Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
File:                     8SEJSHr0AKY-PLARo9VJ51H9LBg.mft (raw, json)
Hash identifier:          MRry1oj+LINDsUVdko5yT5KVOEANVlWAu/Lub2baiXs=
Subject key identifier:   26:D2:0B:46:BB:85:E6:F6:73:D4:8A:CC:09:E2:7A:FE:3E:29:A0:18
Authority key identifier: F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18
Certificate issuer:       /CN=f12109487af400a63e3cb011a3d549e751fd2c18
Certificate serial:       01A129C46BD919C44AC0327F9704CA78C4CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
Manifest number:          117C
Signing time:             Sun 11 Oct 2026 07:01:40 +0000
Manifest this update:     Sun 11 Oct 2026 07:01:40 +0000
Manifest next update:     Mon 12 Oct 2026 07:01:40 +0000
Files and hashes:         1: 8SEJSHr0AKY-PLARo9VJ51H9LBg.crl (hash: yAVKiiFBa+CcZFtoKZ8uqx/XPxvb2QkgSa1kPK/uOVE=)
                          2: FpQImozb1WQPa7ynxxGnFSr06JI.roa (hash: ifQklYq1Q4YF5Y36wrzWjlvtYcLa+HxFkFPijteQsCQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 04:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:c4:6b:d9:19:c4:4a:c0:32:7f:97:04:ca:78:c4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f12109487af400a63e3cb011a3d549e751fd2c18
        Validity
            Not Before: Oct 11 07:01:40 2026 GMT
            Not After : Oct 12 07:01:40 2026 GMT
        Subject: CN=26d20b46bb85e6f673d48acc09e27afe3e29a018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:48:7d:f9:53:d5:88:bc:0a:d7:0c:eb:f9:ab:
                    2f:11:09:8f:8d:b9:9d:ca:e9:c5:26:cd:d3:66:20:
                    56:fb:a4:94:09:69:25:87:fe:7d:46:0f:17:d4:7f:
                    8a:0b:9b:b1:60:95:15:cc:10:27:cc:65:3f:9e:67:
                    58:4d:bd:d9:46:d5:f4:b0:fc:29:b2:bc:e6:51:ba:
                    ec:2e:3d:0d:ae:e3:e4:39:82:43:97:b9:a2:29:a1:
                    ad:26:08:f6:c6:04:9f:64:68:54:f8:ff:c9:3c:b9:
                    06:42:ea:1f:25:42:fa:e9:82:ae:6d:d4:6c:f5:c7:
                    6f:dd:79:31:0e:24:37:99:9f:9a:d7:77:41:83:35:
                    5a:c4:67:e4:d7:fa:5f:9f:1e:ec:97:55:83:64:ce:
                    f3:85:a5:f7:48:21:af:6b:7f:b8:53:14:45:9c:2e:
                    de:ff:8d:09:66:84:a8:56:d2:a7:e2:62:86:02:7b:
                    74:f7:0c:36:34:5c:9f:98:94:aa:18:71:0e:f3:9b:
                    d3:c0:7d:74:7f:17:37:95:4c:f9:8d:b3:6d:58:73:
                    d3:c4:42:09:d6:c9:54:5e:e6:3f:51:6b:88:41:c9:
                    8c:70:26:82:b6:90:fd:d4:9c:c5:70:78:38:ca:cd:
                    b9:69:8c:a8:1f:8a:58:8d:43:bc:06:41:4d:1d:8f:
                    d8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D2:0B:46:BB:85:E6:F6:73:D4:8A:CC:09:E2:7A:FE:3E:29:A0:18
            X509v3 Authority Key Identifier:
                keyid:F1:21:09:48:7A:F4:00:A6:3E:3C:B0:11:A3:D5:49:E7:51:FD:2C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SEJSHr0AKY-PLARo9VJ51H9LBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/75cd17-0441-4a4a-b7ee-f05efab74f73/1/8SEJSHr0AKY-PLARo9VJ51H9LBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:5f:5b:b8:54:01:26:8d:92:de:45:25:5b:b9:70:f2:81:24:
         41:ef:5c:b2:26:47:92:ae:72:29:b3:92:0a:b6:04:ec:d2:ec:
         7d:2f:e6:4c:68:f8:64:11:cf:fd:63:6d:65:cc:ca:f6:ff:a5:
         f9:f5:cf:7f:06:53:23:ce:bc:56:53:89:10:3f:ce:84:bc:60:
         93:7c:89:76:bd:96:3b:78:5b:36:e4:51:fc:4d:5a:35:3a:f7:
         5c:18:1a:52:db:2d:17:14:7a:6e:07:33:bf:28:27:7c:6e:65:
         87:d4:7f:5c:16:57:6f:53:11:24:23:2f:3c:6a:69:a0:94:7b:
         ed:50:f3:a7:06:b5:35:24:4c:50:97:93:19:60:da:77:64:d2:
         d3:4a:10:78:e4:bf:8a:5d:0f:9f:a6:c0:01:bb:fd:9b:c6:76:
         c2:f5:65:44:75:00:e9:9a:f4:0b:d2:63:89:bd:3b:e0:1e:78:
         90:30:f8:4f:48:63:fd:a8:3b:31:13:95:27:86:3f:f9:68:e0:
         07:99:82:2d:b9:b1:a4:66:fb:fc:e0:11:96:56:58:61:e1:51:
         b7:81:c7:52:d6:42:d2:dd:1b:ab:f2:37:97:59:cc:ec:5a:47:
         18:a1:95:a5:23:04:b3:bd:6b:e4:d1:26:83:84:6b:8e:3a:8e:
         46:7a:a0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:27:49 2026 by rpki-client