Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
File:                     1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft (raw, json)
Hash identifier:          RZwVPSJE/FbPdSXCC+AAEGH9Als+UPE0/mbG5FPWuGI=
Subject key identifier:   27:6D:53:33:0A:BE:33:57:03:02:6C:D9:DF:D5:4D:58:C3:18:4A:3E
Authority key identifier: F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F
Certificate issuer:       /CN=f89e882276f80e6750490eef006de943dacb6e0f
Certificate serial:       01A0DBDFB372EC64B41200CE0FF21D074F23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
Manifest number:          0D22
Signing time:             Sat 26 Sep 2026 04:01:05 +0000
Manifest this update:     Sat 26 Sep 2026 04:01:05 +0000
Manifest next update:     Sun 27 Sep 2026 04:01:05 +0000
Files and hashes:         1: 1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl (hash: AYixPaf4uwEhKk3iJk73SmssTUFpusczkee3Smx3D9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:db:df:b3:72:ec:64:b4:12:00:ce:0f:f2:1d:07:4f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89e882276f80e6750490eef006de943dacb6e0f
        Validity
            Not Before: Sep 26 04:01:05 2026 GMT
            Not After : Sep 27 04:01:05 2026 GMT
        Subject: CN=276d53330abe335703026cd9dfd54d58c3184a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5f:3a:fd:14:c5:3a:0d:b7:c7:36:e3:29:81:
                    c0:d0:1b:ec:d4:91:0e:53:f4:8e:86:1a:3f:dd:fa:
                    73:f5:0e:a8:42:0c:83:99:7a:17:fc:46:68:35:05:
                    6c:88:37:3e:03:46:ce:65:3a:44:3c:0f:4c:70:20:
                    2f:3c:0e:8a:b7:8b:eb:2c:44:73:2e:ed:d8:2c:b4:
                    d7:ff:a7:fe:0f:cc:d2:5d:7b:dc:55:b4:e2:a1:b2:
                    5d:ee:4e:7a:47:c6:21:a4:d3:96:ca:39:10:88:b9:
                    bd:09:3a:5f:81:63:f5:5f:ad:2b:82:7e:46:48:65:
                    a1:47:b3:a5:94:51:fb:a1:c8:fb:35:93:3c:d5:98:
                    47:ca:ac:3d:fc:ef:8d:b5:eb:4e:b2:e7:9a:9e:3b:
                    c0:71:64:70:5b:06:c2:31:55:bc:f8:f9:dd:90:db:
                    8f:83:e2:32:78:8d:35:0c:66:3c:4e:bf:56:b4:51:
                    95:e2:b9:ac:f1:38:18:64:3e:e3:63:dd:e5:e1:79:
                    c7:14:51:42:70:28:2b:bb:5f:ce:40:50:7d:ac:b6:
                    37:b5:b2:13:f8:29:1a:f0:fd:11:17:fe:86:ea:68:
                    3d:24:73:4c:d8:bc:59:b5:98:f9:d0:ff:f7:bb:b4:
                    03:d0:07:74:cc:c6:04:70:07:4a:31:1f:72:a1:43:
                    d3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:6D:53:33:0A:BE:33:57:03:02:6C:D9:DF:D5:4D:58:C3:18:4A:3E
            X509v3 Authority Key Identifier:
                keyid:F8:9E:88:22:76:F8:0E:67:50:49:0E:EF:00:6D:E9:43:DA:CB:6E:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/65e973-b41b-4103-aa56-fcccea681b7a/1/1-J6IInb4DmdQSQ7vAG3pQ9rLbg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:e0:e7:06:6c:96:10:69:5b:e5:00:13:f1:56:b5:ab:1a:a3:
         90:0a:ff:d0:2a:7a:57:4b:1c:f8:1a:2f:cb:67:e0:f1:6a:a9:
         b6:ea:94:41:0c:91:ca:ed:97:8f:7f:52:cc:93:60:a4:ef:df:
         ac:88:78:32:d6:cd:a2:35:68:16:21:79:8e:02:3f:6a:ac:74:
         fb:11:04:18:e7:82:38:63:20:94:0c:16:b9:91:d8:72:c4:17:
         c1:02:0b:38:eb:06:88:01:23:59:59:07:39:a4:d5:d1:c2:2d:
         3c:4c:c4:06:ce:a7:04:4d:49:94:0b:56:f7:dc:ad:e9:a5:6e:
         c1:13:e1:a9:96:eb:a1:71:c1:92:49:fa:44:7b:37:ce:14:4b:
         d4:91:36:53:b4:61:1f:9d:6a:91:77:00:90:fd:37:a0:06:45:
         a6:5b:79:9a:a6:88:2b:25:ba:3b:16:1d:0e:35:e5:d2:1d:11:
         6b:d9:28:2b:4a:39:43:c5:cc:a2:c9:a9:78:ce:6e:4f:9c:eb:
         bf:78:80:76:0f:ed:8d:ea:ba:71:d2:5f:c7:3c:e2:f9:70:89:
         c3:c4:f1:dd:67:3c:0e:0c:8d:ea:a8:29:ee:65:37:02:39:5c:
         ef:f1:2a:2d:45:9d:f9:26:b8:7d:c3:84:22:7a:33:2f:d2:4b:
         bb:c6:07:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:00:20 2026 by rpki-client