Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
File:                     1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft (raw, json)
Hash identifier:          yFddyFOm4m7BIZMg8/3WGWbeATZq3GIYctpdWORLKvM=
Subject key identifier:   F5:64:4C:F5:53:26:FA:37:CA:36:EF:31:4B:4C:1D:1C:97:37:87:E9
Authority key identifier: FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4
Certificate issuer:       /CN=fbad2288035e4056eb0cec15446a0c4180d26ea4
Certificate serial:       01A0CC36158BC5F27A9104D0315A75011B58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
Manifest number:          09DF
Signing time:             Wed 23 Sep 2026 03:01:31 +0000
Manifest this update:     Wed 23 Sep 2026 03:01:31 +0000
Manifest next update:     Thu 24 Sep 2026 03:01:31 +0000
Files and hashes:         1: 1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl (hash: 3N51fCx5YYwZlcEtGjcQaFhFSktGqdPFHd0QiO1OhnQ=)
                          2: ihWl0bmGqyjVFVNbZ28Lvd8oBKE.asa (hash: AbrhEPhb6lBxE5UGNQRDlRoCGXrbC18DKsQp32jSHuc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:36:15:8b:c5:f2:7a:91:04:d0:31:5a:75:01:1b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbad2288035e4056eb0cec15446a0c4180d26ea4
        Validity
            Not Before: Sep 23 03:01:31 2026 GMT
            Not After : Sep 24 03:01:31 2026 GMT
        Subject: CN=f5644cf55326fa37ca36ef314b4c1d1c973787e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2d:c7:16:9b:bd:d5:bc:23:3b:00:17:59:35:
                    31:8c:68:95:82:a9:5b:03:73:64:98:d1:c7:83:ef:
                    42:cf:17:ac:3c:3c:71:d1:93:0d:b9:55:9e:b4:41:
                    28:61:eb:2f:e8:9b:b2:4f:b8:3c:97:2a:5f:cd:f6:
                    96:aa:53:f5:b3:5a:52:e0:aa:6d:59:cc:76:cd:cf:
                    0b:de:17:9e:93:14:99:0e:2b:f3:e4:74:08:c3:b7:
                    17:d3:f3:67:dc:1e:b4:9f:c3:9b:9e:14:d0:dd:81:
                    d7:53:a0:69:c1:f6:0f:44:1c:91:3d:dd:17:95:53:
                    d0:1f:59:6a:1a:9e:67:9a:79:d7:7e:27:69:da:62:
                    41:cb:e5:0d:e1:96:39:1d:7c:7d:a1:d1:40:b2:bd:
                    f4:c6:ba:0c:30:cc:4c:0a:af:57:18:d4:6d:1b:ad:
                    52:86:ea:1c:23:f3:5b:4e:b3:bb:2d:d5:16:93:cc:
                    86:38:0a:e5:21:f8:dc:c2:c4:d6:c1:6e:4f:8b:12:
                    45:d5:bc:ea:18:d8:fc:5d:b1:77:1c:f3:ab:ce:9b:
                    83:d1:d9:4b:0a:32:27:cb:30:31:f8:f1:70:7b:7d:
                    95:68:20:92:32:44:d9:55:f1:65:96:74:0e:98:01:
                    02:97:65:8e:1f:03:be:42:c2:24:e5:83:5b:eb:19:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:64:4C:F5:53:26:FA:37:CA:36:EF:31:4B:4C:1D:1C:97:37:87:E9
            X509v3 Authority Key Identifier:
                keyid:FB:AD:22:88:03:5E:40:56:EB:0C:EC:15:44:6A:0C:41:80:D2:6E:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-60iiANeQFbrDOwVRGoMQYDSbqQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/a6b0bf-c065-48d1-afce-88a6593a65cb/1/1-60iiANeQFbrDOwVRGoMQYDSbqQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:25:6d:1e:8e:c2:d6:9f:e3:19:4b:04:34:71:6a:6f:81:71:
         7c:3b:55:2d:30:bc:09:d9:e0:cf:77:6b:0f:61:4c:29:78:29:
         1b:37:3d:55:d0:63:67:fa:58:1b:ca:24:c1:8e:2f:1a:6b:29:
         98:6a:90:28:ae:b5:e8:23:72:2b:51:ad:54:4f:da:6a:46:3b:
         23:b7:87:47:b2:ba:be:a2:df:fc:3a:07:42:09:45:63:26:97:
         39:2c:3f:68:71:91:b6:42:f3:dc:30:26:01:b7:d2:54:f4:f9:
         d8:04:fd:d3:ad:af:5e:3d:53:d4:62:85:01:ce:64:25:43:db:
         c9:fd:6c:03:39:e5:ad:ae:9f:40:b4:b5:38:87:9f:8e:bf:a4:
         6f:1e:3e:dd:fc:ce:10:bb:58:7e:ab:e0:a4:f6:c0:f1:e1:ff:
         55:21:5c:86:8c:dd:87:62:fb:fd:b9:cd:74:2c:58:4f:5a:62:
         bc:1f:1d:34:5f:05:d6:28:d0:98:c9:00:fb:fd:04:01:eb:5f:
         9f:f0:1f:21:39:74:ee:3b:42:33:63:a6:dc:df:f1:eb:89:63:
         cd:7c:00:f5:27:25:9f:90:45:e4:fe:97:c9:97:28:71:8f:70:
         8f:02:9f:b7:67:6b:12:6c:79:17:01:87:ae:47:f0:14:94:1e:
         9a:6e:e7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:02:38 2026 by rpki-client