Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
File:                     i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft (raw, json)
Hash identifier:          KgePBjlCX806mTEQAJ7b89mcqm0mSsJEicUPiKjK6uQ=
Subject key identifier:   26:65:F5:08:0D:CD:5C:B8:70:BE:49:63:99:FA:E7:68:F1:01:FD:3E
Authority key identifier: 8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
Certificate issuer:       /CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Certificate serial:       01A129FB38AF82D291D46FAA1A5CD9536B31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
Manifest number:          18E9
Signing time:             Sun 11 Oct 2026 08:01:32 +0000
Manifest this update:     Sun 11 Oct 2026 08:01:32 +0000
Manifest next update:     Mon 12 Oct 2026 08:01:32 +0000
Files and hashes:         1: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl (hash: uXCoXPi2YAxXR4qm2Nyl849znXastYyjnpT1TRAmJqo=)
                          2: xsjfd4Jx3BB4y0pCdx-HAd--U4Q.asa (hash: zqYKxSs7XgXHl0zv74NbGiMSvU7OIHpKmcaUZgSvEN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 08:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:fb:38:af:82:d2:91:d4:6f:aa:1a:5c:d9:53:6b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b995951fd027fc739b04513b8f8d6bc678418c0
        Validity
            Not Before: Oct 11 08:01:32 2026 GMT
            Not After : Oct 12 08:01:32 2026 GMT
        Subject: CN=2665f5080dcd5cb870be496399fae768f101fd3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f4:a7:b3:a4:4e:f3:7e:3f:d1:56:ae:d8:79:
                    28:98:f9:34:85:3f:30:00:54:bc:fe:24:0f:38:df:
                    7c:23:ff:2e:25:df:74:53:ac:82:74:38:d3:6e:89:
                    f9:da:31:4a:63:73:3e:a6:14:d9:e0:fb:82:f6:47:
                    70:cd:fb:10:7c:fc:62:97:ee:8c:f2:47:6b:99:6e:
                    d4:1b:be:b5:d4:97:3b:d3:77:03:c6:19:6f:31:3d:
                    e9:f9:a2:44:f8:53:07:f3:b3:43:48:ab:a5:1e:e7:
                    f3:49:9d:be:9b:19:14:5d:a9:50:1a:d7:d6:30:fb:
                    64:fb:ad:77:a2:3e:d0:bc:d0:ca:6e:4b:c8:02:3e:
                    21:84:2b:29:11:27:4a:21:3c:de:eb:d3:d5:bb:c7:
                    90:74:48:0a:53:a6:0c:42:b2:be:b1:27:9f:0a:94:
                    23:51:17:69:1c:e1:33:8d:f1:f7:e7:cd:02:0b:95:
                    7c:49:94:bb:73:1f:e2:e2:1d:82:e2:0b:5b:1f:70:
                    a3:8d:49:3a:12:d2:c4:73:fe:f1:0e:7d:b1:65:c1:
                    18:60:cd:9b:f3:cb:68:2b:bc:ea:3a:9a:94:56:b0:
                    71:e0:4a:c5:b2:43:bf:2d:d9:c7:df:84:a1:66:0e:
                    8f:b2:a6:48:54:ca:df:3d:61:50:cd:0f:58:e2:d5:
