Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File:                     1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier:          ZmrpT07/sWgVer6EheYCTx5CNanXTMgqJszDg5JEgJU=
Subject key identifier:   83:02:0E:98:9F:78:10:75:0E:2A:56:84:31:E0:53:9F:E4:BD:D7:07
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer:       /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial:       01A13BC97D098D589916277920C3C8B76A6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number:          0FD3
Signing time:             Wed 14 Oct 2026 19:00:22 +0000
Manifest this update:     Wed 14 Oct 2026 19:00:22 +0000
Manifest next update:     Thu 15 Oct 2026 19:00:22 +0000
Files and hashes:         1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: iiSjWyYS+qdxyHOppdiSqsp3C4nWp07vOEecllKHvqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 19:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:c9:7d:09:8d:58:99:16:27:79:20:c3:c8:b7:6a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
        Validity
            Not Before: Oct 14 19:00:22 2026 GMT
            Not After : Oct 15 19:00:22 2026 GMT
        Subject: CN=83020e989f7810750e2a568431e0539fe4bdd707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a4:d9:55:d1:3f:36:0a:49:e9:52:27:5a:8e:
                    32:9c:86:d1:38:96:62:7c:29:e7:74:39:30:d2:c5:
                    a3:04:7d:7c:7b:22:25:dd:b7:82:6f:c6:bc:d1:4d:
                    3b:a9:dd:d2:1e:05:3a:09:2c:ab:5c:cf:6d:bc:7a:
                    56:25:08:cd:5b:6a:49:f9:b6:98:06:7c:26:a4:f8:
                    b4:33:d5:ed:57:1d:25:21:1a:8a:62:e5:04:b6:65:
                    eb:c9:35:2e:46:95:32:aa:a7:8c:3b:ec:fa:1f:00:
                    bd:57:6e:06:cc:b5:b1:cd:f1:b4:16:53:c5:ff:fa:
                    35:40:f1:58:67:d2:08:43:07:72:2c:43:ce:5e:5e:
                    e9:2e:28:71:29:06:fe:fa:18:53:61:06:3c:59:d9:
                    72:e4:f0:f2:02:50:58:ac:0a:22:87:66:44:33:80:
                    02:f0:94:24:58:40:c6:c1:70:8b:6a:a4:59:f8:d8:
                    02:18:4a:b5:90:fd:8b:73:11:fb:67:b6:cc:9b:a5:
                    e4:b0:0e:43:aa:70:38:89:dc:73:4e:72:21:4a:dc:
                    ce:77:e2:9b:9f:ac:17:ce:29:e9:45:a3:3a:ba:38:
                    99:14:5b:14:f9:f6:c3:2a:68:eb:46:50:69:38:27:
                    ae:44:73:d6:fb:59:4a:90:89:a0:11:94:6b:8c:93:
                    5c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:02:0E:98:9F:78:10:75:0E:2A:56:84:31:E0:53:9F:E4:BD:D7:07
            X509v3 Authority Key Identifier:
                keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:24:bf:b5:a2:4e:b7:df:29:1b:86:0d:74:8b:d5:c9:9e:48:
         e3:73:b0:36:3e:78:7c:32:ac:4f:e2:ef:17:54:a6:22:69:31:
         6f:84:44:63:41:ad:f9:0a:0e:29:73:f5:4b:d3:4d:2f:57:6c:
         bb:9b:41:29:f1:df:c2:56:01:94:e8:b1:ea:57:ab:35:03:d5:
         6c:a4:2b:02:c1:54:7a:d9:aa:ba:fd:b1:4d:ab:a4:f9:aa:4b:
         43:a7:3a:04:73:3c:bb:6a:46:b2:08:00:5f:64:a0:11:ba:98:
         d5:0b:4c:b5:bf:18:34:f2:57:2b:5e:d2:0c:0b:ef:e7:67:ce:
         85:69:d3:b0:b2:7f:7e:88:25:86:e2:02:37:44:91:e0:96:10:
         b8:27:0c:e0:0b:6e:01:28:47:c2:66:aa:ec:7f:03:12:b9:90:
         b8:d5:e0:e6:d4:96:18:8e:4d:f6:6a:f2:14:f2:60:67:ec:c9:
         32:48:38:60:ce:cb:5e:46:ff:36:75:67:d8:cf:26:50:aa:1c:
         95:e4:8f:40:cd:8e:58:0f:35:4a:a3:db:3b:d0:6c:f7:22:9a:
         39:9b:c7:ba:6d:90:a9:a1:d9:b6:f6:64:1e:04:a9:70:a9:3f:
         89:62:76:b9:66:07:64:f7:ff:99:c6:07:0b:43:3a:7e:dd:25:
         47:10:a5:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE7yX0JjViZFid5IMPIt2psMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3MTg3YTBhYmIzZWVlNDExMDMzOGI3ZDhmM2Y3ZTdlMTI1
YmU2YzQwHhcNMjYxMDE0MTkwMDIyWhcNMjYxMDE1MTkwMDIyWjAzMTEwLwYDVQQD
Eyg4MzAyMGU5ODlmNzgxMDc1MGUyYTU2ODQzMWUwNTM5ZmU0YmRkNzA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKTZVdE/NgpJ6VInWo4ynIbROJZi
fCnndDkw0sWjBH18eyIl3beCb8a80U07qd3SHgU6CSyrXM9tvHpWJQjNW2pJ+baY
BnwmpPi0M9XtVx0lIRqKYuUEtmXryTUuRpUyqqeMO+z6HwC9V24GzLWxzfG0FlPF
//o1QPFYZ9IIQwdyLEPOXl7pLihxKQb++hhTYQY8Wdly5PDyAlBYrAoih2ZEM4AC
8JQkWEDGwXCLaqRZ+NgCGEq1kP2LcxH7Z7bMm6XksA5DqnA4idxzTnIhStzOd+Kb
n6wXzinpRaM6ujiZFFsU+fbDKmjrRlBpOCeuRHPW+1lKkImgEZRrjJNcvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIMCDpifeBB1DipWhDHgU5/kvdcHMB8GA1UdIwQY
MBaAFNcYegq7Pu5BEDOLfY8/fn4SW+bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hMTdlZmYtYTg5ZC00YTNiLWE0NjEt
YzgwMzkxZWFjOWU2LzEvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hMTdlZmYtYTg5ZC00YTNiLWE0NjEtYzgwMzkxZWFjOWU2
LzEvMXhoNkNycy03a0VRTTR0OWp6OS1maEpiNXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCS/taJO
t98pG4YNdIvVyZ5I43OwNj54fDKsT+LvF1SmImkxb4REY0Gt+QoOKXP1S9NNL1ds
u5tBKfHfwlYBlOix6lerNQPVbKQrAsFUetmquv2xTauk+apLQ6c6BHM8u2pGsggA
X2SgEbqY1QtMtb8YNPJXK17SDAvv52fOhWnTsLJ/foglhuICN0SR4JYQuCcM4Atu
AShHwmaq7H8DErmQuNXg5tSWGI5N9mryFPJgZ+zJMkg4YM7LXkb/NnVn2M8mUKoc
leSPQM2OWA81SqPbO9Bs9yKaOZvHum2QqaHZtvZkHgSpcKk/iWJ2uWYHZPf/mcYH
C0M6ft0lRxClGw==
-----END CERTIFICATE-----
Generated at Thu Oct 15 03:34:46 2026 by rpki-client