Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
File:                     1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft (raw, json)
Hash identifier:          ZCsbYb5V0CzGGgEzt3uzf2oR9KMLCxe6hNuu96FWGl0=
Subject key identifier:   43:C2:F4:67:0D:31:65:FA:FE:06:41:B3:4C:A5:2B:55:BA:E6:23:EC
Authority key identifier: D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD
Certificate issuer:       /CN=d54b82d719144002051da0f88c768de440ac20bd
Certificate serial:       01A0D1FFE4D059BFA295E126A8D2F1D09BCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
Manifest number:          1A69
Signing time:             Thu 24 Sep 2026 06:00:03 +0000
Manifest this update:     Thu 24 Sep 2026 06:00:03 +0000
Manifest next update:     Fri 25 Sep 2026 06:00:03 +0000
Files and hashes:         1: 1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl (hash: ukZu4XCJ3sC8laHfOx6aqOWgtQAul/WPykIB57U3Dv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 06:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:ff:e4:d0:59:bf:a2:95:e1:26:a8:d2:f1:d0:9b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d54b82d719144002051da0f88c768de440ac20bd
        Validity
            Not Before: Sep 24 06:00:03 2026 GMT
            Not After : Sep 25 06:00:03 2026 GMT
        Subject: CN=43c2f4670d3165fafe0641b34ca52b55bae623ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0d:2e:75:e4:cc:49:07:49:10:fc:a3:72:83:
                    8c:27:8b:1d:e2:2c:c6:56:c1:e6:1e:1b:05:b2:75:
                    e8:98:13:7d:b5:20:19:f2:42:00:87:fa:45:0b:ca:
                    74:e8:82:9b:19:55:f4:5c:d6:5f:5c:dd:aa:95:f6:
                    d4:70:da:57:c5:8b:f1:2d:6c:dd:8d:6d:4f:d4:eb:
                    5d:b8:11:2a:61:c2:93:18:ec:cf:d7:7a:be:f3:61:
                    4d:e4:7a:3d:09:ff:41:cd:61:9c:1b:a2:f6:ea:bf:
                    c1:32:d5:f5:e2:ca:68:83:8f:5d:9b:6b:53:fa:f3:
                    28:96:f4:09:19:fa:17:ae:a2:9e:8e:98:09:fe:44:
                    b9:6b:70:1d:e7:77:2e:85:cd:27:02:61:f5:07:e4:
                    85:b9:36:a7:8e:8a:2a:04:2e:d2:9f:cb:c3:fd:f2:
                    ca:c5:79:f4:db:0e:f2:8f:48:ac:d2:11:3b:e0:8e:
                    3a:6b:c0:aa:b3:f1:4f:5c:ed:0a:3c:b8:19:49:8c:
                    83:85:a5:a7:50:e5:85:da:ab:2f:30:67:89:34:26:
                    66:9c:c7:21:7d:ef:e5:ad:69:8a:5f:26:67:af:b2:
                    3b:6e:77:82:3b:21:38:38:2b:dc:7e:44:55:4c:24:
                    cf:75:fc:7e:76:f5:13:ea:fc:8e:6c:e8:05:aa:81:
                    15:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:C2:F4:67:0D:31:65:FA:FE:06:41:B3:4C:A5:2B:55:BA:E6:23:EC
            X509v3 Authority Key Identifier:
                keyid:D5:4B:82:D7:19:14:40:02:05:1D:A0:F8:8C:76:8D:E4:40:AC:20:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UuC1xkUQAIFHaD4jHaN5ECsIL0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/27cc19-7887-42fa-a62c-6e5f9d398279/1/1UuC1xkUQAIFHaD4jHaN5ECsIL0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:90:c6:ae:bd:09:fc:9b:4d:bd:1d:5f:f5:7b:59:5b:11:dd:
         9f:ea:44:a3:02:cb:a5:d0:85:ce:f5:b7:90:88:38:04:01:dd:
         07:71:91:d4:21:e9:31:ae:6e:c4:17:e3:a8:1a:ee:1f:46:1f:
         eb:2e:91:5e:02:ee:45:3d:d9:b1:f9:04:62:29:41:fe:f6:ca:
         0d:e8:4e:6e:b2:a8:b6:c6:e3:89:14:1a:b7:35:02:52:34:da:
         e5:23:e4:a6:41:74:04:5f:a0:be:19:f6:fd:39:7d:f8:b2:99:
         20:7c:aa:83:4d:5c:5e:13:3a:b7:3b:9c:e5:b6:04:26:4f:53:
         dd:34:fc:34:15:22:7b:39:71:b7:41:ec:3b:11:7a:23:8f:cd:
         64:89:2f:e4:1b:c1:79:33:6c:d6:be:18:6a:89:e0:41:1b:fe:
         b4:30:66:c5:be:09:1a:d7:78:52:ee:64:1e:0a:67:30:31:55:
         82:07:85:c8:ca:ed:db:08:17:07:e2:04:51:ef:48:e7:17:92:
         06:95:75:57:00:cf:97:d4:6e:65:68:9b:ba:a1:0d:e0:b2:ac:
         67:cd:b5:55:62:a9:ac:49:36:89:f9:f7:9e:1d:b5:7c:90:47:
         f2:b2:a6:0a:3d:13:72:f9:3a:a6:c6:68:8f:ca:73:3b:5c:e4:
         1d:e5:a4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:26:35 2026 by rpki-client