Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
File:                     mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft (raw, json)
Hash identifier:          KkvYAhanTkgffwWeuWaBX3r7i1332PAn8VwP+cd2gOM=
Subject key identifier:   CD:CF:2A:C7:73:C3:18:08:0E:E4:F2:F9:E7:38:65:7F:ED:6A:80:46
Authority key identifier: 98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E
Certificate issuer:       /CN=9863354a111af6d5e1ad10da38ad8144b6be868e
Certificate serial:       01A1193D68BECDA5B541E437E498F39CC277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
Manifest number:          0B89
Signing time:             Thu 08 Oct 2026 02:00:17 +0000
Manifest this update:     Thu 08 Oct 2026 02:00:17 +0000
Manifest next update:     Fri 09 Oct 2026 02:00:17 +0000
Files and hashes:         1: 3lc1Iu7hC-zHLMQkZNtii7oqg5M.roa (hash: AzZG+4D5GxDUpzfM6ZHMgxfiWGvCIzXIyJrcYsz9Als=)
                          2: _WqApLTSHnn-QALIm4js6GY_w-E.roa (hash: vRro0DgNa75sk/Unt/zDQwG9CVSw25Sr8T6Yt4LIK54=)
                          3: e7Z2PR7xiMg2qO87UOgZBfNHWVA.roa (hash: 2MJbHB4+HtGJ4wxkgZ0Dl95e/tJehFc1YChaP86nwFM=)
                          4: mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl (hash: BVrnqVHyDyEQ/ryyYDVdXILQyR2HUImotl45nKmAXJc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:3d:68:be:cd:a5:b5:41:e4:37:e4:98:f3:9c:c2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9863354a111af6d5e1ad10da38ad8144b6be868e
        Validity
            Not Before: Oct  8 02:00:17 2026 GMT
            Not After : Oct  9 02:00:17 2026 GMT
        Subject: CN=cdcf2ac773c318080ee4f2f9e738657fed6a8046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:24:20:af:8a:50:74:91:ec:04:42:23:3e:75:
                    31:dc:c5:a9:11:3a:40:3a:47:b6:61:e8:a3:d1:6c:
                    72:c0:ed:20:42:16:f8:d6:11:9f:47:47:e4:7e:61:
                    2f:3a:17:57:fa:3b:d4:8c:c2:d9:77:cf:c2:41:78:
                    82:2c:24:e0:57:3a:3e:13:cb:53:da:89:2a:ca:ec:
                    a3:c2:ec:91:6c:ca:66:b0:aa:8a:d3:42:93:6b:dc:
                    d0:46:7a:d9:6c:a4:35:fe:2a:28:47:84:7e:b0:da:
                    92:bb:20:f6:13:9e:4d:fb:10:ea:0e:29:b8:68:3d:
                    fb:e3:4f:2a:6b:40:e9:ae:2f:ad:8a:3b:46:c7:27:
                    7f:3e:d3:f0:d7:16:40:d0:a4:ee:f6:46:5b:20:6b:
                    8e:74:38:67:7c:ff:00:c3:d8:13:11:2b:69:7f:a7:
                    69:31:3a:cd:af:02:db:cb:10:44:96:df:d3:46:80:
                    36:3b:58:35:c5:69:6d:12:13:03:47:fa:96:32:17:
                    f9:ea:fb:a5:b7:eb:03:d6:36:9e:59:4d:d9:76:0a:
                    7c:52:9f:41:40:69:30:ce:a6:b9:64:2a:c4:18:fc:
                    c7:f4:e5:d0:bd:d5:f7:84:c2:a5:14:e4:b0:08:7d:
                    82:6c:e2:69:d8:9f:e6:d0:88:57:86:bb:b2:fb:77:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CF:2A:C7:73:C3:18:08:0E:E4:F2:F9:E7:38:65:7F:ED:6A:80:46
            X509v3 Authority Key Identifier:
                keyid:98:63:35:4A:11:1A:F6:D5:E1:AD:10:DA:38:AD:81:44:B6:BE:86:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGM1ShEa9tXhrRDaOK2BRLa-ho4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/bea847-a783-489d-ae4b-53f57504ef35/1/mGM1ShEa9tXhrRDaOK2BRLa-ho4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:e2:70:88:77:33:e7:5b:8f:76:a4:a1:5c:67:22:0a:50:5e:
         af:0f:89:9b:29:5a:a9:5b:85:51:90:d7:f4:6d:1d:73:50:21:
         36:29:32:b4:3f:7b:16:b6:00:29:36:81:ae:84:8f:b9:c5:f9:
         0c:9f:a9:0e:9c:76:34:65:40:e7:fe:4c:7d:fd:7f:80:ac:41:
         e0:68:a9:49:6b:17:bf:ac:44:0e:10:19:86:9f:c4:b3:4c:ee:
         bf:43:b3:cf:86:a5:7a:74:48:79:6e:ab:43:81:c5:c7:d3:2a:
         3a:3d:83:2e:94:ee:c7:59:c9:65:0b:56:ed:6d:40:6b:b0:7e:
         2d:9e:39:31:8e:63:ed:d8:50:91:eb:19:41:3d:cb:a7:36:67:
         c2:6d:b7:70:b3:54:03:08:31:b2:f4:a6:af:d3:bd:de:d7:f1:
         d2:1f:f7:7b:b4:64:d6:a2:eb:92:55:77:db:b3:7b:51:af:5f:
         3c:62:ac:93:e9:0f:44:bb:36:28:25:a6:80:c1:29:9f:d2:91:
         fd:28:da:1c:de:c5:34:89:34:1e:91:ca:7d:79:6f:69:60:10:
         50:d5:87:7b:ff:cc:ed:c3:fd:aa:66:4d:fa:bc:76:85:c2:60:
         c8:c3:88:c3:bc:8a:6a:bd:d4:b7:58:24:1a:9d:a3:47:66:c3:
         d9:db:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 07:21:44 2026 by rpki-client