Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
File:                     pkWmgpYFxtWOTgwadHTAo_MGjW4.mft (raw, json)
Hash identifier:          qyBGqLj5sWM6B+IDIl9X1+KzhuYb5xP+zkZf3dNjcbk=
Subject key identifier:   94:6C:02:5B:86:71:28:CF:6A:B8:6D:DD:9A:F6:CC:17:88:F0:F1:AA
Authority key identifier: A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E
Certificate issuer:       /CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
Certificate serial:       01A162694D8FBCD5E5E6E0C57CCB0FC0B856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
Manifest number:          0350
Signing time:             Thu 22 Oct 2026 07:00:30 +0000
Manifest this update:     Thu 22 Oct 2026 07:00:30 +0000
Manifest next update:     Fri 23 Oct 2026 07:00:30 +0000
Files and hashes:         1: jcjMa-7upncM2TRGZRTWQhfEsIM.asa (hash: 2VcC86tvnEUYj8Iwy6Xs+Guz1K51yD41MnnJU1wPR6A=)
                          2: pkWmgpYFxtWOTgwadHTAo_MGjW4.crl (hash: mi4KHl9w/orzYdGjdJnHlbJzWrd+Jf3CYSsqHR2jF3M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:62:69:4d:8f:bc:d5:e5:e6:e0:c5:7c:cb:0f:c0:b8:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a645a6829605c6d58e4e0c1a7474c0a3f3068d6e
        Validity
            Not Before: Oct 22 07:00:30 2026 GMT
            Not After : Oct 23 07:00:30 2026 GMT
        Subject: CN=946c025b867128cf6ab86ddd9af6cc1788f0f1aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:77:b5:d8:1f:22:91:a1:f8:26:3e:4b:c1:bc:
                    54:08:e8:b4:52:58:48:12:53:b1:6e:22:32:de:c5:
                    97:f3:4b:ea:89:f2:64:45:97:f1:bb:38:29:09:77:
                    e7:5f:2a:e7:27:34:bb:4c:8a:c6:fd:4d:31:03:3f:
                    70:e9:8a:0f:2f:fe:ce:46:06:70:ee:81:79:32:53:
                    97:b9:e7:38:fa:35:aa:d1:ed:87:f5:8c:f3:c6:03:
                    47:af:fa:96:16:50:23:4a:3b:0a:89:f4:d6:69:cf:
                    fb:4d:fe:06:b4:61:e4:36:74:0c:2e:a6:be:99:cf:
                    dc:15:15:12:d4:ec:13:1a:1f:9d:71:07:fc:f1:44:
                    48:bd:e5:47:b4:fb:f5:06:2c:c8:cf:aa:86:66:3c:
                    ed:1e:b7:7d:5b:8e:48:cd:4b:92:b6:52:be:07:94:
                    45:58:7b:33:65:f5:b7:ce:e2:97:42:f7:9a:f9:9f:
                    43:ad:f1:6e:93:1d:4e:8c:6d:c8:fe:c1:6f:b8:b5:
                    5d:95:38:c1:da:8f:14:06:52:6a:09:d8:89:e1:81:
                    07:67:48:69:cd:04:e3:16:0d:69:3b:38:9c:e2:b4:
                    97:76:2b:e9:01:a2:09:97:de:91:bf:74:94:33:45:
                    20:b4:77:97:0d:05:d4:30:43:f6:91:ae:a2:72:50:
                    74:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6C:02:5B:86:71:28:CF:6A:B8:6D:DD:9A:F6:CC:17:88:F0:F1:AA
            X509v3 Authority Key Identifier:
                keyid:A6:45:A6:82:96:05:C6:D5:8E:4E:0C:1A:74:74:C0:A3:F3:06:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkWmgpYFxtWOTgwadHTAo_MGjW4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e42097-5561-4b7e-9458-2d8f3b6e1b94/1/pkWmgpYFxtWOTgwadHTAo_MGjW4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:31:55:fd:21:6c:3c:3e:e1:25:94:d3:b9:7c:86:7b:b1:e2:
         82:db:99:ab:72:c6:62:f1:57:b2:87:c2:d7:27:b8:f8:d1:36:
         e8:1e:be:2e:09:96:af:76:8e:85:7a:ed:5f:2a:2e:48:3c:1b:
         ce:6b:74:e7:68:d6:01:d8:6f:40:f9:88:28:6c:c8:ef:af:03:
         f3:d0:12:5b:29:22:ac:17:54:ce:39:bd:9b:be:fb:e6:2d:d1:
         fe:a6:82:03:45:23:0b:2b:1f:b9:11:6d:ab:ec:f7:c5:dd:06:
         3f:4c:6f:5d:a3:09:d1:cb:86:1b:1c:60:da:43:ad:f5:fb:90:
         25:2a:db:99:4e:01:ad:e7:3f:8a:f6:26:60:17:7c:08:61:a1:
         bb:63:cd:de:db:e7:ff:77:d6:37:79:a7:74:b0:4f:c9:9e:79:
         f7:8b:db:4a:e4:83:dd:76:eb:b4:91:e4:08:ec:85:01:60:d4:
         0d:38:5d:d4:8f:4b:20:a0:26:c1:fc:fe:7c:09:27:71:25:05:
         72:4f:c0:c5:6e:d1:e4:4a:0e:0f:41:05:61:ef:99:51:29:3a:
         47:45:7a:16:47:1d:76:d1:77:f6:88:4b:f8:16:d9:c9:e1:46:
         03:08:42:1c:39:9f:d2:06:99:16:d9:89:c9:50:e3:ae:47:06:
         49:63:59:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 16:29:00 2026 by rpki-client