Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
File:                     MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft (raw, json)
Hash identifier:          OG0KobZzV0ycNggt6x5iHzQfvXi9wIWzTcwvRQP6SCw=
Subject key identifier:   4D:60:30:D3:7F:9A:6F:FB:B0:AC:C5:B3:6D:29:9C:8F:B4:1F:3E:02
Authority key identifier: 32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04
Certificate issuer:       /CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
Certificate serial:       01A17EBD0BC45A64964CDF369AD39DBDA687
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
Manifest number:          145E
Signing time:             Tue 27 Oct 2026 19:01:20 +0000
Manifest this update:     Tue 27 Oct 2026 19:01:20 +0000
Manifest next update:     Wed 28 Oct 2026 19:01:20 +0000
Files and hashes:         1: AczQ5m07bagbCSpYHKyOOUGJiuU.roa (hash: ZZkvh7a+nFDXqMju+v84npxtkZQE+y45PmWF7YuV5vg=)
                          2: E50dRzelevPp0RPUUn-X1whUhzs.roa (hash: ESKLNPEXcUQlYreIgYSRyGc6RpOOENWjDiinLW02gqM=)
                          3: KnXc9wIdUwOgGPZNVY_TSbLRRoY.roa (hash: Ur+szLOeyaAy0p6WFfKNCA4+hET9D0q8Orh268HfdLU=)
                          4: MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl (hash: p3uHhKWc9T8o+gt4UUyRvDJazm/e/anX0sC4ZgcGlpI=)
                          5: _YrGQaV-xv0pIG914t75tY-lgq4.roa (hash: mceOdmff8pDALeUaOfa99NehQO4QsbAd1TsnHGDmlpY=)
                          6: fyxsLRJZFn7CTFSJ2VnoPkiPR2s.roa (hash: 8HFUKsLTWzFpdFnaVvVRZkBC3eF7vcFOlN74+dbWE3g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:bd:0b:c4:5a:64:96:4c:df:36:9a:d3:9d:bd:a6:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322639b35e5d9d0fb3696fe2fd61cb6f4c3fa504
        Validity
            Not Before: Oct 27 19:01:20 2026 GMT
            Not After : Oct 28 19:01:20 2026 GMT
        Subject: CN=4d6030d37f9a6ffbb0acc5b36d299c8fb41f3e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:db:ea:40:22:2b:34:34:65:23:98:ed:a8:fb:
                    50:5c:39:7e:c6:84:c9:8b:ea:09:d4:27:fd:f2:c7:
                    96:cd:45:c8:a8:23:55:2b:ff:33:a1:f2:ca:cf:fd:
                    e1:aa:fd:ff:7b:45:02:8a:a5:f1:ff:35:c2:e0:13:
                    6f:2f:8a:41:37:20:78:7a:51:e5:20:53:74:42:e9:
                    d4:25:b1:16:2e:88:a5:dc:d8:95:b6:3c:05:c5:a6:
                    01:5b:4e:86:f7:2d:6f:70:a2:70:4f:2e:0e:6e:28:
                    de:ad:bd:6f:0f:e0:e5:7b:9d:3e:6c:5a:40:6e:aa:
                    e4:7c:f7:6e:a5:49:cd:b9:05:79:33:ea:de:80:76:
                    8b:20:7e:a7:e0:d6:1c:27:9c:cc:34:a4:f7:e3:2c:
                    2a:4f:e1:41:5d:b2:33:2d:b2:91:f1:b4:c3:a3:e5:
                    7f:8d:89:45:ed:ac:bf:5f:ee:54:e2:e7:97:3b:1f:
                    06:7f:9b:70:a3:e7:ae:ab:0b:a8:ea:75:1c:9b:70:
                    31:d4:4a:84:31:d9:37:9a:65:d3:bd:61:ab:b1:bc:
                    be:4a:08:85:98:12:82:a6:d8:e0:fa:41:74:27:5e:
                    f5:7b:fe:8b:e1:f6:74:2c:9b:b2:26:b8:99:b3:87:
                    ba:8c:b2:b3:27:d1:04:66:26:5b:74:0e:39:8a:e4:
                    c1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:60:30:D3:7F:9A:6F:FB:B0:AC:C5:B3:6D:29:9C:8F:B4:1F:3E:02
            X509v3 Authority Key Identifier:
                keyid:32:26:39:B3:5E:5D:9D:0F:B3:69:6F:E2:FD:61:CB:6F:4C:3F:A5:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/662fbf-5576-4595-892b-b5b3aeae98ea/1/MiY5s15dnQ-zaW_i_WHLb0w_pQQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f5:ba:77:e0:9a:57:83:e1:7c:16:d3:1d:48:eb:ed:19:d8:
         cd:9f:a0:df:e0:0f:92:f3:c4:9e:64:77:08:89:36:50:9a:b6:
         3a:35:c2:5f:cd:ea:cb:be:df:cc:fb:65:d9:ae:32:fb:af:23:
         1a:86:f2:61:68:8a:25:10:66:88:6b:57:21:ed:03:55:99:1b:
         d3:5a:c3:ec:4a:38:29:20:40:fd:a5:9d:48:42:c5:07:02:5f:
         75:00:ce:8a:bc:58:3a:56:57:57:d9:c6:f9:a4:78:98:57:24:
         1b:bd:9b:2c:0f:6e:81:5d:e3:1e:01:e8:7c:a2:fa:6c:c4:4d:
         a6:eb:72:46:bf:27:c2:b9:a2:91:32:68:67:3e:cb:92:46:ef:
         f8:59:fa:3b:cf:c0:9a:1f:24:10:00:0e:9c:17:c3:58:5b:77:
         57:ce:0b:73:7a:10:81:22:29:df:cc:47:b9:98:e5:69:d0:de:
         dc:56:ac:82:66:55:ab:75:a2:49:3f:a2:f2:6b:6a:5c:f9:c3:
         c4:9c:8d:eb:6b:8a:e0:fd:c3:ea:ee:1c:14:f7:1d:17:c1:65:
         a5:40:10:93:61:e2:29:b4:d9:1f:54:84:64:91:1a:29:bc:c1:
         23:cc:fb:ef:5d:c4:09:6a:73:33:79:e9:1b:b7:af:d2:34:4a:
         69:ae:d7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:18:20 2026 by rpki-client