Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          Geq9byVC2SFJWKDYTnzLV4BrJwyCxS/p96Dr0sjEkMs=
Subject key identifier:   50:FD:B4:2B:F2:6B:00:B3:69:39:AF:D9:82:26:8B:56:F5:88:F7:18
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       01A11A86D971AADD6A861A7B23028CD2A08C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          1A90
Signing time:             Thu 08 Oct 2026 08:00:07 +0000
Manifest this update:     Thu 08 Oct 2026 08:00:07 +0000
Manifest next update:     Fri 09 Oct 2026 08:00:07 +0000
Files and hashes:         1: Ip7p_hL1VXdeRgj8FVGhTum4zB0.roa (hash: agYqlxFFSnuNhJD9cHkZJfqIOemy4XNVrJfaav2GJL4=)
                          2: MGqAhkKHBACRFaiNXYcP9SHiMFE.roa (hash: GZRYXJdlMwxnrdhoW6/XDsnMjgU/H78VBDuIRDqDxI0=)
                          3: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: gbyyvNVvzc14Jr7lFSv8eMKCCQHzEsHCB7y4LjOrRBQ=)
                          4: WjHsZr2LYotu7UixbhUPmyhufyM.roa (hash: UbFC6dvqvKaXgJmhKzkqauNjGk31aKocZ5d+hid0GEk=)
                          5: hL4nAbMjDcB0I8HfTfp0aJOETu4.roa (hash: HMgiqPXACPgRgXB4fWWx/eVqV6zK3UzAgCuz5lAzZEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:86:d9:71:aa:dd:6a:86:1a:7b:23:02:8c:d2:a0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Oct  8 08:00:07 2026 GMT
            Not After : Oct  9 08:00:07 2026 GMT
        Subject: CN=50fdb42bf26b00b36939afd982268b56f588f718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:44:d5:45:f5:aa:e2:0d:88:31:26:b2:83:65:
                    8c:71:36:cb:a2:af:d4:14:4b:1d:41:06:2b:fa:59:
                    c2:36:0c:1a:62:3e:0d:f1:2f:a6:25:45:d6:0e:ba:
                    1e:d6:65:68:96:e2:ea:22:f9:c1:97:8e:73:9b:0d:
                    60:c6:ea:8d:eb:c6:29:1d:4b:f0:73:e0:bd:d3:c0:
                    18:e3:1e:3c:c4:c0:53:c1:02:ce:61:60:a3:c0:49:
                    a4:50:40:7b:fd:a9:bb:dc:1b:f3:5b:38:01:b9:dd:
                    09:93:80:f7:01:59:87:ed:99:9f:d6:0d:b5:b9:aa:
                    a7:76:40:1f:c1:40:ea:da:c8:99:ff:d7:f8:21:ad:
                    0f:de:b6:ae:37:3a:67:f3:24:56:41:c2:89:fd:e2:
                    f6:4e:72:6a:76:b6:94:2b:f1:90:33:5a:46:b2:3b:
                    a6:21:af:b4:af:0f:f9:eb:ef:f5:bd:69:c8:c9:53:
                    52:89:e3:4a:b9:b6:bd:56:48:a2:f8:e2:fc:5b:3a:
                    63:30:35:2a:6e:46:71:81:35:3d:3c:24:d7:4d:4d:
                    ac:9c:2a:3c:5e:01:d9:e7:45:ef:44:4f:db:e8:14:
                    6f:58:6c:ea:c3:a7:9c:c7:53:f9:0b:de:22:88:f9:
                    bd:36:31:a6:e6:49:d2:cf:61:08:f9:c3:b2:b1:09:
                    95:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FD:B4:2B:F2:6B:00:B3:69:39:AF:D9:82:26:8B:56:F5:88:F7:18
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:59:e3:21:67:14:d5:a8:df:18:f0:31:2b:e7:63:94:ce:51:
         0b:1b:b3:c0:df:50:41:56:c6:61:18:15:63:78:0f:3f:df:fa:
         24:02:f2:ea:5a:83:df:d1:14:16:90:fb:cd:ba:e5:04:b7:2f:
         14:93:d1:d0:d2:80:55:24:39:6f:ac:03:c7:df:2c:b2:3d:42:
         26:f5:11:4d:85:98:45:9e:f6:c3:1f:77:e3:85:1b:d2:44:ce:
         3b:c8:bc:a7:f0:cf:01:11:8f:a3:cf:ff:89:6b:97:2e:f7:b5:
         f8:5f:5b:1f:c6:db:34:fc:7d:04:87:13:f1:f4:a2:33:13:1e:
         ba:33:07:97:e2:da:60:15:83:0a:ed:7c:81:7d:d5:e4:fd:94:
         61:ab:2a:9e:70:60:3c:6d:4a:13:a8:d9:99:d3:ab:84:6a:7f:
         cc:ab:09:1e:8e:b5:36:8f:e2:fc:1c:9c:c9:8a:7c:a7:54:65:
         96:6e:d7:2e:49:6b:b4:f4:b6:d0:05:ad:c5:4d:bf:51:83:84:
         00:95:ad:b1:12:ca:85:ec:8d:15:66:e2:61:57:3e:f8:58:51:
         99:0b:78:f4:56:93:8b:33:91:5d:f6:a4:91:23:59:30:e3:22:
         fe:c1:47:d4:32:27:6b:1a:e4:0c:42:33:fe:81:a5:c9:9c:ea:
         10:fb:79:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:42:21 2026 by rpki-client