Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft
File:                     l5oEa_9hohu7Kche9ClhJoX7g0s.mft (raw, json)
Hash identifier:          5x4Phn7CekdUcoqXKm3w3/K66Fp7Gs2bSJFd8tDdFXo=
Subject key identifier:   25:DA:90:C3:25:18:A5:B0:3A:E2:5D:54:A4:F5:D4:10:72:ED:0B:D5
Authority key identifier: 97:9A:04:6B:FF:61:A2:1B:BB:29:C8:5E:F4:29:61:26:85:FB:83:4B
Certificate issuer:       /CN=979a046bff61a21bbb29c85ef429612685fb834b
Certificate serial:       01A14BAB5A19D3407D78287D14CC447F9198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft
Manifest number:          0125
Signing time:             Sat 17 Oct 2026 21:01:23 +0000
Manifest this update:     Sat 17 Oct 2026 21:01:23 +0000
Manifest next update:     Sun 18 Oct 2026 21:01:23 +0000
Files and hashes:         1: 4UrXqTyIhsiIh5MLmWgIum1q7pw.roa (hash: 2Njc07dtF+G/jfmcnG8T0/AFPXKazhzNBGgSu3w0kFk=)
                          2: 5-DKG8fn4QobpRmv9gABaxQoiuE.roa (hash: DUPw9M0VyA/Xw3DEIPcetVhxVErX2fs+ure40DbwSwQ=)
                          3: gcoprSDzcSsV57DfpyN6ORzFOu0.roa (hash: e7PiSt8oPiVMxtHNp1MWSD4g+jfiUZHkgB0+FgMdhXo=)
                          4: l5oEa_9hohu7Kche9ClhJoX7g0s.crl (hash: jawFjPBan5+gkFhQNEndK8K+auLv+Z0zRMizeAstN0s=)
                          5: t5alOfpywogJ69ms_ghfbpQSXMo.roa (hash: Xm7EQvutEbyH9q4RgfnjrzY/7bndMKJ0WVlpuryg+3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 21:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4b:ab:5a:19:d3:40:7d:78:28:7d:14:cc:44:7f:91:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=979a046bff61a21bbb29c85ef429612685fb834b
        Validity
            Not Before: Oct 17 21:01:23 2026 GMT
            Not After : Oct 18 21:01:23 2026 GMT
        Subject: CN=25da90c32518a5b03ae25d54a4f5d41072ed0bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:38:2e:4b:e0:44:8b:c4:bf:22:60:4c:2f:5e:
                    45:fe:a8:12:fd:a7:72:4f:a0:87:a6:be:fb:36:e8:
                    29:37:01:f4:05:00:b2:03:88:f0:db:c1:b4:92:2d:
                    c0:54:40:8e:11:f2:a2:b3:3d:aa:4a:98:46:9b:1c:
                    44:c5:55:af:0a:26:9e:29:b0:1d:50:7e:84:37:fa:
                    fc:02:48:3f:88:55:eb:e8:09:6f:a7:73:51:69:d5:
                    7a:ca:34:41:04:fc:bd:bb:b5:08:ab:18:6c:4e:c6:
                    81:e0:69:fe:4a:9f:97:e4:9c:8b:16:8b:27:50:a6:
                    78:5b:b2:3b:23:fa:95:94:41:cb:d1:de:a7:77:ab:
                    5f:41:d9:94:a8:0d:c9:15:77:32:f4:09:df:dd:a7:
                    45:5a:39:79:94:24:fd:e6:98:34:66:52:43:13:bc:
                    f9:12:5d:24:51:ef:24:06:7d:dd:90:7e:5d:2a:ee:
                    21:4c:08:ef:a2:5f:6f:9d:b9:45:f8:47:fa:c4:ef:
                    0c:a9:c1:f5:0b:ec:16:fb:93:b1:4f:75:15:df:40:
                    39:e8:8e:ed:39:f7:42:f9:bf:37:6e:a1:70:8b:5c:
                    81:fc:fb:aa:5e:8b:c4:24:5c:e7:61:22:ae:68:43:
                    23:52:b7:65:c3:de:d6:40:31:05:80:fb:06:6b:42:
                    85:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DA:90:C3:25:18:A5:B0:3A:E2:5D:54:A4:F5:D4:10:72:ED:0B:D5
