Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
File:                     luWtU7_HOEDEJXEcAQRTVxBX3CM.mft (raw, json)
Hash identifier:          1RD1SVRH88QiLmewgQfpq4ZzSdC8J3dO7O6qBKj8+5c=
Subject key identifier:   8D:95:BC:DF:38:86:89:04:65:FB:5B:5A:4D:F4:42:76:58:83:C4:DE
Authority key identifier: 96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
Certificate issuer:       /CN=96e5ad53bfc73840c425711c010453571057dc23
Certificate serial:       01A1DC14CA3E1339532C580C17D047B6344E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
Manifest number:          09E1
Signing time:             Sat 14 Nov 2026 22:01:52 +0000
Manifest this update:     Sat 14 Nov 2026 22:01:52 +0000
Manifest next update:     Sun 15 Nov 2026 22:01:52 +0000
Files and hashes:         1: H_GEWT7z6ttbEt24HiB7J1QFRDQ.roa (hash: u1Rv29NW5fMjioWnWp4CaMR30l3FVNTJh80UQ7C1cZc=)
                          2: luWtU7_HOEDEJXEcAQRTVxBX3CM.crl (hash: 2ZLHhkqC7+psq42wEvoFfaOLi4eE+vBhaJTmW3e0fZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:14:ca:3e:13:39:53:2c:58:0c:17:d0:47:b6:34:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96e5ad53bfc73840c425711c010453571057dc23
        Validity
            Not Before: Nov 14 22:01:52 2026 GMT
            Not After : Nov 15 22:01:52 2026 GMT
        Subject: CN=8d95bcdf3886890465fb5b5a4df442765883c4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b0:1c:9f:d7:bf:15:05:91:02:3c:8f:fc:ae:
                    88:cc:66:23:ef:98:19:68:59:7b:e1:3d:71:3e:f3:
                    da:dc:69:0b:0f:94:0e:85:31:62:ed:8b:eb:ec:b4:
                    44:9d:63:3c:3d:c1:bb:0a:ed:41:fc:52:fe:85:58:
                    27:c9:fe:b4:9a:bc:12:22:95:ce:94:a9:2e:73:22:
                    cc:fd:a0:b7:56:84:98:1c:fe:74:0d:8e:5c:00:e0:
                    6a:e4:c9:27:12:db:6f:30:c2:30:b9:b1:3e:3d:9b:
                    15:d9:1a:fb:85:79:4d:ad:47:63:1a:28:dc:97:43:
                    13:02:73:92:cb:6c:0c:74:f4:36:a7:43:19:2b:74:
                    43:38:f6:37:a5:47:64:ed:7b:ff:8e:e0:f1:39:3c:
                    02:25:66:d6:4d:8a:53:38:4b:64:bc:4d:9d:63:d1:
                    62:fe:f4:25:2e:42:0e:65:74:d6:dc:7f:74:72:95:
                    73:31:55:f9:fd:bf:4c:fa:f3:f9:14:d2:cc:b5:58:
                    40:cf:c3:ee:b8:02:c3:b1:0c:07:d1:1a:b6:a0:8a:
                    7c:44:a6:42:0f:b3:30:b7:66:e7:86:8b:4a:d2:0b:
                    35:6f:38:7c:57:08:7a:11:44:d6:3d:32:23:13:55:
                    5f:11:6b:a9:4d:bf:ac:fe:4f:a3:24:af:cc:27:5d:
                    9d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:95:BC:DF:38:86:89:04:65:FB:5B:5A:4D:F4:42:76:58:83:C4:DE
            X509v3 Authority Key Identifier:
                keyid:96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:71:4e:13:59:e9:ba:51:5f:3f:6c:de:cc:20:06:ef:ba:31:
         a3:9e:6e:6a:6e:02:c8:6e:90:b8:82:75:fc:57:86:24:d1:04:
         27:d5:87:97:b2:0d:63:a3:ff:c7:01:b7:d9:32:8a:95:56:86:
         70:c1:1c:cc:e2:d3:e2:7a:cd:99:3b:ce:3c:f7:f2:23:51:f7:
         73:01:5d:39:33:93:97:13:09:a5:5e:fa:dd:c6:4b:a3:f2:a5:
         6c:10:c8:12:ef:52:63:f8:8f:8b:66:fd:56:2c:40:c9:b7:b7:
         33:96:15:b9:26:28:2a:12:0e:ae:b8:df:09:3f:1a:fd:29:6c:
         5f:4d:0b:b2:fe:ec:f8:72:9d:11:a3:cb:88:13:da:60:0b:13:
         ac:25:e3:f6:3f:8e:07:0b:61:dc:a8:ce:80:50:6a:86:05:af:
         8f:6b:0a:24:92:05:04:d8:49:bd:44:71:e6:fe:04:0d:53:63:
         26:d6:ea:7d:25:b5:a6:75:3f:0e:20:04:5a:68:b0:4e:ee:c4:
         84:28:7d:d7:0f:4a:7a:22:57:69:26:fd:8d:b6:9a:92:1f:f3:
         ec:0e:d4:e1:b6:e0:7e:00:05:55:02:41:5c:82:c3:38:54:8e:
         51:3c:63:cc:9f:71:80:b0:bb:dd:0b:31:ab:fb:10:36:48:e5:
         b2:57:56:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:52:42 2026 by rpki-client