Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File:                     DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier:          6c/yQ5n/9qT9vnOSMQkz9PjGprGFzt4fAa/HiZs1T/A=
Subject key identifier:   E3:11:08:2E:98:8B:29:B6:23:12:8C:F3:B5:23:7B:A7:0E:44:7B:3A
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer:       /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial:       01A0FD2260A485FE87B98B7788541215E0AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number:          1A84
Signing time:             Fri 02 Oct 2026 15:01:23 +0000
Manifest this update:     Fri 02 Oct 2026 15:01:23 +0000
Manifest next update:     Sat 03 Oct 2026 15:01:23 +0000
Files and hashes:         1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: n2nEtK4q5V5c7gaZ9gOUNYE174OjZzaHCt9vSM7/sU4=)
                          2: uTNM_Qx3Kksos1PgtvUNZevyWHs.roa (hash: 5x2Iwvw5H8NZducy/95N1nopK5CCb4aO6OaFpQG4yP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 15:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fd:22:60:a4:85:fe:87:b9:8b:77:88:54:12:15:e0:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
        Validity
            Not Before: Oct  2 15:01:23 2026 GMT
            Not After : Oct  3 15:01:23 2026 GMT
        Subject: CN=e311082e988b29b623128cf3b5237ba70e447b3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6c:27:19:b7:a1:c1:f0:e9:33:81:3d:e9:b5:
                    a0:35:96:43:24:e6:84:f9:23:50:f3:7a:ac:05:55:
                    b1:bf:9e:4d:81:fc:75:e2:ce:b2:4f:99:73:9a:6a:
                    6e:96:e4:e0:cc:c3:5a:48:b1:84:65:a7:1d:3f:59:
                    47:95:c8:57:ad:87:89:2c:25:19:6b:45:1f:6c:7b:
                    87:36:8a:aa:51:e7:26:fd:95:50:b0:3b:a7:f0:eb:
                    61:21:62:a8:bf:93:4d:9f:a7:81:f5:e5:24:ba:3b:
                    9f:81:1f:6d:90:b4:01:8a:f9:e2:79:e0:2d:57:89:
                    8c:4d:b3:52:22:23:67:4c:a2:8e:3a:36:1a:b6:0f:
                    37:70:b7:13:51:31:2f:53:67:c9:18:7e:6b:6b:fb:
                    d8:09:d4:a0:92:aa:4f:9f:b7:d2:a2:c2:81:64:7f:
                    aa:0b:d2:e2:a4:c4:28:e8:02:9b:f5:3f:9e:16:69:
                    66:87:98:d7:22:de:e7:88:e4:66:4b:b2:65:c2:b0:
                    3b:be:55:ec:e0:8d:0a:42:09:82:8b:83:4f:d3:26:
                    ac:d3:77:2e:c7:5e:81:e0:db:c5:ee:27:c1:1d:89:
                    93:ff:71:43:a3:72:a2:d8:26:f6:04:04:88:55:8c:
                    83:03:fa:8d:c5:40:ac:24:fa:9b:00:ec:d7:3c:6f:
                    c4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:11:08:2E:98:8B:29:B6:23:12:8C:F3:B5:23:7B:A7:0E:44:7B:3A
            X509v3 Authority Key Identifier:
                keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:b4:ae:ba:9d:5a:44:de:c3:cc:15:94:8d:33:49:fb:19:b7:
         27:6a:bf:46:3b:75:77:e1:eb:01:ef:8d:b7:6f:f4:c7:db:df:
         21:07:4d:21:f0:5d:d8:2b:70:72:24:47:d7:1d:ee:8f:a0:c8:
         e3:bc:67:4a:71:5c:56:d3:83:c8:fe:b1:3e:cc:dd:5e:0d:ab:
         14:e6:b2:01:04:d4:f4:d6:0b:68:a8:e2:17:95:ff:a5:41:69:
         9c:c1:34:a2:f0:70:97:b5:3f:26:4a:b0:d7:8a:4e:19:6f:b6:
         23:09:64:2a:02:13:7b:b4:ad:d2:1e:a0:0d:75:91:48:d3:10:
         91:42:7d:74:33:e1:e7:21:5d:59:46:17:92:6f:18:4b:11:22:
         65:3e:05:b4:56:49:db:b6:ec:32:c1:f9:7e:5b:d2:d9:33:4a:
         10:9d:85:bc:f9:65:88:d1:b3:38:c8:e9:bc:a0:16:82:c1:ca:
         39:2b:80:56:68:91:ea:2c:98:3b:94:e9:34:bc:71:a9:c5:32:
         b0:aa:15:29:b3:3c:77:88:3a:78:2c:dd:d2:38:f1:c9:b4:86:
         6d:f5:8d:7d:f7:be:17:b7:44:ef:dc:88:5d:b8:ce:5c:b5:04:
         6d:94:1a:51:c5:61:e8:a8:7d:b2:86:87:25:6f:77:f4:37:18:
         1d:e3:aa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:19:02 2026 by rpki-client