Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
File:                     H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft (raw, json)
Hash identifier:          KdH0+j65KiMmGSiNhHdfBibe7nxHgUXRtBILqTxrz3Y=
Subject key identifier:   91:B2:3F:AD:E5:8D:E9:D0:04:DA:4B:8F:D0:12:B5:66:25:A7:10:4A
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Certificate issuer:       /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial:       01A1702517BA9139ACEF4364465E003A1865
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
Manifest number:          1AD6
Signing time:             Sat 24 Oct 2026 23:00:41 +0000
Manifest this update:     Sat 24 Oct 2026 23:00:41 +0000
Manifest next update:     Sun 25 Oct 2026 23:00:41 +0000
Files and hashes:         1: 1LwTV0768J6dRk8qC5hDLpAsU28.roa (hash: Tt7Jvp1n+IhGVJo847shEW7XeQAdzKOGRJPvl8SARHA=)
                          2: Bw0gbrbCVB-HoVgeJ9I8CiP3YmM.asa (hash: s5JA+uKeZsK2+gHJiM4h36vliqAxJYuG7Au1gknPnH0=)
                          3: GzoYbPuA6zt92uMBOAiHk0i8fMs.roa (hash: BhU8n2AYRLl+UcY3HBoFElDvFC16XHDPo9Q/sW3CcM0=)
                          4: H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl (hash: iux76S0v7y08jPWQmMd/4QDI/4XT4rp9Li8tPIIrycU=)
                          5: PPH0urtDpS_MEda472ZwCkPCXio.asa (hash: SxpZ02tCEqwvi7zZj6qIuvomh6wN/+YCs9ddviXBtmc=)
                          6: WlWWJjt9Bx1oCkJxTpZbHaU11Q8.roa (hash: 7iCn7aA9/98SqHuf3K5vlRI49Df9JrqkSps0IfUPR0c=)
                          7: XZjEEVTSvf1uFBOdMMSBuxOceJQ.asa (hash: V9xhtdGjembvaLEHZRxR9b/kPtaNNliazSgOsSJ//6k=)
                          8: mGCci6Pw4ws1s2CSrvlwPoNX68w.roa (hash: oF16LqvH0BJX/k1mLJ1/7VpPewRXGKd0nGQ5TY/auD0=)
                          9: nrMCeYu3mMuo_fDA-GvTCBFPlWA.roa (hash: eBvmstTRO+Qzu9U4Nj16cxuQx8JdP3s1HFl/0VPOS5I=)
                          10: obRejES73sQ5wKFJZqdpH-4y-rc.asa (hash: bS84HPNJTey4N7MFx/LFScYHC6eK2K0n9randn1r5fA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 23:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:70:25:17:ba:91:39:ac:ef:43:64:46:5e:00:3a:18:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
        Validity
            Not Before: Oct 24 23:00:41 2026 GMT
            Not After : Oct 25 23:00:41 2026 GMT
        Subject: CN=91b23fade58de9d004da4b8fd012b56625a7104a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7c:d2:4e:16:de:a0:be:bf:31:55:5b:3a:4d:
                    22:70:80:a8:88:76:1d:43:58:51:72:d4:48:07:8b:
                    7f:04:3f:cd:7d:9b:ce:c0:22:46:77:a0:7c:83:50:
                    97:63:10:8f:bd:c2:3c:00:44:29:ce:d1:95:ad:0a:
                    23:d9:e4:87:90:eb:13:17:fc:ff:61:ae:c6:8c:1f:
                    36:f6:38:94:e7:4d:94:31:71:1d:15:48:2d:26:10:
                    e8:d1:60:5c:2c:ae:57:83:03:56:8b:78:64:93:29:
                    ec:ad:5d:77:b7:3e:bd:31:90:49:7a:fe:f1:0f:d5:
                    4f:90:81:12:50:62:bd:74:81:ae:ff:a5:00:ea:39:
                    d4:2f:5e:0b:6c:3b:8c:17:54:75:2d:22:a8:a5:e1:
                    5e:7e:90:5c:b6:46:74:3a:3e:88:3a:2e:fc:4d:f4:
                    08:f4:08:e9:79:00:59:ce:79:86:52:96:ce:09:c7:
                    8a:30:05:1f:91:c4:1d:f1:49:e0:19:02:6d:0c:39:
                    6e:0c:ec:fe:59:8e:8f:12:d8:dd:36:2d:ed:c2:f6:
                    d8:83:7a:bc:bd:7a:a3:44:85:fe:ba:bf:88:c4:6a:
                    16:ba:1a:f6:c0:23:64:1a:f9:2d:1e:b7:a5:80:ac:
                    a3:fa:26:70:c7:61:db:5f:f9:a0:2e:ef:9a:5b:be:
                    08:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B2:3F:AD:E5:8D:E9:D0:04:DA:4B:8F:D0:12:B5:66:25:A7:10:4A
            X509v3 Authority Key Identifier:
                keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:1d:07:03:00:cf:81:41:61:f5:01:79:eb:2c:50:5f:5e:43:
         84:e0:ee:a8:7c:d8:4f:ea:22:d0:4b:21:c1:66:33:5e:bb:c0:
         a7:e4:9f:7b:9e:89:01:a0:e0:f9:af:bf:72:b2:5b:ce:ef:13:
         9e:69:5b:64:7c:10:9c:fa:ea:58:24:e5:04:41:a0:0a:19:30:
         fb:c0:96:0e:3c:35:f1:1e:bc:ba:38:2b:ee:84:19:88:e0:7b:
         36:89:08:32:a4:83:4d:4a:b1:37:dc:89:6d:ee:87:4f:9e:a9:
         cb:5c:44:56:2b:9a:96:6c:d9:f9:78:b0:f0:c4:2a:50:7e:09:
         c6:e8:cf:15:0d:75:70:c8:82:b3:e2:ff:fd:45:1b:de:fe:81:
         f6:30:13:72:60:77:30:26:19:d7:1d:01:25:ff:f8:2b:34:76:
         8e:96:22:c3:5b:8f:fc:b3:ca:15:30:44:23:45:73:40:39:9c:
         b6:66:da:e7:d5:36:01:c3:72:8d:14:85:1b:07:17:9b:1a:ad:
         ab:1d:dc:71:63:9b:dd:c4:a5:08:18:c0:af:1a:f8:98:c9:a0:
         4d:aa:4d:e0:dc:08:7e:34:aa:47:77:cb:d1:a5:2e:48:dc:aa:
         4d:b6:16:f0:07:2c:a1:69:2a:6c:51:9e:b0:c7:9e:fa:cc:51:
         ae:18:66:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:54:53 2026 by rpki-client