Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
File:                     1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json)
Hash identifier:          BKbdBffYxi+Kcvub5ETD4xm4AGuGb+tLFuBoibmY/nM=
Subject key identifier:   44:59:2F:26:A1:5D:00:8D:BE:F4:2F:AE:EA:49:FC:65:D7:04:5F:E8
Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
Certificate issuer:       /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Certificate serial:       01A0D872C08DD477DF6117F4B7160F636CF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
Manifest number:          1689
Signing time:             Fri 25 Sep 2026 12:03:14 +0000
Manifest this update:     Fri 25 Sep 2026 12:03:14 +0000
Manifest next update:     Sat 26 Sep 2026 12:03:14 +0000
Files and hashes:         1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: TOOX4veY6Zah6xOYEFqseRUSzyLSLc3QPpPLo9Gk99I=)
                          2: qRy6ONe0R3SK-tgWlZzQz3yXI-8.roa (hash: 2lNtTexaTuQ64Sk2B9hHpKofwKN/Vg7RcO43ReydSmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:c0:8d:d4:77:df:61:17:f4:b7:16:0f:63:6c:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
        Validity
            Not Before: Sep 25 12:03:14 2026 GMT
            Not After : Sep 26 12:03:14 2026 GMT
        Subject: CN=44592f26a15d008dbef42faeea49fc65d7045fe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:fc:b2:8c:bb:b4:1f:57:0e:b0:61:59:23:
                    ce:a6:51:1c:39:a0:99:db:da:a0:20:45:4f:84:e2:
                    f5:3c:14:20:11:50:e3:d5:1e:33:30:20:1f:0c:d5:
                    45:e5:8f:dd:50:70:61:4c:c4:32:d1:4a:48:23:da:
                    85:a1:d6:a6:7f:b8:e4:54:82:ac:b7:f9:c9:98:f5:
                    ed:a7:b6:11:08:31:85:65:cc:13:a0:c0:aa:60:5b:
                    9d:09:1a:c1:ab:66:ab:2a:3d:27:53:65:67:42:7f:
                    67:8b:51:1e:a5:51:2f:9c:dd:72:75:0d:ba:b1:6b:
                    10:54:ec:50:65:e7:43:0b:d7:ac:44:4b:fd:e8:90:
                    1c:7b:bf:b9:69:af:57:42:2b:13:20:e9:f1:7b:09:
                    0e:92:c7:44:3e:a8:23:7b:fc:98:8a:89:8d:d7:d9:
                    77:52:e8:8c:46:8b:0d:62:98:df:92:33:5d:e4:18:
                    2d:10:d4:5e:1a:3e:92:71:0d:36:fc:f2:b1:2f:e7:
                    e8:a4:1d:37:be:39:03:58:08:d6:76:18:95:ca:73:
                    72:88:5b:1b:cb:de:a2:6b:fe:96:a4:e3:21:99:a3:
                    e4:b1:c8:d3:4e:b2:ad:62:f6:d4:65:38:b1:63:58:
                    1a:7a:69:17:58:d2:c2:84:60:f3:5a:84:82:11:b6:
                    6a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:59:2F:26:A1:5D:00:8D:BE:F4:2F:AE:EA:49:FC:65:D7:04:5F:E8
            X509v3 Authority Key Identifier:
                keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9f:87:e4:9a:93:3e:b8:ad:6c:45:e8:47:36:ea:a5:21:b1:
         d2:78:34:46:3d:a3:87:26:82:8c:2d:4f:89:34:d8:4f:0d:0c:
         6f:e4:37:63:db:08:2f:ec:16:e9:1f:70:01:86:db:b5:a2:8e:
         c3:34:3e:7b:07:ef:3c:52:cb:80:ca:83:e3:2d:b6:bc:71:f5:
         ed:3d:52:0b:0f:39:a6:8a:fa:6e:5e:a5:b2:71:d9:be:b3:58:
         13:d8:1c:3c:98:b9:3b:e7:bb:aa:04:ec:af:c0:6c:c8:15:1a:
         e1:25:fd:b8:ab:73:43:0d:56:46:87:34:ab:bd:2d:27:65:b6:
         a6:d0:c9:09:32:be:e1:3b:a3:3e:00:89:7e:4f:78:5d:e5:cb:
         2c:0a:63:47:1a:36:9c:39:b3:c1:de:59:5e:72:7d:99:b5:77:
         9c:14:2c:48:8b:6e:db:4f:3f:57:f7:92:2e:5a:1c:a7:fd:a6:
         70:54:1b:ba:0a:84:63:cb:dd:28:af:67:4f:fb:7b:21:22:a3:
         1b:f3:67:6f:82:f1:5a:88:7e:30:cc:6e:65:2f:34:de:47:e6:
         f5:14:17:b3:4f:3e:4a:85:a3:16:46:83:d6:3d:3b:ee:87:c4:
         2d:39:8a:26:84:62:09:f4:16:c3:7d:7d:7f:68:11:98:a6:8c:
         4c:88:38:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:20:16 2026 by rpki-client