Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft
File:                     G7P94IsmaTklYxHhuyyD47IBmqA.mft (raw, json)
Hash identifier:          r0h2QLXauvJi127HieyY3bf3uC3k6Tu+CgQaGyfl0TI=
Subject key identifier:   29:FE:30:7F:E9:2C:9D:0E:79:CB:81:54:81:EA:AC:EE:68:39:FF:12
Authority key identifier: 1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0
Certificate issuer:       /CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
Certificate serial:       01A16E36842B5A16255D737A11BE0E5CF6CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft
Manifest number:          C9
Signing time:             Sat 24 Oct 2026 14:00:28 +0000
Manifest this update:     Sat 24 Oct 2026 14:00:28 +0000
Manifest next update:     Sun 25 Oct 2026 14:00:28 +0000
Files and hashes:         1: B2hGT1eFkagIo84BoxNvaIDMVIA.roa (hash: 573/CB1s6/sMNo4YjJ1CvHqqPGc0rLf2pK2SmcbOPLw=)
                          2: DmH5gRDpFfiT_eE74zyVFAM6RvE.roa (hash: Ln0A2hJEipplcNI/2hrqaUeztAp4seGSTDWnqMRb1zE=)
                          3: G7P94IsmaTklYxHhuyyD47IBmqA.crl (hash: E2K2cy6TdjqcUlGZ+eXM4jwLvLZUwCppSlSvN4WVj0E=)
                          4: RGj9rL1wMLQwVhDUkBrVStUmsnk.roa (hash: MikgO3NO0X9g8TO+4NRN4OmI0IeK7x+Z+Rwx4lGXqJA=)
                          5: eQm7ECQvHhq1dyKk8vMd04vqJAc.roa (hash: CmWXX4RJjI+TQOnk4iGUT3yi0OCbnJ7wMFgBAsopRvw=)
                          6: g_XYYFrdF-AczNrOHWQ-2hb8Qds.roa (hash: AFVhMc4KzVQiDDONWoVw7yjTSkqbbvsOLoCm0WsRWrk=)
                          7: pj30e_0kadqwjq0L3J55WAoKI8E.roa (hash: 5DdRoX+R76hdeHDFTO1xAik3lfSUfaDcDKvdi+WYi1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 12:48:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6e:36:84:2b:5a:16:25:5d:73:7a:11:be:0e:5c:f6:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bb3fde08b266939256311e1bb2c83e3b2019aa0
        Validity
            Not Before: Oct 24 14:00:28 2026 GMT
            Not After : Oct 25 14:00:28 2026 GMT
        Subject: CN=29fe307fe92c9d0e79cb815481eaacee6839ff12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:36:10:0b:7f:d8:b1:d9:8c:fa:83:db:85:98:
                    54:8a:37:b3:06:4e:05:c1:f0:7c:54:7b:58:25:b5:
                    8f:6c:a5:66:4e:da:c4:de:27:06:95:68:26:32:74:
                    01:e6:fe:a7:ea:3d:89:9a:d2:dd:aa:bd:65:36:d7:
                    b0:6b:a4:10:b5:2b:0b:75:5d:65:72:f0:7f:2d:df:
                    19:5c:30:7b:f8:24:92:6b:6d:e0:fd:18:c1:fe:7c:
                    22:7e:ef:59:f4:25:22:ec:f5:57:a1:d1:48:07:c6:
                    56:26:c5:3c:82:94:b2:8e:b9:92:c6:27:98:cc:52:
                    c2:a6:64:6b:76:07:7f:39:44:84:51:2e:22:38:d5:
                    90:41:52:1d:c2:2d:02:82:af:2a:36:b5:16:3d:c6:
                    9c:63:76:8f:9e:68:1d:91:9b:6a:11:c9:13:4a:6a:
                    e2:92:0f:de:e4:7a:7d:9c:6e:4d:f5:66:4e:78:76:
                    9a:f5:c4:8d:13:a0:f1:8f:77:d6:3e:b8:c3:96:97:
                    80:0c:41:23:b1:a4:9e:c8:31:6b:0e:c3:46:98:66:
                    61:f1:ba:70:4f:1b:6a:bb:a7:22:1d:ff:e0:ab:11:
                    93:ef:5d:1b:dc:32:3a:46:3f:e4:da:d4:67:37:48:
                    1f:e4:67:8b:97:91:d0:bc:1b:92:b5:f0:41:4d:da:
                    8e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:FE:30:7F:E9:2C:9D:0E:79:CB:81:54:81:EA:AC:EE:68:39:FF:12
            X509v3 Authority Key Identifier:
                keyid:1B:B3:FD:E0:8B:26:69:39:25:63:11:E1:BB:2C:83:E3:B2:01:9A:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7P94IsmaTklYxHhuyyD47IBmqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/35f171-b98c-459b-b0b5-fbc404d8de3b/1/G7P94IsmaTklYxHhuyyD47IBmqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:32:6f:2f:fa:bd:27:4a:99:89:9a:50:90:89:eb:b6:1b:fa:
         bb:55:19:da:0e:38:91:c4:95:ca:4a:19:2a:30:77:f0:81:f6:
         9d:11:e2:08:08:2f:d3:be:d6:ed:8b:fe:b7:1d:3e:66:ac:94:
         12:35:78:48:12:70:92:7c:0b:8f:08:a0:de:5a:0b:4e:0e:86:
         fe:3c:1e:16:c2:b6:8f:d3:c9:5f:2a:24:43:34:46:e3:ed:e4:
         a0:cf:7d:9c:1c:9f:e3:52:29:66:7c:e6:d7:21:a3:ae:3c:62:
         93:9e:7b:5c:d2:04:b3:58:83:be:17:29:1b:80:06:51:80:5b:
         eb:03:a3:9c:62:c1:9b:cd:43:ac:c6:b6:eb:97:87:b4:3e:24:
         3a:a8:37:69:d8:ad:f6:e0:e6:15:f0:5a:ad:b5:1c:9f:27:18:
         bd:c3:6b:69:10:aa:50:f1:41:4b:e5:e3:9c:e9:65:1b:f5:d8:
         75:84:20:85:ca:eb:9e:9f:5b:74:98:cb:87:d3:10:83:1a:77:
         27:09:32:f5:0f:a7:88:92:f6:8c:0f:f8:b1:d5:64:42:65:66:
         cc:40:47:42:d2:99:7a:87:62:65:d0:6b:45:33:80:3d:07:1a:
         82:70:50:94:98:89:1a:70:a4:5b:a9:9b:21:c0:60:85:eb:b0:
         8f:e6:0b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 18:54:06 2026 by rpki-client