Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
File:                     U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft (raw, json)
Hash identifier:          eHSV6IeFt0Ki0rmxMOUiZadFXa2ubeXi7EbZ3WZmyf4=
Subject key identifier:   88:FA:4A:23:CA:50:B5:98:98:47:D1:8C:55:CD:91:FB:B4:6C:5E:76
Authority key identifier: 53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF
Certificate issuer:       /CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
Certificate serial:       01A1404BF73597C2C4BCA29AF9BCD6A8D971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
Manifest number:          1A8E
Signing time:             Thu 15 Oct 2026 16:01:22 +0000
Manifest this update:     Thu 15 Oct 2026 16:01:22 +0000
Manifest next update:     Fri 16 Oct 2026 16:01:22 +0000
Files and hashes:         1: NnLh8TC21_I7aIxYqBVOxMDsYn8.roa (hash: abZc4byKeRvjtv7jM3QRQhlxOH/1CVxvgCdUA7yEv1Y=)
                          2: U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl (hash: AdKImjxaYkLjanOalPdnJ0Z3KPkinthvysHVu6CJK0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:4b:f7:35:97:c2:c4:bc:a2:9a:f9:bc:d6:a8:d9:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53f8bacc3659dcb3389aa47e3664a5f8284e00af
        Validity
            Not Before: Oct 15 16:01:22 2026 GMT
            Not After : Oct 16 16:01:22 2026 GMT
        Subject: CN=88fa4a23ca50b5989847d18c55cd91fbb46c5e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:aa:b3:96:a8:da:40:d2:db:c6:52:57:67:
                    08:ec:bc:a5:05:99:9f:3d:e2:77:0b:2d:fb:7f:84:
                    77:21:e1:a9:d4:c6:92:3f:dd:d2:e8:69:c3:d0:b6:
                    dc:a0:9c:15:30:f4:e8:9b:c1:80:f8:14:2a:5c:5c:
                    bf:2c:11:17:7e:8d:7c:c2:5b:28:be:df:f9:71:68:
                    40:60:fc:04:57:42:b5:8f:ca:e0:1f:81:db:eb:6a:
                    89:80:3e:ad:ce:6d:6d:b5:00:88:06:bf:48:03:45:
                    42:ec:85:8c:c5:57:0f:b8:f7:a1:2c:ba:31:c7:99:
                    a1:83:ca:a7:5f:aa:75:ac:e4:2b:70:d8:7c:e8:4a:
                    78:3b:11:db:a6:f7:bd:f0:bc:ae:52:7e:fb:d3:f4:
                    e3:63:e3:b6:3e:73:81:f6:55:60:c5:90:2e:12:d3:
                    f9:4f:a2:7c:d1:af:da:d1:7c:41:f2:93:c0:3d:65:
                    6f:d1:ba:1e:9e:96:d3:2f:bc:36:89:54:17:2e:c4:
                    dc:00:5f:e9:ef:64:44:42:d5:e9:99:89:21:b5:72:
                    ea:8e:5a:c1:49:9d:9a:69:b9:92:f7:3b:99:3d:38:
                    78:13:d0:af:7f:74:28:c7:31:6f:37:d9:22:8e:15:
                    5a:e4:02:85:de:e2:4c:47:75:b1:71:34:ca:d0:ac:
                    3d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FA:4A:23:CA:50:B5:98:98:47:D1:8C:55:CD:91:FB:B4:6C:5E:76
            X509v3 Authority Key Identifier:
                keyid:53:F8:BA:CC:36:59:DC:B3:38:9A:A4:7E:36:64:A5:F8:28:4E:00:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/b35d6a-8bd4-42bd-abdd-15107bca45b5/1/U_i6zDZZ3LM4mqR-NmSl-ChOAK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:33:66:29:42:70:80:d8:3a:a8:b6:18:dd:51:94:3a:06:3e:
         d5:b4:65:96:ff:06:1c:03:b0:94:70:01:97:82:16:77:28:a1:
         6d:3f:4b:36:4f:6c:47:e6:b4:94:49:99:ed:05:9b:dd:65:3c:
         10:44:5f:df:c0:a1:7a:02:9c:09:37:4c:22:aa:ba:ac:d1:e3:
         43:f2:cb:b8:38:d1:44:3d:d9:3d:0c:98:26:11:c5:4c:41:7d:
         ad:81:af:9b:6e:51:ac:d9:ad:02:ee:5b:32:57:ae:73:f1:43:
         d3:bd:c5:07:09:f1:a0:4d:79:38:e1:5e:20:a2:8c:89:82:dc:
         f1:e3:1f:40:7f:f2:76:3b:fd:42:79:3d:5e:02:0b:ed:43:70:
         24:9c:d4:01:4b:6d:4e:62:0e:35:20:8a:6d:bf:5c:e8:0d:5c:
         2c:f0:86:3d:1d:ad:80:43:ad:c3:95:10:3f:e2:41:4c:c8:97:
         e7:e4:db:e8:6b:ea:7e:e9:b3:33:4d:a1:79:8c:98:d0:6e:48:
         b6:2f:db:42:b5:21:cb:f1:c7:26:df:05:cf:3c:7b:a7:5d:1d:
         a3:e7:0b:cf:3f:89:b1:08:7d:d5:82:bf:18:5d:90:bf:8d:25:
         91:ff:a6:68:86:52:35:67:56:29:3f:ab:c3:f4:e3:21:3c:3f:
         9f:0a:59:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 00:23:54 2026 by rpki-client