            X509v3 Authority Key Identifier:
                keyid:97:9A:04:6B:FF:61:A2:1B:BB:29:C8:5E:F4:29:61:26:85:FB:83:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5oEa_9hohu7Kche9ClhJoX7g0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70cb80-4e6d-46a5-b1b4-4e3f4d68f682/1/l5oEa_9hohu7Kche9ClhJoX7g0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:92:2d:01:4a:35:75:d8:0d:b0:4e:cb:42:cd:05:05:fa:61:
         b3:53:14:d7:7d:40:b9:1d:4f:b9:d4:62:ce:ad:ee:8a:09:8f:
         25:f4:20:fc:7f:df:03:24:1a:7e:bf:f2:83:41:af:78:ca:e4:
         5d:3f:48:d3:44:79:9f:e3:35:85:ef:cb:12:5c:86:82:bb:4e:
         d9:48:6b:58:a2:45:d2:b3:a8:ed:d6:90:5a:db:a6:21:9c:fa:
         73:bd:98:f3:4c:ff:ac:04:90:ea:18:92:09:07:44:df:b1:d7:
         02:a0:51:f1:5a:75:19:17:a5:75:11:ed:aa:9f:9a:f9:3f:81:
         85:6c:9a:23:ad:69:4f:31:f1:9d:de:2e:c1:35:d7:a3:d5:2f:
         a3:1e:b1:b5:dd:d7:ab:2d:bb:b9:46:c3:c4:83:0e:b5:3a:0a:
         46:6c:b4:5f:ae:e4:50:1a:6a:af:ff:7e:9e:16:f4:e4:b1:35:
         2b:cf:09:70:7b:4c:b5:be:b7:f7:75:c9:b1:dd:16:c3:2d:eb:
         9b:ef:61:74:e8:5c:7f:3d:d3:06:00:65:a7:d3:fc:ba:4f:bd:
         d0:b4:5f:ae:eb:64:bd:be:3c:48:05:4a:d0:4e:25:12:e4:b6:
         62:a9:d5:34:79:59:c8:d3:5c:65:9e:ab:f7:3e:b7:55:29:42:
         c9:af:b7:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFLq1oZ00B9eCh9FMxEf5GYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3OWEwNDZiZmY2MWEyMWJiYjI5Yzg1ZWY0Mjk2MTI2ODVm
YjgzNGIwHhcNMjYxMDE3MjEwMTIzWhcNMjYxMDE4MjEwMTIzWjAzMTEwLwYDVQQD
EygyNWRhOTBjMzI1MThhNWIwM2FlMjVkNTRhNGY1ZDQxMDcyZWQwYmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DguS+BEi8S/ImBML15F/qgS/ady
T6CHpr77NugpNwH0BQCyA4jw28G0ki3AVECOEfKisz2qSphGmxxExVWvCiaeKbAd
UH6EN/r8Akg/iFXr6Alvp3NRadV6yjRBBPy9u7UIqxhsTsaB4Gn+Sp+X5JyLFosn
UKZ4W7I7I/qVlEHL0d6nd6tfQdmUqA3JFXcy9Anf3adFWjl5lCT95pg0ZlJDE7z5
El0kUe8kBn3dkH5dKu4hTAjvol9vnblF+Ef6xO8MqcH1C+wW+5OxT3UV30A56I7t
OfdC+b83bqFwi1yB/PuqXovEJFznYSKuaEMjUrdlw97WQDEFgPsGa0KFqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCXakMMlGKWwOuJdVKT11BBy7QvVMB8GA1UdIwQY
MBaAFJeaBGv/YaIbuynIXvQpYSaF+4NLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDVvRWFfOWhvaHU3S2NoZTlDbGhKb1g3ZzBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNiODAtNGU2ZC00NmE1LWIxYjQt
NGUzZjRkNjhmNjgyLzEvbDVvRWFfOWhvaHU3S2NoZTlDbGhKb1g3ZzBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83MGNiODAtNGU2ZC00NmE1LWIxYjQtNGUzZjRkNjhmNjgy
LzEvbDVvRWFfOWhvaHU3S2NoZTlDbGhKb1g3ZzBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG5ItAUo1
ddgNsE7LQs0FBfphs1MU131AuR1PudRizq3uigmPJfQg/H/fAyQafr/yg0GveMrk
XT9I00R5n+M1he/LElyGgrtO2UhrWKJF0rOo7daQWtumIZz6c72Y80z/rASQ6hiS
CQdE37HXAqBR8Vp1GReldRHtqp+a+T+BhWyaI61pTzHxnd4uwTXXo9Uvox6xtd3X
qy27uUbDxIMOtToKRmy0X67kUBpqr/9+nhb05LE1K88JcHtMtb6393XJsd0Wwy3r
m+9hdOhcfz3TBgBlp9P8uk+90LRfrutkvb48SAVK0E4lEuS2YqnVNHlZyNNcZZ6r
9z63VSlCya+3qQ==
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:08:55 2026 by rpki-client