                    ce:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:65:F5:08:0D:CD:5C:B8:70:BE:49:63:99:FA:E7:68:F1:01:FD:3E
            X509v3 Authority Key Identifier:
                keyid:8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:dd:fc:3a:cf:47:b1:f9:05:1d:f4:5c:f3:f0:6c:9e:99:62:
         6f:30:66:cd:58:e9:b3:85:ec:d1:0a:b6:81:98:b1:63:f1:56:
         14:62:22:d3:87:5b:aa:42:30:c2:da:d0:de:f2:76:66:f9:72:
         61:d6:af:3e:71:03:8b:a8:28:49:5b:0b:dd:1c:1e:85:88:d0:
         72:e4:9f:47:69:44:aa:c6:52:4e:67:ee:ee:b5:c0:ba:ed:f7:
         8d:5e:34:1a:e6:e4:2e:b0:61:a7:77:57:b7:f6:f5:e4:4f:f6:
         eb:8b:47:31:71:62:95:e0:18:eb:5a:30:27:71:70:31:e6:e8:
         b0:97:26:da:b0:b2:ca:b0:8c:be:03:2d:31:b2:e6:d3:62:9b:
         eb:8f:8c:16:40:27:9e:fb:91:3d:31:67:9a:dd:cf:7c:5e:bb:
         aa:25:05:9e:83:3b:91:2f:e5:f4:1f:79:60:5f:7b:f6:bd:da:
         e5:8a:80:31:0b:3d:02:a5:fa:3e:72:06:28:8a:cf:d5:a4:9b:
         d1:9c:c0:ee:21:7b:ce:19:7b:2f:4d:4e:0f:b3:5a:27:fd:62:
         fe:76:c4:6f:f0:b0:2e:98:e0:a2:b0:48:ab:be:f1:d2:72:f5:
         c7:60:1f:0f:27:27:3d:f7:17:ed:a6:3b:9e:ac:11:2b:91:5e:
         3e:4c:59:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEp+zivgtKR1G+qGlzZU2sxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOTk1OTUxZmQwMjdmYzczOWIwNDUxM2I4ZjhkNmJjNjc4
NDE4YzAwHhcNMjYxMDExMDgwMTMyWhcNMjYxMDEyMDgwMTMyWjAzMTEwLwYDVQQD
EygyNjY1ZjUwODBkY2Q1Y2I4NzBiZTQ5NjM5OWZhZTc2OGYxMDFmZDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfSns6RO834/0Vau2HkomPk0hT8w
AFS8/iQPON98I/8uJd90U6yCdDjTbon52jFKY3M+phTZ4PuC9kdwzfsQfPxil+6M
8kdrmW7UG7611Jc703cDxhlvMT3p+aJE+FMH87NDSKulHufzSZ2+mxkUXalQGtfW
MPtk+613oj7QvNDKbkvIAj4hhCspESdKITze69PVu8eQdEgKU6YMQrK+sSefCpQj
URdpHOEzjfH3580CC5V8SZS7cx/i4h2C4gtbH3CjjUk6EtLEc/7xDn2xZcEYYM2b
88toK7zqOpqUVrBx4ErFskO/LdnH34ShZg6PsqZIVMrfPWFQzQ9Y4tXOTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZl9QgNzVy4cL5JY5n652jxAf0+MB8GA1UdIwQY
MBaAFIuZWVH9An/HObBFE7j41rxnhBjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNTA1MjgtYTAyMC00M2M2LThkMDYt
NTczMGVmYjU4Nzc0LzEvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kNTA1MjgtYTAyMC00M2M2LThkMDYtNTczMGVmYjU4Nzc0
LzEvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgN38Os9H
sfkFHfRc8/BsnplibzBmzVjps4Xs0Qq2gZixY/FWFGIi04dbqkIwwtrQ3vJ2Zvly
YdavPnEDi6goSVsL3RwehYjQcuSfR2lEqsZSTmfu7rXAuu33jV40GubkLrBhp3dX
t/b15E/264tHMXFileAY61owJ3FwMebosJcm2rCyyrCMvgMtMbLm02Kb64+MFkAn
nvuRPTFnmt3PfF67qiUFnoM7kS/l9B95YF979r3a5YqAMQs9AqX6PnIGKIrP1aSb
0ZzA7iF7zhl7L01OD7NaJ/1i/nbEb/CwLpjgorBIq77x0nL1x2AfDycnPfcX7aY7
nqwRK5FePkxZbw==
-----END CERTIFICATE-----
Generated at Sun Oct 11 17:23:12 2026 by rpki-client