Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
File:                     Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft (raw, json)
Hash identifier:          ORkn/1CIEI58Xo8uiC8YXsindg2+YgzrxljBSPppAno=
Subject key identifier:   9E:C7:AF:69:A2:3D:DD:73:C0:C0:D6:B9:36:23:C6:5B:8A:15:3B:23
Authority key identifier: 2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18
Certificate issuer:       /CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
Certificate serial:       01A165A2144237B31C1D5B8F26D8001F8E19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
Manifest number:          01EE
Signing time:             Thu 22 Oct 2026 22:01:23 +0000
Manifest this update:     Thu 22 Oct 2026 22:01:23 +0000
Manifest next update:     Fri 23 Oct 2026 22:01:23 +0000
Files and hashes:         1: GU2GsgvvxDIzu0J3LT-2kkK8RMo.roa (hash: nP0lDARBEATLaWhYMKJWCgHhBeTpVKHXhkLXZPpWw+o=)
                          2: Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl (hash: N11ve2iTS59ot2cWgR7o6dzMKpq3KGAR+YFJUWLD3SI=)
                          3: Uny2MgmTOohOF4BGAwFHFYH0KJs.roa (hash: Hdl7jGTsKmTRUmRObQs3XRCDB7iUF6evKCo5QMlo1+g=)
                          4: ru7hTHED5bacQX5NiNWyNtNkE6E.roa (hash: Kxyrq99WXIYtPAR/nabYKrZwHSHfCnBmfTWCGs/Kt3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 22:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:65:a2:14:42:37:b3:1c:1d:5b:8f:26:d8:00:1f:8e:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ed9b0ee387c9afd15c7b7784005e86cc97e8818
        Validity
            Not Before: Oct 22 22:01:23 2026 GMT
            Not After : Oct 23 22:01:23 2026 GMT
        Subject: CN=9ec7af69a23ddd73c0c0d6b93623c65b8a153b23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9f:1b:cf:6b:7c:5f:6d:e2:fa:46:d0:73:70:
                    04:0f:4a:63:af:b6:85:dd:d8:46:9f:6e:da:ff:75:
                    e7:d7:67:64:8c:41:dd:4d:79:be:9d:8e:ef:91:04:
                    f4:24:f8:54:c6:97:9e:aa:b8:e3:92:8d:1e:41:2c:
                    c8:8a:8f:92:4d:56:de:f8:50:ff:75:ad:9b:42:b5:
                    ab:dd:8f:73:7c:eb:db:37:64:d7:d9:53:8e:2d:be:
                    66:9a:21:29:f6:c6:9d:a4:40:4b:a8:4c:a7:8a:d7:
                    45:35:02:d6:1c:dc:d8:29:60:fe:0a:ec:3b:6f:5e:
                    86:64:ce:84:8c:69:57:4a:cb:b1:e9:e9:31:d2:48:
                    3c:cd:97:15:19:7e:0b:a9:ce:42:f9:e3:50:fc:67:
                    d2:32:77:f5:24:27:ff:77:ca:ab:d1:92:8d:60:77:
                    d4:c3:00:25:bd:64:d8:10:d0:4a:14:b5:2e:f2:4d:
                    fd:37:5c:b4:a1:0f:d2:a3:b4:4d:32:27:84:2c:7b:
                    bf:c9:b7:a6:48:84:6c:c1:1c:57:9a:f9:4f:b3:8a:
                    65:90:74:e3:9b:c3:bb:76:10:11:df:ab:97:13:ba:
                    54:41:88:d7:b9:94:b7:d8:28:76:85:90:16:3b:47:
                    c5:79:da:cd:95:84:25:8f:82:20:72:50:eb:2d:ce:
                    44:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C7:AF:69:A2:3D:DD:73:C0:C0:D6:B9:36:23:C6:5B:8A:15:3B:23
            X509v3 Authority Key Identifier:
                keyid:2E:D9:B0:EE:38:7C:9A:FD:15:C7:B7:78:40:05:E8:6C:C9:7E:88:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/f0ad4d-d1c2-4f15-a199-e34255f5006a/1/Ltmw7jh8mv0Vx7d4QAXobMl-iBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b2:d1:cd:8a:df:8a:9c:47:ea:e0:82:46:8d:41:f7:d8:92:
         60:df:ce:bb:57:88:fd:d6:7b:7d:10:0d:9b:cf:4a:3c:33:77:
         6e:f8:83:2c:5c:81:d9:9c:18:04:46:50:70:fe:20:d5:f2:af:
         93:26:67:9a:58:48:fa:f9:62:47:53:b5:9c:4d:f9:0e:f2:a1:
         43:f0:b5:42:da:9b:8f:50:e0:3e:15:49:7f:3d:c0:c1:ba:9f:
         f6:aa:18:78:e3:59:e6:05:40:5c:8e:ee:44:67:23:6f:0b:2c:
         b8:93:d5:81:e3:fe:36:31:a7:30:a1:8a:c4:3c:3e:f2:df:5a:
         39:bc:8b:eb:f2:ad:f2:46:41:12:1c:90:eb:06:ec:08:51:9c:
         f9:8f:d3:48:9b:d3:dd:82:29:7b:63:82:34:c5:70:09:07:f3:
         59:ec:af:1d:80:02:55:18:33:62:e2:8f:93:30:3f:53:0c:94:
         3d:a5:c2:53:b2:86:fc:4d:30:3e:61:bb:0f:18:e0:9b:4b:29:
         b4:96:52:1e:62:cd:79:5b:32:7b:9a:3b:74:c6:17:49:ae:0e:
         87:f6:95:09:f4:ba:d4:52:ef:1e:c6:c7:b7:9f:20:e5:c2:7d:
         e6:9f:b0:ed:ab:62:ca:b2:6e:18:2e:23:91:43:2a:f9:54:62:
         3e:01:ed:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 06:09:21 2026 by rpki-client