Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
File:                     ReKp-3dwEClvm44hXuDbRGcXTS0.mft (raw, json)
Hash identifier:          6E7CF5gJz/X9rsbWicL8ZfFqzYIxqnpetB7z0fcpvSY=
Subject key identifier:   18:4B:5F:99:C8:49:E9:9C:68:73:92:C4:DE:DE:E4:E3:18:51:04:E0
Authority key identifier: 45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D
Certificate issuer:       /CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
Certificate serial:       01A168D999D5B635DB4ACFAC21E33CAF5CAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
Manifest number:          1ABC
Signing time:             Fri 23 Oct 2026 13:00:53 +0000
Manifest this update:     Fri 23 Oct 2026 13:00:53 +0000
Manifest next update:     Sat 24 Oct 2026 13:00:53 +0000
Files and hashes:         1: 1qB4lHdQE3G5BgpU7cFdF6FWfBk.roa (hash: Xb0xuBfRe7FwO8H+eAMIQNLLlYRIEueyRhLbYCR1L9E=)
                          2: ReKp-3dwEClvm44hXuDbRGcXTS0.crl (hash: ZOT6ILE6ZFxoNZPxXYM30SWK3eBoUj/u8iOOKlJ3HMQ=)
                          3: WthtcWvJR0bnXyUYIIyDtU_Ijpw.roa (hash: W4V4VKeFsQZDXA2GLDkXPjJ+JE3asR1EB7QgnFmVGmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 11:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:68:d9:99:d5:b6:35:db:4a:cf:ac:21:e3:3c:af:5c:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e2a9fb777010296f9b8e215ee0db4467174d2d
        Validity
            Not Before: Oct 23 13:00:53 2026 GMT
            Not After : Oct 24 13:00:53 2026 GMT
        Subject: CN=184b5f99c849e99c687392c4dedee4e3185104e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b9:6a:be:91:c7:7a:9a:ee:3b:b1:89:6c:11:
                    2a:28:28:61:e4:39:7d:db:56:b9:5b:05:0c:ac:78:
                    30:dd:c5:c9:36:94:20:7c:67:96:14:d5:02:de:ff:
                    25:f9:5c:6e:2b:d8:b6:1a:6a:b1:da:e9:92:fe:9e:
                    42:1e:d8:0c:37:52:a0:d5:89:c2:26:25:40:87:11:
                    16:64:f9:1c:66:97:23:2e:bf:ed:60:ff:59:9c:b0:
                    a1:db:35:7d:6c:8b:2f:eb:cc:f7:61:76:3c:eb:5b:
                    01:c0:99:94:04:83:3c:ea:a5:61:7f:81:d2:a0:61:
                    9b:4b:bb:d9:aa:0f:c0:f4:28:23:39:5a:9d:fa:10:
                    7d:ce:66:a4:54:dd:1d:00:0b:47:8f:5a:7f:ef:ab:
                    0f:4b:17:5b:62:c8:06:f6:51:f2:9c:47:6e:09:85:
                    04:f4:f8:d1:2b:28:d3:db:37:19:91:82:df:70:81:
                    7a:4c:c3:1f:1e:00:a5:50:9b:e6:d2:8b:93:b6:eb:
                    80:e6:5f:f8:23:36:27:30:be:32:2f:6e:14:ef:ea:
                    f5:38:33:0b:2b:e0:3e:f4:3b:49:a0:fe:a8:df:9a:
                    b4:db:e1:95:3e:8f:3c:78:ab:82:ca:f2:38:6b:77:
                    80:77:16:b8:f5:50:0c:b5:35:a8:1b:62:62:4b:d9:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4B:5F:99:C8:49:E9:9C:68:73:92:C4:DE:DE:E4:E3:18:51:04:E0
            X509v3 Authority Key Identifier:
                keyid:45:E2:A9:FB:77:70:10:29:6F:9B:8E:21:5E:E0:DB:44:67:17:4D:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReKp-3dwEClvm44hXuDbRGcXTS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/dbf104-1e2c-42e8-b28b-ebd3145422ea/1/ReKp-3dwEClvm44hXuDbRGcXTS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:8b:92:3e:a6:fb:a4:94:17:d1:f5:2b:4c:94:7e:50:72:5c:
         29:15:f0:4f:05:b6:1c:32:23:e2:ea:a8:1c:e0:e2:40:c8:cc:
         1b:60:52:1f:b5:ff:68:5f:aa:73:d8:80:29:dc:a0:a0:06:44:
         60:7c:72:d4:ac:c6:ae:ec:15:58:9d:96:23:96:d3:71:0c:b5:
         d7:59:7b:82:ec:d1:5d:af:d3:a3:61:90:8e:89:03:c9:28:92:
         49:e7:af:0b:02:7d:d1:b6:d2:14:52:87:a4:b8:77:13:60:dc:
         4c:01:3c:f7:4b:92:34:6e:66:95:04:a3:07:2f:d5:82:3b:04:
         78:47:e3:36:4e:59:48:d5:65:d4:36:f4:bf:7e:40:08:de:cc:
         ab:98:d0:2e:4e:9a:60:20:e2:c6:f1:d0:22:41:5b:6b:95:82:
         17:30:e6:5f:61:55:1c:60:03:d2:49:b6:ee:cb:24:9e:ce:68:
         d6:b3:df:0f:8a:b0:e2:a8:87:60:7f:ad:55:ad:2d:37:ce:b4:
         2d:94:08:87:be:32:0a:45:a5:20:8b:0f:87:92:fd:5e:63:af:
         12:ca:81:6f:35:0c:97:d4:60:ac:f7:d7:5e:1a:e3:94:8c:80:
         1e:2d:0c:d9:e6:28:2b:c9:c3:bc:87:a6:44:e3:d6:b5:50:c1:
         bf:fe:f5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 20:33:15 2026 by rpki-client