Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
File:                     rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft (raw, json)
Hash identifier:          7qap2N9GwaB/tgbIqhGwe/nwCT26N0vfzzOny0zlABI=
Subject key identifier:   97:2B:F1:24:9F:C1:48:4A:F3:28:3C:F0:51:6C:5E:85:96:5B:4F:21
Authority key identifier: AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA
Certificate issuer:       /CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
Certificate serial:       01A146F2D75E673D6F5FE33F24487FD18B0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
Manifest number:          1B1C
Signing time:             Fri 16 Oct 2026 23:01:22 +0000
Manifest this update:     Fri 16 Oct 2026 23:01:22 +0000
Manifest next update:     Sat 17 Oct 2026 23:01:22 +0000
Files and hashes:         1: 5B3QzFFwuaIhWId1BpNkCEb5Rw4.roa (hash: njTH7vSGj/qysjszttcRpcexFHzl574nxZqTUKWfj4U=)
                          2: CA4GMUv1Mwa8-wTQziLXcZ8L4BQ.roa (hash: qM8jK7p3DVRcLAnm5qF0WSX4keV9dPzuUt50Yrxi1Bs=)
                          3: XOOM-dH84H7UxsX_I1xUFD2MCiU.roa (hash: yF0/ZzZszM6k3jBSRxWniYaHE+/EQQL9gELNFRwQiJ0=)
                          4: bih7K8JBPlCx0QMssDppjenS2Kg.roa (hash: ZZUdG1P9vhoPLmJtzKhgRXTTqDaj56u1xQZLUwjR+co=)
                          5: msniQ9k0_CkOjexD_PlJuidr5u4.roa (hash: VbMAM6GChJDxzsgDinm32lvUmxBoASqx+zQmVtXEqT8=)
                          6: rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl (hash: NTqDA96Pj5uicaH4mqir+9qRnA2pIXH/CUXH0Lm+4lI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:46:f2:d7:5e:67:3d:6f:5f:e3:3f:24:48:7f:d1:8b:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5eda0a1e7479c4ca78fe41c58d17e9d13b67aa
        Validity
            Not Before: Oct 16 23:01:22 2026 GMT
            Not After : Oct 17 23:01:22 2026 GMT
        Subject: CN=972bf1249fc1484af3283cf0516c5e85965b4f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:80:c0:a7:b3:2a:54:e5:88:2a:42:1b:09:2f:
                    6d:f5:ae:cb:ff:97:f0:b6:88:da:75:ac:4e:96:8a:
                    cf:4c:d0:9a:c6:99:ad:05:d0:57:74:4c:d4:b4:17:
                    e7:24:a1:a7:a8:41:a3:5d:0b:46:1a:38:6b:56:2b:
                    30:31:88:55:74:e9:74:ca:55:91:83:ae:bb:30:c3:
                    3f:ef:fc:c0:c3:5b:ef:22:67:67:a7:91:99:cc:12:
                    26:43:7c:9f:77:5d:6f:10:db:2e:4b:47:23:9a:b4:
                    21:a4:a2:12:ff:15:84:bb:42:eb:1a:bf:b7:2b:ae:
                    8b:5a:be:bf:39:47:a7:c4:75:fa:f0:dc:fa:9b:86:
                    3c:f3:f6:f9:88:13:e6:4a:5f:85:03:5d:48:ee:1a:
                    b7:92:a2:fa:04:ea:cf:3a:df:65:e3:66:de:b9:7f:
                    51:91:dc:70:ff:c6:ee:69:be:e2:7b:ea:77:01:ed:
                    79:49:5a:a8:dd:8e:a8:a4:e8:e3:d8:01:a8:75:8e:
                    c4:17:46:15:61:7a:94:df:b2:89:b7:6d:b5:db:d1:
                    be:d3:13:4c:01:6a:1a:ce:82:0f:0b:5a:78:c9:35:
                    f3:db:df:dd:66:5c:9d:e2:c8:a3:63:86:f6:e2:a9:
                    ee:70:2d:be:86:72:f5:c1:58:79:8b:64:ef:94:e0:
                    6a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2B:F1:24:9F:C1:48:4A:F3:28:3C:F0:51:6C:5E:85:96:5B:4F:21
            X509v3 Authority Key Identifier:
                keyid:AD:5E:DA:0A:1E:74:79:C4:CA:78:FE:41:C5:8D:17:E9:D1:3B:67:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rV7aCh50ecTKeP5BxY0X6dE7Z6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/febb18-e78a-4d12-80a2-944ce7eeb154/1/rV7aCh50ecTKeP5BxY0X6dE7Z6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:cf:d7:74:1b:f1:2f:bd:72:bb:9c:e8:3d:22:e3:98:65:3b:
         dc:8e:0b:75:1a:1e:f4:53:60:be:c4:da:06:43:1a:c4:2a:3c:
         ad:f7:b8:e1:98:ab:b1:1d:0d:57:77:ae:6c:0f:86:5d:cb:c8:
         b8:04:98:d7:34:d0:94:05:04:e0:77:0f:8d:d8:43:c7:b5:7f:
         09:91:7f:cc:c4:44:2b:6a:d0:ae:f5:40:bf:97:78:8d:e2:5f:
         bb:fc:0f:10:1f:53:97:16:80:39:ab:77:20:f8:53:fb:ff:3a:
         12:04:68:98:5a:cf:6a:1f:58:59:59:e7:46:df:80:5a:b7:00:
         a2:61:1d:53:ac:a1:05:1e:4c:79:f1:98:4a:46:bd:a2:51:f8:
         d4:45:4e:74:a6:2b:02:a4:32:58:cf:15:be:28:1b:7e:44:62:
         74:f0:b4:3f:32:ed:d2:80:a8:10:ec:1d:b7:0c:36:ec:55:95:
         7b:13:e4:64:79:e3:7f:76:6f:41:23:2b:1d:25:01:b3:65:52:
         b2:2f:20:85:02:56:9f:15:a6:84:08:20:07:e3:91:c6:8a:d2:
         c8:be:a6:4d:ec:6f:a4:c8:4b:8f:3c:dc:2f:04:dc:4a:62:c2:
         ce:09:db:05:fe:98:b8:90:e4:1e:4b:03:33:2d:12:84:38:33:
         57:51:fe:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 03:42:42 2026 by rpki-client