Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
File:                     E5Mngu53WJkEBPocz7CewjqGEj8.mft (raw, json)
Hash identifier:          YK1dGWa+p4jWouQGFZt6PmfKND28BQOwVlbS/vxOLgM=
Subject key identifier:   1C:A4:6C:D6:69:2D:84:47:94:3F:17:02:5F:BF:54:B5:AE:AC:0A:2C
Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F
Certificate issuer:       /CN=13932782ee7758990404fa1ccfb09ec23a86123f
Certificate serial:       01A11BD0E5781371C1854B63ED39A074B3CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
Manifest number:          16E7
Signing time:             Thu 08 Oct 2026 14:00:36 +0000
Manifest this update:     Thu 08 Oct 2026 14:00:36 +0000
Manifest next update:     Fri 09 Oct 2026 14:00:36 +0000
Files and hashes:         1: 8TnB_Z89mvNE4vBXTZiFEl23tYE.roa (hash: 2ClpJ+kajbpfZOtIDtzImmEyyO+3DqegmuU+x4tETNI=)
                          2: E5Mngu53WJkEBPocz7CewjqGEj8.crl (hash: +3uU9VL2siMvWcBj2SiJXFcUZWOSOHbHDtCeKjLtbSc=)
                          3: LZPVWazUJHKsVwXB0Q5QFOX_U4I.roa (hash: e8wyE9wUQVdgZv92jtZNgewyht9dy7i4a6DuplyRPmE=)
                          4: _LkpRRARlMX2HSdxwIO5dOZICSc.roa (hash: J2+f3Tq3pA1xUwTt3sMx5nZNmV2E6UloLE/wFxA+mpU=)
                          5: fg5DQWG7u5wnOMunM-jUQ-7qT2w.roa (hash: LM7RxWBrFS25rPx4UzRlTNuZ/VgoDeJ+Tu9Rzj/nASE=)
                          6: kDc0T-wYc_NGJ-Etnedce11jNMQ.roa (hash: Q1JN1Iy9aoT7dirXksooE/1wLbmA+C3mydNCksgN+aA=)
                          7: yw4JQH3GwSpr0HqMrPTktCoX9Yc.roa (hash: C5hf4s/QdWtojHyCQ9hOA8bfaE8MjslJ2kdsyGmhhwc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 14:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1b:d0:e5:78:13:71:c1:85:4b:63:ed:39:a0:74:b3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f
        Validity
            Not Before: Oct  8 14:00:36 2026 GMT
            Not After : Oct  9 14:00:36 2026 GMT
        Subject: CN=1ca46cd6692d8447943f17025fbf54b5aeac0a2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:80:a1:d8:65:5a:fe:b1:69:92:c1:55:8a:8e:
                    01:ce:b5:d1:d9:6f:c2:14:f2:fa:a3:cf:f5:f1:40:
                    06:98:87:cf:eb:84:ce:c0:27:cb:3d:db:c3:ab:6c:
                    9a:20:9c:e2:81:63:dd:8d:29:a9:aa:57:f9:c3:b8:
                    a1:c1:6b:a6:17:2e:27:b2:aa:ee:52:71:46:bf:9c:
                    3c:dc:4c:5e:d0:29:d0:33:98:0f:57:65:c0:fd:f4:
                    0a:43:90:4d:9f:ed:be:86:c1:50:12:0f:51:e8:e8:
                    ac:98:a9:e0:fd:23:36:15:57:c0:e6:28:48:f8:f4:
                    97:d8:c5:65:0e:ae:04:76:9b:a2:3d:6f:ab:53:56:
                    75:de:ae:bb:0d:c9:e9:bd:8f:f3:83:7a:99:66:ea:
                    3d:27:29:ea:38:5d:8a:d7:06:06:e8:61:50:90:a0:
                    a4:97:8a:1e:b6:6b:08:60:8a:40:7f:78:d6:4c:dd:
                    cf:6a:c8:f9:c1:03:5b:9f:f5:ff:1d:04:c4:74:3e:
                    7d:08:1a:df:8b:3a:db:29:e9:79:4a:73:3f:df:53:
                    26:86:72:26:0e:39:e4:4c:83:de:d2:dd:55:7c:90:
                    db:03:11:ae:f0:d0:85:66:16:24:e4:b7:af:c6:12:
                    fd:9b:b4:f6:1b:c6:4b:66:83:f4:a5:7a:c6:b0:d6:
                    ec:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A4:6C:D6:69:2D:84:47:94:3F:17:02:5F:BF:54:B5:AE:AC:0A:2C
            X509v3 Authority Key Identifier:
                keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:71:50:ec:f1:a7:d0:b1:26:d8:b9:32:19:52:0b:a4:58:a5:
         aa:1a:c4:e3:0a:6f:84:10:07:fd:7c:a2:c8:f5:62:59:74:ac:
         32:d2:9e:1c:3f:e6:33:16:97:e9:4d:15:a5:af:18:7a:7e:0b:
         fe:7c:ea:af:de:5d:d9:c4:3d:a8:d1:54:14:8b:db:ff:02:0a:
         04:96:be:25:df:cc:11:88:a0:69:e1:36:b9:7f:6c:f0:d0:ec:
         8e:18:b6:c7:9e:14:d0:cd:74:32:bc:57:09:22:9f:ad:fb:40:
         16:35:1f:a4:89:38:30:e8:ef:dd:08:75:04:f9:e2:32:31:6e:
         8a:2d:d9:ba:af:23:df:3b:2f:78:20:80:79:e3:2a:00:67:d5:
         69:dc:69:77:4c:2a:6e:76:3e:38:f9:e5:ac:bf:92:21:49:de:
         d1:80:fa:8f:9f:68:9c:ac:11:a5:97:ee:d0:97:2c:f3:67:9d:
         ce:cd:6a:ec:9a:85:e4:8a:84:80:55:dd:00:b7:fc:3c:9f:a4:
         63:a4:5d:d6:68:ac:99:64:27:b2:35:b8:61:a4:80:6e:e6:5f:
         02:23:2a:63:ba:16:a0:14:9c:94:b1:12:f2:49:f9:bc:bc:dd:
         08:94:e6:b0:f1:57:80:c6:6f:33:17:ac:ee:90:09:72:49:27:
         37:d3:18:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:51:02 2026 by rpki-client