Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
File:                     g8ED1lpU1q8e-6asPmNyICivK7E.mft (raw, json)
Hash identifier:          6eadd8xuNuBgsmh0f0nROZD5poWRCXL626PeOvBVGfU=
Subject key identifier:   3E:A9:6C:65:61:B4:9D:76:4E:BC:03:44:37:00:91:3B:8F:23:94:47
Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1
Certificate issuer:       /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
Certificate serial:       01A16FEEB2638EBCCDF12B176EC4128F241D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
Manifest number:          120F
Signing time:             Sat 24 Oct 2026 22:01:16 +0000
Manifest this update:     Sat 24 Oct 2026 22:01:16 +0000
Manifest next update:     Sun 25 Oct 2026 22:01:16 +0000
Files and hashes:         1: 3Ji8ZxtqU_lIwKa_SqT03tF5SWE.roa (hash: jTuElWfRQSD5SofMMRCQ0LeEwPmYlDKmyuYEtvYSFDY=)
                          2: C-g37o81zdQC9_zopBXPpyRUrjU.roa (hash: 2ZRtUbahVnYhC9Kf/nNbZfgsN5/nT4ars1+NMI+6Czk=)
                          3: W5VTroF4zcGApX3Giz89KR2_wWg.roa (hash: GNfQgd1tr7xOtZa17O8ZeusFNmCf6n9fTIUFI6Sv0mk=)
                          4: cWuGeJ6gM-3ve4HkKVmEZUSc7S8.roa (hash: P0kghOMwSQUMU4gKXJ4ASB+7Zwvt3QGVEmH46AdBNrw=)
                          5: g8ED1lpU1q8e-6asPmNyICivK7E.crl (hash: qbcsL/B84olVE9S3x7DDoo8SDXnIMtK7YLLjwPMjsYE=)
                          6: mI1bOyES1SUvd3jXkMpsFL9UDNs.roa (hash: G8pWjV9esRmq6YgXU83pAW+6b6j1UXEhnMOTBHJgNSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 22:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6f:ee:b2:63:8e:bc:cd:f1:2b:17:6e:c4:12:8f:24:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1
        Validity
            Not Before: Oct 24 22:01:16 2026 GMT
            Not After : Oct 25 22:01:16 2026 GMT
        Subject: CN=3ea96c6561b49d764ebc03443700913b8f239447
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:b4:ca:4b:0f:69:64:b4:32:26:3b:35:d0:
                    db:cc:63:08:57:61:45:67:b2:65:fd:ff:6f:e2:ce:
                    04:bd:02:fe:1c:f0:64:d0:e8:82:5f:cc:9b:84:03:
                    ae:de:77:1c:93:87:70:bd:75:d6:90:37:7f:38:ba:
                    12:cb:a2:57:11:11:d2:09:d0:3e:93:0b:01:0c:66:
                    69:ca:0d:e6:1d:ca:6e:1c:a0:60:f0:90:a5:84:bb:
                    9e:c3:e6:f1:e4:8a:0c:29:0f:cb:12:42:ef:59:aa:
                    54:e6:a2:78:f0:99:59:cc:44:c6:01:1f:9a:40:23:
                    3e:a4:20:18:af:b4:09:35:b0:2b:6d:a9:9f:e3:03:
                    54:34:53:61:c2:fa:94:3a:14:a2:d1:13:67:f9:86:
                    75:15:fd:7c:b4:c6:70:95:a8:1d:c6:23:51:6c:f0:
                    72:90:78:58:30:93:86:85:80:5c:40:08:98:a2:c8:
                    2c:d4:0a:0e:dd:43:c9:69:3c:20:4a:d4:9e:8d:52:
                    04:f4:4f:35:22:d8:4f:58:5a:b5:5b:4e:50:51:5c:
                    f0:9d:61:a9:b8:c3:17:eb:6a:dd:fb:c0:a7:3e:ac:
                    bd:d1:ce:22:99:b1:cc:be:01:79:83:b6:20:7c:20:
                    37:d1:af:ba:79:db:a0:a1:b2:0c:7e:51:20:e8:ab:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A9:6C:65:61:B4:9D:76:4E:BC:03:44:37:00:91:3B:8F:23:94:47
            X509v3 Authority Key Identifier:
                keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:36:4b:40:be:44:f8:c5:a6:0d:a2:6b:d8:80:e2:2d:d6:02:
         c8:92:1e:91:99:60:3b:a4:a2:79:56:45:eb:1d:fb:d3:9f:b4:
         29:cb:e9:e0:31:c5:f7:5c:9b:f0:bc:70:ab:52:39:6c:6c:2e:
         ac:b0:a4:39:bb:34:ad:d7:b0:eb:d9:a4:bc:c7:92:dd:33:2c:
         1f:54:d7:91:c2:46:c9:30:71:f0:ff:3d:0c:2e:ef:ad:16:5e:
         26:96:81:6c:d9:1b:15:95:fe:40:e7:0c:59:18:9d:17:35:94:
         e4:11:d7:7a:07:c2:cc:d2:50:d0:c5:ee:3c:05:04:95:61:83:
         fe:29:50:7d:41:ad:db:b2:78:82:02:fe:81:18:21:ec:0a:a8:
         07:bc:dd:b0:b8:66:59:c1:6c:61:48:40:08:71:c1:7f:20:19:
         8d:e2:0e:59:ea:59:ad:b7:a2:d9:87:04:4c:72:33:0c:b2:29:
         3f:b7:1c:dc:69:87:46:8d:18:7e:8d:a3:59:25:ed:be:be:fb:
         87:49:54:0d:34:25:8c:61:e9:f6:88:cd:fb:0c:24:b9:45:9d:
         9f:1d:89:d6:4a:a5:ec:4c:9d:3b:8a:2a:a4:6a:53:97:8b:93:
         7c:eb:91:d1:6e:50:14:8e:ab:af:11:e3:23:6c:b9:ad:a6:5f:
         3b:62:91:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:51:29 2026 by rpki-client