:69:8B:5F:74:A1:C6:D1:E0:09:8B:22:51:9B:DC:58:30:05:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-99pi190ocbR4AmLIlGb3FgwBVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/de9c2d-7026-49eb-93d4-98f2a216a7f8/1/1-99pi190ocbR4AmLIlGb3FgwBVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:3c:23:11:6a:1e:ad:c3:24:ad:49:7e:62:64:fc:94:86:cd:
         15:27:6e:cb:14:a8:49:dc:05:00:a6:8e:03:07:54:0d:67:7e:
         8f:03:52:79:9e:4c:ed:b0:43:03:07:68:e1:6a:10:6d:56:6a:
         15:16:36:a6:12:3f:ea:1c:48:00:86:32:b6:67:27:43:ce:10:
         b0:dc:57:de:a2:bf:61:af:fd:7f:71:3e:ed:8d:20:cf:bb:6f:
         da:77:c2:48:5c:2f:b9:9e:cf:45:d0:af:ad:1f:7d:2e:65:39:
         17:fc:8d:98:37:e8:46:f6:d1:ad:b0:eb:7d:55:93:32:4d:e1:
         cc:97:85:30:d8:d3:ba:3b:8a:b5:08:cd:88:d5:a3:5b:65:c3:
         88:5e:b8:3b:21:1a:3b:1a:d1:a7:86:8d:f6:3f:af:09:17:b7:
         24:82:5b:19:4e:50:74:48:df:19:af:9f:44:29:6a:39:bf:12:
         5b:aa:be:34:7e:90:98:1a:01:db:68:b7:f4:d4:78:59:3d:b8:
         e7:ef:ec:63:06:6b:08:d1:04:9b:1b:69:66:a0:d6:80:ba:f3:
         f7:50:12:ef:e1:06:52:67:2f:59:69:a0:15:b4:f9:2c:e0:18:
         59:cd:ed:3e:98:f5:ea:69:3b:e2:62:0b:02:71:ca:e8:bc:4d:
         bf:e1:11:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:33:56 2026 by rpki-client