Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
File:                     FS1RhIHO0vhNARBPhx1k1EMB2zs.mft (raw, json)
Hash identifier:          Exe+Kwa/u/Gz0z4lk2gjKA0vHXLIlQ3T9yf/acygpzI=
Subject key identifier:   A8:81:B0:C5:7F:14:1F:A0:5D:3E:65:16:FB:F7:EE:A7:1E:A2:1E:19
Authority key identifier: 15:2D:51:84:81:CE:D2:F8:4D:01:10:4F:87:1D:64:D4:43:01:DB:3B
Certificate issuer:       /CN=152d518481ced2f84d01104f871d64d44301db3b
Certificate serial:       01A16498F11CFD9742B3D1D1F1008AB52D1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
Manifest number:          0139
Signing time:             Thu 22 Oct 2026 17:11:47 +0000
Manifest this update:     Thu 22 Oct 2026 17:11:47 +0000
Manifest next update:     Fri 23 Oct 2026 17:11:47 +0000
Files and hashes:         1: Au5cQGUMHz0QUWCqGVhBHUvuIC4.asa (hash: MOGrpoltXHKuWTkOjBVVbAVNThMbgRBXCLgrF0PB+rc=)
                          2: FS1RhIHO0vhNARBPhx1k1EMB2zs.crl (hash: tIJgIuZhVKtLz1Jsqi/9xShnwIwkcs2h8kqlxL5I0x8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 17:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:64:98:f1:1c:fd:97:42:b3:d1:d1:f1:00:8a:b5:2d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=152d518481ced2f84d01104f871d64d44301db3b
        Validity
            Not Before: Oct 22 17:11:47 2026 GMT
            Not After : Oct 23 17:11:47 2026 GMT
        Subject: CN=a881b0c57f141fa05d3e6516fbf7eea71ea21e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4d:a8:be:03:db:f8:ba:42:9f:57:39:3a:eb:
                    33:00:18:b2:74:48:1e:a9:5b:9b:12:b8:3c:a4:25:
                    5b:dc:14:7d:c9:ff:4c:be:74:98:c6:67:11:ed:ac:
                    5b:c4:5e:20:ef:3a:2c:a7:02:92:21:d2:49:87:36:
                    e8:e5:eb:fa:39:c3:b8:e1:0f:3b:6e:cd:78:7d:29:
                    ac:94:44:ce:81:a0:1d:1d:97:d9:3f:bf:38:19:d3:
                    69:a2:ac:c8:b5:0b:bf:b7:31:34:e5:12:73:78:47:
                    1e:ce:5e:60:5a:85:6a:c8:0d:53:e2:98:c7:d9:60:
                    43:5c:1f:e1:1a:c7:d4:df:15:6b:e7:33:73:03:8d:
                    a8:7e:e8:71:d7:01:b3:cf:73:a6:c0:22:e2:1e:f8:
                    3d:47:37:8a:ad:f0:2a:13:b3:e5:12:c1:4d:a2:c5:
                    68:e2:be:61:6e:62:f9:5f:34:5a:e6:7f:66:16:6b:
                    c3:4a:dc:67:f5:62:a0:63:34:e8:2e:80:cf:07:73:
                    da:c0:2a:b2:b3:1d:05:e6:56:5c:0c:49:5a:ea:c8:
                    43:b4:3d:b1:e0:69:98:37:a5:03:9b:49:20:c4:47:
                    ef:37:54:ca:9d:23:b8:8a:6f:8f:61:05:c6:47:51:
                    f3:97:47:0f:78:42:6f:fd:a1:96:e3:6a:08:d6:6a:
                    e0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:81:B0:C5:7F:14:1F:A0:5D:3E:65:16:FB:F7:EE:A7:1E:A2:1E:19
            X509v3 Authority Key Identifier:
                keyid:15:2D:51:84:81:CE:D2:F8:4D:01:10:4F:87:1D:64:D4:43:01:DB:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS1RhIHO0vhNARBPhx1k1EMB2zs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/357425-4150-4308-ba8d-ca56f6c1f5b5/1/FS1RhIHO0vhNARBPhx1k1EMB2zs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:51:ac:59:6b:81:28:6d:f0:f1:6e:88:4d:6c:42:16:df:36:
         af:39:48:89:49:94:02:94:cf:45:4d:49:56:35:3b:ce:53:40:
         fd:60:df:96:ca:5c:16:7a:c6:24:d1:b1:bd:de:31:d5:a1:6a:
         c9:7b:b0:f8:01:6d:94:3d:c0:c5:e4:d8:f5:34:30:b7:56:d8:
         0b:a0:54:15:76:6a:03:16:90:80:e2:48:a7:07:27:79:a0:dd:
         42:2a:df:29:57:1a:c8:17:5b:28:c4:4b:35:63:55:39:0a:b4:
         4d:c6:07:b2:7b:b6:a0:52:30:a4:f6:99:b3:3f:ab:6a:c2:74:
         e5:81:04:c5:bd:1a:e8:df:b8:15:ac:8d:88:ed:13:cd:9c:6c:
         a4:f2:06:ff:ff:f1:3c:dd:0c:24:be:ea:09:ac:d4:95:1f:2b:
         9a:bc:02:f9:b8:47:be:62:f1:f5:63:ab:43:09:85:a1:be:4a:
         a4:e5:b1:e6:fb:04:f3:a6:3d:f4:66:9f:af:c9:df:81:73:da:
         f3:94:79:6a:26:bf:8a:a5:c9:26:11:50:56:e4:a3:43:27:d9:
         0a:b5:74:f8:86:73:02:6a:e9:41:3a:9a:e1:42:72:03:dd:a5:
         ba:13:45:91:2d:24:50:2a:22:94:fd:fd:dd:5d:e9:81:89:32:
         49:31:b5:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:27:05 2026 by rpki-client