Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
File:                     daWp6O8n4wJyk--E-4-NMPq25tY.mft (raw, json)
Hash identifier:          lM1thu8/eqe41lZKenqx5KifAd7AKeKIK34Y6TS9kzU=
Subject key identifier:   D7:F5:55:72:E8:0F:13:32:44:CF:83:DB:D9:D3:6E:11:A9:6F:96:41
Authority key identifier: 75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6
Certificate issuer:       /CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
Certificate serial:       01A1084AEFF5EDC221585D22372EA9920839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
Manifest number:          1A88
Signing time:             Sun 04 Oct 2026 19:01:31 +0000
Manifest this update:     Sun 04 Oct 2026 19:01:31 +0000
Manifest next update:     Mon 05 Oct 2026 19:01:31 +0000
Files and hashes:         1: daWp6O8n4wJyk--E-4-NMPq25tY.crl (hash: KS3TXu6Ah8kdVJWJR7Xap2FACIZiKFVIiEet72uwwOQ=)
                          2: nDj9PT5N_QWx4Sz5FT7RF4CSpok.roa (hash: h0RW3y25bIVEC8aKObDu/RDtNTnrw2v6jC5PsgpIK5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 19:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:4a:ef:f5:ed:c2:21:58:5d:22:37:2e:a9:92:08:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75a5a9e8ef27e3027293ef84fb8f8d30fab6e6d6
        Validity
            Not Before: Oct  4 19:01:31 2026 GMT
            Not After : Oct  5 19:01:31 2026 GMT
        Subject: CN=d7f55572e80f133244cf83dbd9d36e11a96f9641
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:93:b4:31:ee:1a:81:08:5d:d3:c7:c4:0b:64:
                    9c:c4:2d:45:15:02:87:34:26:68:ca:c8:a5:8f:f3:
                    ab:29:4a:f8:70:d7:1c:2c:2b:03:71:5d:8e:92:c0:
                    bb:a3:fc:69:22:ef:ba:04:8f:93:23:9e:f2:fb:d7:
                    39:ce:11:23:e8:c3:58:ea:fc:88:ee:13:20:9c:68:
                    b3:6b:19:26:50:c9:4d:61:dd:84:ab:40:f5:2f:3d:
                    36:c2:d3:b3:75:10:9a:3d:ca:71:04:8c:84:1c:bb:
                    38:b0:b5:bc:6b:99:9a:bf:e1:29:c0:ae:ac:09:12:
                    cf:ea:f8:bf:a9:e4:a3:c3:ae:0a:00:fa:fd:47:a0:
                    99:d1:e3:16:c5:0a:43:8a:e2:5c:27:8e:57:35:97:
                    b0:28:35:80:9c:f1:08:8d:ab:79:ae:cc:96:c3:ee:
                    8c:39:aa:b5:cd:76:84:42:e7:ca:60:95:35:28:27:
                    c6:53:8f:35:de:1b:09:73:d3:77:24:ee:a1:04:49:
                    47:a7:af:3c:e5:56:72:93:bb:1a:4e:e2:04:2b:f0:
                    a8:98:6a:84:e4:bc:b6:01:68:88:d2:04:8e:22:2d:
                    74:fb:ab:c7:54:ff:2a:e3:bb:a4:68:3c:e2:f8:c0:
                    2e:5c:46:b7:97:6e:4c:fe:31:0c:4b:cb:67:76:af:
                    9e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:F5:55:72:E8:0F:13:32:44:CF:83:DB:D9:D3:6E:11:A9:6F:96:41
            X509v3 Authority Key Identifier:
                keyid:75:A5:A9:E8:EF:27:E3:02:72:93:EF:84:FB:8F:8D:30:FA:B6:E6:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/daWp6O8n4wJyk--E-4-NMPq25tY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ca6f69-6fec-4753-ad77-eb6f9df045b2/1/daWp6O8n4wJyk--E-4-NMPq25tY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:80:25:9c:ce:49:fe:d0:7e:5d:7d:95:58:eb:c6:13:f8:98:
         a9:a5:d8:b2:d3:3a:b4:e6:04:d6:c1:a5:f7:2a:c3:2b:61:a5:
         52:b4:9d:89:23:93:3c:58:18:c3:ce:09:05:c3:b5:0d:2e:59:
         74:76:88:e8:92:c2:4e:76:b8:a6:01:bb:c6:ca:27:c5:b6:2d:
         f2:5d:a0:0a:18:dc:82:22:42:c9:9d:42:9e:40:d6:1c:11:74:
         0e:a9:dd:f8:02:16:d3:00:ce:ff:8d:63:7c:00:39:a5:73:ef:
         58:57:6c:74:b0:0e:e7:23:bd:99:f3:44:a5:64:35:b9:c0:47:
         1b:00:da:79:f0:8f:3f:25:85:e1:08:f9:70:e0:2f:6a:3b:84:
         04:eb:09:5c:e6:76:cb:a7:f9:2e:79:c2:5d:43:b1:a1:d1:95:
         68:5d:2c:19:1e:43:9d:86:83:32:00:b1:ce:08:18:c1:02:2a:
         2d:5b:0c:59:09:4e:e2:d3:8a:5d:be:b6:09:12:4b:9c:24:22:
         86:bc:d9:e9:17:88:ef:a2:3e:fd:1c:fc:e3:4c:af:32:bb:a7:
         27:4c:b0:5e:c5:5e:6f:a5:33:d5:28:fa:18:b2:71:fa:89:ed:
         64:cf:11:19:a7:7c:72:c9:92:c9:56:ae:af:bb:89:4e:66:5b:
         df:5a:02:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:35:20 2026 by rpki-client