Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
File:                     I15QLDFNUQT3xgzNaXicuEj_Xgc.mft (raw, json)
Hash identifier:          HIAPAqQ7hBIbaW30FpAwpxMLCUk87YTJWF9h4bOtkFA=
Subject key identifier:   FE:DC:02:D0:28:CB:82:47:A8:F2:2B:C2:69:73:30:B9:F0:25:DC:CB
Authority key identifier: 23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
Certificate issuer:       /CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Certificate serial:       01A10881C325A0ADA408FA0FA00CF9828A30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
Manifest number:          05AF
Signing time:             Sun 04 Oct 2026 20:01:24 +0000
Manifest this update:     Sun 04 Oct 2026 20:01:24 +0000
Manifest next update:     Mon 05 Oct 2026 20:01:24 +0000
Files and hashes:         1: 1-D7_xDdnahTC7f8t337Uhdz6OlA.roa (hash: qFFDJacVShPrpqulz/bsVIAV83KJDAIcTEvSBVtbIe4=)
                          2: I15QLDFNUQT3xgzNaXicuEj_Xgc.crl (hash: Pnj88f/lxeUG19QO47haHaL8MIhoeExQ1flHtSygMP4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 20:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:08:81:c3:25:a0:ad:a4:08:fa:0f:a0:0c:f9:82:8a:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=235e502c314d5104f7c60ccd69789cb848ff5e07
        Validity
            Not Before: Oct  4 20:01:24 2026 GMT
            Not After : Oct  5 20:01:24 2026 GMT
        Subject: CN=fedc02d028cb8247a8f22bc2697330b9f025dccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:c7:3c:40:e5:4a:ed:12:4d:d4:de:31:a5:
                    e0:5f:07:d4:66:3b:6d:c1:7c:f4:f1:6b:54:29:99:
                    c7:d5:ba:e7:b2:04:0d:fc:c2:6c:7e:86:88:b8:76:
                    5c:9c:69:bb:02:56:2d:b7:00:62:f9:9e:bc:a1:66:
                    b2:29:6d:67:36:95:7f:62:80:96:d5:d4:9d:2b:c6:
                    4f:4c:d9:82:fa:8f:dd:15:58:9d:ba:f7:46:3d:6d:
                    99:78:29:61:9a:c3:10:0b:0f:6a:aa:89:63:15:4e:
                    dd:26:0e:a4:f8:2b:2c:a8:7b:c2:a1:0b:41:62:94:
                    4d:67:0b:fe:4e:c5:39:a9:09:d8:8a:bf:73:d9:b8:
                    67:a8:20:9d:1d:8c:82:40:96:e6:44:8e:95:f1:42:
                    6c:fa:8e:0a:65:37:56:75:b8:f7:28:d4:1c:a5:cd:
                    66:0c:2d:1a:54:be:fb:19:ef:7e:2f:43:4e:79:51:
                    67:b4:91:86:a8:e4:f2:ef:95:43:95:e2:17:b3:6d:
                    dc:0b:2f:98:39:d8:b7:8c:10:9b:5e:de:f0:d4:80:
                    8f:d1:b1:5a:d2:ac:8f:f5:1e:dc:c0:6b:9f:fa:42:
                    42:23:7a:14:f9:a0:80:58:92:35:a6:bc:1d:7c:ef:
                    98:b7:74:58:d7:1c:a7:94:b5:d4:ab:2f:aa:90:9b:
                    2c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DC:02:D0:28:CB:82:47:A8:F2:2B:C2:69:73:30:B9:F0:25:DC:CB
            X509v3 Authority Key Identifier:
                keyid:23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2f:de:74:2f:f5:60:d1:bc:b0:f2:b9:7a:5a:24:e6:d1:b7:
         33:8c:46:4a:c9:b3:f2:ec:da:15:c1:4e:7d:56:72:c2:d5:41:
         a6:4b:59:5b:45:00:3d:39:04:73:7b:b3:75:9b:fa:6f:3f:4d:
         ff:46:cc:92:c4:26:7d:47:01:6b:2e:db:41:6d:51:fc:52:c3:
         b6:2c:6f:13:24:92:ff:5e:9b:54:9d:5e:47:11:c1:85:0f:60:
         bc:b8:e1:41:47:51:ad:e6:8f:bc:0d:2c:9f:81:ed:7f:2f:09:
         af:2d:90:f9:63:f1:33:be:7b:78:87:86:ae:61:22:28:ab:16:
         7a:b7:96:09:3c:6e:05:2a:b4:10:3b:66:b3:9b:e5:e7:1e:56:
         e7:20:af:6e:40:9e:27:ff:f2:e1:c6:37:48:94:c7:a2:15:d1:
         c9:04:85:52:49:e2:db:d3:cf:70:25:5d:3b:ae:ce:98:91:3b:
         9d:69:55:8c:65:e5:9d:70:e4:81:5f:b6:fa:6e:a6:d6:e9:24:
         2b:ba:8c:1d:ef:63:d1:04:62:fd:9b:c4:09:4e:0c:74:f8:f6:
         aa:ad:57:cf:43:6f:43:7f:4b:1f:f9:88:4a:24:b5:cd:30:c1:
         9a:40:d7:4d:1c:32:fa:f0:a6:98:eb:5f:b2:d3:56:bc:e2:57:
         10:70:e7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 08:45:20 2026 by rpki-client