Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
File:                     9Y-A0jqdiu1P4xH3IiCcldqarUY.mft (raw, json)
Hash identifier:          pAh/IyY/kZpbl7IPZeJMY0p5h9NZNHGpnXJSBtg32IU=
Subject key identifier:   E7:BB:FD:A0:D9:DE:19:B3:28:DD:47:4D:EB:8C:B3:60:82:8A:CC:71
Authority key identifier: F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46
Certificate issuer:       /CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
Certificate serial:       01A105127CC8C1EE162D838F869951B66C1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
Manifest number:          1164
Signing time:             Sun 04 Oct 2026 04:00:59 +0000
Manifest this update:     Sun 04 Oct 2026 04:00:59 +0000
Manifest next update:     Mon 05 Oct 2026 04:00:59 +0000
Files and hashes:         1: 9Y-A0jqdiu1P4xH3IiCcldqarUY.crl (hash: yiIeIYwOb2XX+IfD4PQO9lum7CLh7x60l2nVKTyX9VM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 04:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:12:7c:c8:c1:ee:16:2d:83:8f:86:99:51:b6:6c:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58f80d23a9d8aed4fe311f722209c95da9aad46
        Validity
            Not Before: Oct  4 04:00:59 2026 GMT
            Not After : Oct  5 04:00:59 2026 GMT
        Subject: CN=e7bbfda0d9de19b328dd474deb8cb360828acc71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:13:45:03:72:dd:1a:56:85:94:a4:ae:71:9c:
                    10:89:1e:a3:65:0c:db:3d:9c:54:55:c2:c5:37:86:
                    eb:01:c6:d9:16:34:5b:c8:9c:51:01:7e:de:55:3c:
                    ff:8a:db:d5:c7:09:c5:a3:d2:fa:ac:5a:6f:95:66:
                    01:04:a5:73:62:5a:41:56:96:7b:05:19:bc:fd:82:
                    c2:03:8b:4f:40:03:97:49:e0:26:55:53:1d:30:92:
                    60:a2:7e:52:b1:33:37:be:aa:63:94:2e:c4:3d:13:
                    6b:0b:d3:78:26:b9:d6:8e:76:ed:9c:ee:b5:53:0e:
                    6a:dd:f1:aa:b1:1d:f9:38:41:c4:65:03:ac:5f:22:
                    66:12:89:ed:ac:62:bb:6b:9d:d6:5d:ef:dd:a7:88:
                    11:47:a1:ef:35:84:23:6c:41:5e:0a:37:22:43:84:
                    79:d9:9d:67:f6:5a:75:3f:09:a5:b0:ac:76:68:57:
                    2b:7a:3c:c4:7c:ac:9f:6c:9b:1d:6b:ae:70:f8:ed:
                    af:92:9b:a6:ba:5e:80:f3:63:e3:cb:16:06:53:16:
                    0d:b9:59:c2:da:1f:b1:f9:af:bb:6c:4f:03:a4:0a:
                    1d:10:22:eb:3b:02:73:2e:67:12:60:b6:a1:a8:81:
                    bc:6b:71:79:30:e1:31:0c:fa:30:88:7c:28:f3:fe:
                    17:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:BB:FD:A0:D9:DE:19:B3:28:DD:47:4D:EB:8C:B3:60:82:8A:CC:71
            X509v3 Authority Key Identifier:
                keyid:F5:8F:80:D2:3A:9D:8A:ED:4F:E3:11:F7:22:20:9C:95:DA:9A:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Y-A0jqdiu1P4xH3IiCcldqarUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4ddaf0-7e03-45c1-8129-b272a79806f1/1/9Y-A0jqdiu1P4xH3IiCcldqarUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:cf:de:c6:f0:15:60:2b:36:5a:e8:4e:3e:6a:2b:63:be:23:
         2c:75:bb:3c:c6:78:9f:35:d7:c7:ca:1a:39:68:a5:74:bb:7c:
         4c:74:d3:34:01:ce:73:08:47:c7:86:99:f3:af:c0:11:94:07:
         6c:ec:da:e0:90:5f:89:31:6b:54:80:67:75:3c:58:aa:db:f6:
         57:16:14:e9:a4:ee:c7:7a:16:98:1b:30:9f:3f:da:22:78:c2:
         48:e5:95:39:c4:91:66:4b:b2:e7:a3:01:28:8b:ec:b5:4d:84:
         95:c1:fd:a7:88:8f:88:3e:71:b4:97:74:ee:70:69:35:ba:5d:
         88:6c:92:d5:52:82:6c:9f:a7:d7:f0:54:08:7a:2d:4f:c5:32:
         2c:9e:44:d9:cd:b9:a2:46:7d:bd:ef:7c:51:a5:87:95:4a:a6:
         9e:66:24:bf:7a:0c:30:f0:3d:4d:4e:27:26:1b:81:83:b7:f2:
         c9:0a:78:fe:28:5b:8a:15:a9:87:37:43:17:8b:c1:f5:69:b1:
         af:c4:96:8c:9d:9a:23:de:4d:c6:f4:aa:d8:8b:81:28:9c:8d:
         3b:27:04:03:81:f8:ab:cd:36:21:8b:1e:e3:44:32:29:54:69:
         53:f7:8b:26:7b:77:4f:7c:15:41:09:6f:de:43:c8:42:b0:8f:
         4f:ee:d7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:16:26 2026 by rpki-client