Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
File:                     daobbpHzNqAdTS7JukRO_QZxYfc.mft (raw, json)
Hash identifier:          VCM4OFWq37XKGrOLgCx59O3Z7kOg9tqzsZbQBW9eyuI=
Subject key identifier:   E3:EE:38:B6:A8:E5:82:86:5C:37:D8:65:BA:D5:9C:E8:95:79:C6:8D
Authority key identifier: 75:AA:1B:6E:91:F3:36:A0:1D:4D:2E:C9:BA:44:4E:FD:06:71:61:F7
Certificate issuer:       /CN=75aa1b6e91f336a01d4d2ec9ba444efd067161f7
Certificate serial:       01A13C37A986B64B37200CAEC2327D4750C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/daobbpHzNqAdTS7JukRO_QZxYfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
Manifest number:          011D
Signing time:             Wed 14 Oct 2026 21:00:43 +0000
Manifest this update:     Wed 14 Oct 2026 21:00:43 +0000
Manifest next update:     Thu 15 Oct 2026 21:00:43 +0000
Files and hashes:         1: 1-nNpS75iYMcjjtHDmrPvO5OT4c0.asa (hash: 8ky8Utp0nRPsWBK/+jB+V8TaLHoS6comwINplKcWJxQ=)
                          2: daobbpHzNqAdTS7JukRO_QZxYfc.crl (hash: Hog0b1cssVo4D0dlhovf7uwTOJYCVjdqbSZo0AAA4S0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/daobbpHzNqAdTS7JukRO_QZxYfc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:37:a9:86:b6:4b:37:20:0c:ae:c2:32:7d:47:50:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75aa1b6e91f336a01d4d2ec9ba444efd067161f7
        Validity
            Not Before: Oct 14 21:00:43 2026 GMT
            Not After : Oct 15 21:00:43 2026 GMT
        Subject: CN=e3ee38b6a8e582865c37d865bad59ce89579c68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d3:c8:6b:37:62:4d:25:d0:f5:07:b9:45:ac:
                    b0:e1:32:47:81:e7:34:03:b1:d1:e2:8c:df:c1:9f:
                    32:4c:f8:76:ff:00:73:3c:f3:34:b3:ae:90:23:0e:
                    69:b0:70:94:98:16:0a:6d:b0:af:2e:c7:f1:a7:7d:
                    a2:26:ea:80:d7:01:b7:9a:71:a9:87:cd:36:f8:15:
                    35:bf:1c:f1:4b:61:ba:f6:37:67:a2:ba:04:99:49:
                    df:23:ce:46:2b:02:fc:ca:28:d1:75:7d:91:7a:fa:
                    bb:27:e5:c1:37:ae:6d:a7:fa:60:44:6c:49:33:26:
                    53:ee:f0:1f:e4:bc:46:d4:bf:49:b5:7e:59:4a:2e:
                    35:36:12:11:4c:4a:b8:5d:a1:d4:95:8d:a2:e3:06:
                    ed:00:ef:22:15:51:14:dd:3a:de:c1:67:b2:fb:a4:
                    f6:70:17:86:48:b0:84:c1:1e:20:3d:88:2f:4c:1b:
                    90:b7:17:4f:67:fb:84:0c:1b:5a:31:e4:30:0b:85:
                    73:74:ed:23:67:1f:f8:91:9b:e8:de:21:56:ee:df:
                    db:f1:11:b2:61:f3:b5:b3:83:79:d7:0a:bb:e3:1f:
                    b1:e3:34:74:30:77:e9:84:52:47:62:84:7d:33:b7:
                    e5:a5:90:90:fd:bb:70:cb:dc:e4:ca:b8:03:45:8a:
                    75:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EE:38:B6:A8:E5:82:86:5C:37:D8:65:BA:D5:9C:E8:95:79:C6:8D
            X509v3 Authority Key Identifier:
                keyid:75:AA:1B:6E:91:F3:36:A0:1D:4D:2E:C9:BA:44:4E:FD:06:71:61:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daobbpHzNqAdTS7JukRO_QZxYfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e97120-4208-4acc-a54b-92f520e46e88/1/daobbpHzNqAdTS7JukRO_QZxYfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:4c:0b:76:3a:d1:c4:39:c1:ea:80:79:97:5c:8a:cb:35:7c:
         35:77:2f:01:e7:2b:67:ea:5f:15:ef:31:71:1a:65:55:3c:7a:
         f7:f4:2b:fb:24:a7:43:18:ef:9f:56:0e:75:42:e3:7a:d2:86:
         93:73:a5:da:56:c1:3f:f3:22:db:ac:ea:f4:f3:bc:c0:f3:79:
         4a:ac:18:70:83:a8:28:f1:7a:b6:7e:1d:a5:c3:75:ec:78:05:
         9d:e3:b4:97:58:8c:1b:35:64:bb:db:a2:eb:66:a2:80:a2:bf:
         20:34:84:56:b4:5c:89:bb:66:14:70:ec:a4:1b:84:fc:ce:78:
         ca:ed:9b:f1:db:13:fb:66:f3:c1:70:37:d0:fc:f8:dd:d6:a8:
         a4:9b:17:41:a1:6a:c0:1f:b3:e9:9e:7b:76:dd:12:34:8f:6c:
         32:93:5e:4c:58:73:de:12:c0:ce:e9:fb:ba:36:de:96:3c:fe:
         82:e8:d2:b6:19:17:5b:83:cb:0d:a9:12:6b:20:04:1b:35:91:
         aa:66:6a:3a:80:4c:4f:11:9a:19:8c:94:53:de:9e:93:90:7f:
         ee:89:bc:be:71:f4:af:77:3f:cd:fc:d5:75:f1:c2:1b:2e:c5:
         12:f1:83:29:ea:0d:f5:b1:1a:9f:73:03:0c:c6:cc:39:b2:f8:
         a0:69:63:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 02:19:26 2026 by rpki-client