Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File:                     1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier:          COP4EaKmrp5ouj6vUDIOLiXCo/r0wLaL20dWJ6cG8GA=
Subject key identifier:   AB:95:0C:E3:AA:D7:84:E3:A1:72:8C:CE:F0:34:9A:ED:F7:8A:7B:80
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer:       /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial:       01A156661D8C342FD32E19ED39E47EEA2818
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number:          1ABD
Signing time:             Mon 19 Oct 2026 23:01:34 +0000
Manifest this update:     Mon 19 Oct 2026 23:01:34 +0000
Manifest next update:     Tue 20 Oct 2026 23:01:34 +0000
Files and hashes:         1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: 68/4XunLgwy9U18P6bEbUdmxNl3SrweNThqw+zFq+FM=)
                          2: 40tYHzrdIOKM0_j4QKh_7shzx8k.roa (hash: SKNQQTkqDQxf7nvw2qRuH0Vq4RF5cs3xZPCOte7W/OA=)
                          3: QNpprllplAM88mMrWtN3ag177fE.roa (hash: 5dP2zjfT0bTz8XtRVCAWieBHqUYv0AqhPnTwXU8eFn4=)
                          4: Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa (hash: kmr+HuErFhNT7cviIumckQWDHYCPiWsB0llSSAYvKio=)
                          5: dkTEhcSUjmDmfcgVaKjPvVY65ho.roa (hash: CEmoGVLgn+ZeP+7mTHI7wWOP1MgXpbR4Ij+5W74s23I=)
                          6: fXSStTtN6IqbqkCD3E5j3kC-YHI.roa (hash: zVgHJh9lJVijMpBB+dDgMK+AGLHEUW+Je1xWignFzIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 23:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:56:66:1d:8c:34:2f:d3:2e:19:ed:39:e4:7e:ea:28:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
        Validity
            Not Before: Oct 19 23:01:34 2026 GMT
            Not After : Oct 20 23:01:34 2026 GMT
        Subject: CN=ab950ce3aad784e3a1728ccef0349aedf78a7b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:95:93:5c:05:08:9a:a1:4f:f4:03:5b:00:
                    c7:23:c7:80:3b:5c:d7:c1:3c:fd:c3:8a:7b:c5:8c:
                    2d:a9:50:b6:0b:fd:74:14:1f:c8:9c:98:8a:b7:9f:
                    31:14:e5:cb:7b:0b:5c:6c:35:8a:65:a9:ae:75:39:
                    6a:32:fe:c3:62:32:b7:ee:5a:d2:15:14:1e:13:f8:
                    7d:02:ed:be:d9:b2:97:06:14:7f:fe:d1:1a:97:42:
                    85:f6:7a:7d:61:90:b9:cd:ab:d0:87:48:80:87:76:
                    c5:14:bb:5c:7e:6b:97:58:41:7f:ef:26:91:22:a0:
                    90:5e:d3:c0:a0:6b:bd:40:05:8c:6d:2a:1a:6d:e5:
                    1d:94:19:1d:78:b8:67:db:41:d3:4d:38:34:8d:0a:
                    ef:91:ef:70:aa:ea:91:2b:ae:f8:ec:93:4f:07:83:
                    53:43:c9:3a:74:de:d1:19:89:ff:58:9d:bc:be:08:
                    c0:e2:fe:da:8f:09:e2:17:a9:cc:b7:95:92:c5:de:
                    75:4c:45:c8:d1:0c:52:76:ae:ca:b1:4a:cf:40:2c:
                    98:c7:8f:4c:75:60:38:12:c5:1f:01:99:c6:3b:d6:
                    68:c7:5e:67:b5:88:a0:83:80:2c:08:43:b9:b4:19:
                    6d:56:7c:46:22:92:d6:ee:35:f9:4c:a4:91:f9:e1:
                    79:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:95:0C:E3:AA:D7:84:E3:A1:72:8C:CE:F0:34:9A:ED:F7:8A:7B:80
            X509v3 Authority Key Identifier:
                keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:a7:01:40:4a:78:25:c4:1f:33:15:cf:a5:48:81:15:0e:fb:
         8d:71:cb:84:1b:4b:8b:59:de:db:e5:99:e4:22:e6:59:29:ad:
         9a:23:0d:59:13:07:4b:53:59:40:16:16:76:f6:de:5f:6d:60:
         c4:ac:c4:2c:49:6c:0a:ee:bb:55:0c:90:38:4b:ac:2f:23:b8:
         8d:ac:d9:6e:2d:76:a9:41:35:5b:dd:15:22:92:18:64:ba:65:
         74:dd:1e:02:87:9b:5e:fd:ed:38:d9:56:4e:68:80:2a:bb:fa:
         2a:02:54:f7:87:b8:a3:1b:5b:be:3a:7b:d0:4c:e2:42:c2:a2:
         f5:0b:06:c2:c8:6f:8d:2f:17:0e:32:ce:9b:d3:ed:41:20:d5:
         27:27:aa:94:b4:ad:ef:0e:9a:38:5b:56:bf:a2:a0:a7:4d:10:
         36:31:dc:8a:a8:00:38:65:01:92:a6:af:3d:45:e1:4e:fb:3f:
         bd:72:75:1e:63:b3:4f:5b:87:be:6b:a1:29:51:eb:21:1f:a9:
         b5:8c:94:3c:d9:c8:f1:81:e8:83:74:08:c9:40:af:d9:9b:10:
         5f:b0:3a:77:02:9e:20:71:d7:02:09:ad:a1:5c:39:d7:1d:7e:
         ed:35:03:95:17:19:48:ed:31:33:06:ed:20:92:4d:44:b7:65:
         5b:d5:19:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 11:19:49 2026 by rpki-client