Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
File:                     ac7WLmmPOc-za-DE0cmEBfZ641A.mft (raw, json)
Hash identifier:          ICDIkJreRWb2JsSjYgZpVAXV30dAZDD7Jw578OdpLnA=
Subject key identifier:   8C:D5:B8:75:AA:A9:8B:EF:3B:25:DD:D7:1F:88:C3:40:A4:F3:94:75
Authority key identifier: 69:CE:D6:2E:69:8F:39:CF:B3:6B:E0:C4:D1:C9:84:05:F6:7A:E3:50
Certificate issuer:       /CN=69ced62e698f39cfb36be0c4d1c98405f67ae350
Certificate serial:       01A11597F29E33C350365767E9CF74EB9E53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
Manifest number:          0109
Signing time:             Wed 07 Oct 2026 09:00:41 +0000
Manifest this update:     Wed 07 Oct 2026 09:00:41 +0000
Manifest next update:     Thu 08 Oct 2026 09:00:41 +0000
Files and hashes:         1: 8ds30e27s4jEGttTs6YlBQM3z5s.roa (hash: fhyuHvz2U+aS6Bex74blw3zMPMfs8rwkJE+Axsibwvc=)
                          2: DABiD7uw5X1UDgK0KYm4pTweBTs.roa (hash: CdIof73ob606H6HEETNJAXQA/8lVWBNHp980E+YLvcU=)
                          3: XHiCg7-vOaMABA4CYBKSVf3rQRk.roa (hash: g1IQNPouH48EoFzQdEYNrlJEZkzgvbZrvrkCirhFzgo=)
                          4: ac7WLmmPOc-za-DE0cmEBfZ641A.crl (hash: d27yyrGYSEXPbSrKIH/FrxyBWs/6RoMpggyEctKOwZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 09:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:15:97:f2:9e:33:c3:50:36:57:67:e9:cf:74:eb:9e:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ced62e698f39cfb36be0c4d1c98405f67ae350
        Validity
            Not Before: Oct  7 09:00:41 2026 GMT
            Not After : Oct  8 09:00:41 2026 GMT
        Subject: CN=8cd5b875aaa98bef3b25ddd71f88c340a4f39475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1e:90:c5:42:80:26:d8:ce:da:a9:be:44:bf:
                    70:46:54:b5:cf:03:66:46:04:f5:18:a9:58:74:bb:
                    d9:27:6a:53:81:fb:56:e5:bd:95:16:d9:c6:e8:53:
                    eb:7b:a4:ee:c2:4d:2e:06:c5:8e:33:ee:83:4c:d1:
                    fe:e8:a5:8e:97:b8:4c:ef:79:a2:48:15:fd:bc:f3:
                    6e:93:51:38:74:55:8d:4b:ed:e1:79:d5:63:49:79:
                    36:74:c1:47:21:3d:14:66:a2:da:ab:6c:74:d9:d9:
                    0c:4f:7a:53:47:7b:12:1b:3b:74:ae:29:12:63:a1:
                    ff:de:f4:8a:da:58:9b:22:ef:af:5f:d0:d4:28:c6:
                    95:3d:bf:ec:5d:75:1b:43:84:f5:46:0e:c9:c4:29:
                    75:32:e1:b1:77:10:b0:26:2b:39:2e:c9:d6:99:74:
                    76:6b:fc:6f:9b:58:06:9a:47:2e:06:c8:ba:9c:d7:
                    e6:df:78:ef:e8:e5:26:03:93:a7:ff:36:27:bb:ac:
                    06:dc:1f:60:c9:04:c3:bb:1c:e6:95:e7:e6:36:47:
                    03:77:95:e8:4a:e3:65:cf:19:4e:38:88:bb:72:bc:
                    f8:85:c0:84:72:df:b6:43:2d:14:55:2c:3b:a2:19:
                    8f:2f:1c:c8:8c:18:c1:e8:86:74:a2:91:41:70:36:
                    31:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D5:B8:75:AA:A9:8B:EF:3B:25:DD:D7:1F:88:C3:40:A4:F3:94:75
            X509v3 Authority Key Identifier:
                keyid:69:CE:D6:2E:69:8F:39:CF:B3:6B:E0:C4:D1:C9:84:05:F6:7A:E3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac7WLmmPOc-za-DE0cmEBfZ641A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/9fe49f-9ed0-4db3-9be5-5c690447ba89/1/ac7WLmmPOc-za-DE0cmEBfZ641A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:df:86:c8:b3:20:9d:b3:bb:ac:63:05:82:09:ca:68:41:77:
         6b:d7:c3:f8:85:56:f2:ae:a7:e2:e1:47:05:19:56:7e:1d:0c:
         df:82:88:5b:4b:b4:9d:be:89:07:ba:33:44:c1:d1:9e:d2:b9:
         ef:13:1a:07:21:17:6a:ba:56:e3:ef:02:77:7d:8d:49:c7:d1:
         14:0a:22:24:d5:9a:1c:f6:cd:5b:7a:1f:15:c1:3f:09:0e:54:
         a3:aa:f4:6e:6b:cc:f3:6d:72:ca:e8:ce:42:cb:aa:08:a8:af:
         43:3c:77:f9:9d:7c:fb:c2:d3:63:f5:cf:7d:dc:7b:0e:ec:6d:
         19:cc:b1:41:a7:97:6f:62:62:a6:86:66:07:37:67:0c:5a:19:
         82:a1:a3:bc:e7:53:8e:15:27:90:14:1d:e2:4f:9e:9f:08:bd:
         0f:90:69:af:65:8c:2e:8a:77:04:26:1d:a9:b7:4d:98:d6:58:
         93:25:7a:ab:9e:cb:b7:81:5e:66:af:9d:0d:87:f2:91:ff:a8:
         23:5c:f9:ff:2f:5b:38:48:cc:c8:67:0c:da:56:bd:1c:77:2c:
         49:67:fc:1b:8f:d6:0f:e7:47:c8:59:b8:f8:75:1f:65:c8:50:
         bf:f5:b9:6d:8f:52:72:fc:fe:04:c9:b5:cc:1f:89:1d:09:22:
         68:2d:7a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:23:28 2026 by rpki-client