Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/0pvgv6Vswmt22J1UoygpTq8rlWE.mft
File:                     0pvgv6Vswmt22J1UoygpTq8rlWE.mft (raw, json)
Hash identifier:          0uEzb/nAAiZHUqINgWqadkfTVs6SbkohxkHsxG/X/lY=
Subject key identifier:   13:FF:3A:E6:C4:DC:D4:7C:0C:97:E9:11:22:E9:AB:19:7F:07:86:15
Authority key identifier: D2:9B:E0:BF:A5:6C:C2:6B:76:D8:9D:54:A3:28:29:4E:AF:2B:95:61
Certificate issuer:       /CN=d29be0bfa56cc26b76d89d54a328294eaf2b9561
Certificate serial:       01A12AD6CD6D6F7AFF31963956A071FC7A38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0pvgv6Vswmt22J1UoygpTq8rlWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/0pvgv6Vswmt22J1UoygpTq8rlWE.mft
Manifest number:          0114
Signing time:             Sun 11 Oct 2026 12:01:22 +0000
Manifest this update:     Sun 11 Oct 2026 12:01:22 +0000
Manifest next update:     Mon 12 Oct 2026 12:01:22 +0000
Files and hashes:         1: 0pvgv6Vswmt22J1UoygpTq8rlWE.crl (hash: WAzknPBFyyb8lefKZHhd3H7czmxmz14LTV8rJ7OiqCM=)
                          2: 1-ALfXNVWrpMtEmbLlIOuoeX0afA.roa (hash: rd4jOBWNvS5fQ4jBAM8QD6wQ+VPz5/5NP5L0Zf9qrW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/0pvgv6Vswmt22J1UoygpTq8rlWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/0pvgv6Vswmt22J1UoygpTq8rlWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0pvgv6Vswmt22J1UoygpTq8rlWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2a:d6:cd:6d:6f:7a:ff:31:96:39:56:a0:71:fc:7a:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d29be0bfa56cc26b76d89d54a328294eaf2b9561
        Validity
            Not Before: Oct 11 12:01:22 2026 GMT
            Not After : Oct 12 12:01:22 2026 GMT
        Subject: CN=13ff3ae6c4dcd47c0c97e91122e9ab197f078615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d8:49:75:89:64:34:7c:68:fe:ca:60:f2:a5:
                    c6:21:95:a3:6d:f4:58:5a:c8:63:87:77:4f:a9:ec:
                    c4:2c:ce:46:6b:a4:d1:39:46:0a:b2:46:50:ec:97:
                    d4:66:ce:c3:58:6d:f6:68:ba:52:c5:6f:8d:2c:80:
                    d7:29:50:d0:45:7d:34:a0:08:17:f6:df:de:df:1a:
                    15:fe:64:4e:01:dc:b6:56:db:2e:bc:4a:0f:38:a9:
                    d8:d5:6b:23:2c:2b:d9:bd:0d:e7:09:4c:88:a2:35:
                    c3:55:59:f1:f8:05:f8:06:be:bf:07:f7:fe:c8:fc:
                    93:1d:81:37:31:cd:4f:51:9b:7a:ce:a8:ed:4d:d7:
                    5a:ce:5a:5d:ac:ce:a2:dc:c9:9e:b1:b0:db:1d:7d:
                    fb:81:e8:4c:72:b3:c9:42:c5:08:77:b6:fa:2c:bd:
                    39:27:f4:3e:63:14:94:d9:90:53:fb:fc:45:5c:4b:
                    7c:c1:e1:41:8b:b1:e0:45:0e:12:5b:3c:30:02:59:
                    99:77:4f:45:eb:73:35:88:0e:53:f3:d9:df:5a:f3:
                    e1:c8:38:0a:34:9a:f8:a4:f2:a5:ae:7a:b6:bd:9e:
                    fd:44:42:22:7a:3c:ec:97:f4:1d:e5:9f:1b:72:fe:
                    7e:98:bf:76:5f:92:2c:16:b1:4b:3b:08:2f:46:cb:
                    4b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FF:3A:E6:C4:DC:D4:7C:0C:97:E9:11:22:E9:AB:19:7F:07:86:15
            X509v3 Authority Key Identifier:
                keyid:D2:9B:E0:BF:A5:6C:C2:6B:76:D8:9D:54:A3:28:29:4E:AF:2B:95:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0pvgv6Vswmt22J1UoygpTq8rlWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/0pvgv6Vswmt22J1UoygpTq8rlWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/0pvgv6Vswmt22J1UoygpTq8rlWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:e0:0e:1a:06:e4:53:21:62:c3:b3:06:3c:94:21:a4:bf:01:
         97:39:7d:bc:ad:f5:e0:ce:a7:a8:de:db:91:66:e5:9c:23:e3:
         48:10:ad:4d:da:d5:9d:4b:b8:a7:08:0a:e7:2b:a4:46:35:eb:
         55:cf:12:f5:46:61:1a:8e:a5:71:53:08:23:c7:75:fa:37:3a:
         a3:4b:ac:74:0e:56:44:07:f1:7f:cf:09:83:2c:00:ba:72:54:
         7b:db:81:55:b2:ee:9c:93:19:ae:a6:0b:b0:e9:5b:93:bd:26:
         b8:36:1e:2e:b4:94:8d:90:ac:5b:ee:b4:41:56:6c:25:7a:bc:
         b0:ff:e3:1c:57:d9:60:9b:21:a2:c1:b6:3a:3d:3f:90:00:e5:
         91:f3:93:c5:27:0a:f4:b9:16:ee:48:ee:14:fb:86:ef:1e:31:
         23:df:da:4c:87:5e:ee:e3:94:97:3a:ca:9c:79:82:95:dc:83:
         ac:b2:dc:46:91:ef:00:ef:d9:a2:1c:44:94:aa:84:87:fc:04:
         71:c2:00:01:03:a7:c4:37:20:3e:3e:9d:6e:47:8f:cb:0d:59:
         99:42:21:b8:70:7f:95:e2:6e:64:de:48:bd:33:db:da:4f:55:
         e2:15:2e:bb:55:91:3b:9b:47:d4:8e:a4:23:b4:84:60:70:1d:
         cd:9b:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:39:10 2026 by rpki-client