Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
File:                     sMnhFmeJWbipR4_Op8o8BgMQIWI.mft (raw, json)
Hash identifier:          oj1U4UIr5sj8nHA97xZsPb/B9LT4iERTSsxYmNUHMfs=
Subject key identifier:   3A:81:A8:D4:56:E1:6A:DB:38:06:95:AE:B9:5B:DD:A0:B6:4F:59:E7
Authority key identifier: B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62
Certificate issuer:       /CN=b0c9e116678959b8a9478fcea7ca3c0603102162
Certificate serial:       01A1186C82B566C4687791DEE4F066B2ED21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
Manifest number:          1C8C
Signing time:             Wed 07 Oct 2026 22:12:06 +0000
Manifest this update:     Wed 07 Oct 2026 22:12:06 +0000
Manifest next update:     Thu 08 Oct 2026 22:12:06 +0000
Files and hashes:         1: XUGY9TbOMBX49Z8u90RGUe-ExLs.roa (hash: qtTspg26ND5GYRKyrYjwXIvA6gCRcdmehMVXE9EcA5s=)
                          2: l4dSZXl8dhmZMC6S5Tn_0a5uKMw.asa (hash: LGg4oCMfH/vcblyxp8BRS8a3iyoB8BazHkO/Mi3w7Wg=)
                          3: mQ0MiOqSuDuX4I22z4mXhoxaxwU.roa (hash: E6YzNjvM0gE2VEZbyRNUkj55FMi+mMqp+LHFWsmxZzg=)
                          4: sMnhFmeJWbipR4_Op8o8BgMQIWI.crl (hash: sZ0DBtiJLUpkoZ0lC2CcrWmxehYM1Pgv0/v6Z0ij+Lw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 18:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:18:6c:82:b5:66:c4:68:77:91:de:e4:f0:66:b2:ed:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0c9e116678959b8a9478fcea7ca3c0603102162
        Validity
            Not Before: Oct  7 22:12:06 2026 GMT
            Not After : Oct  8 22:12:06 2026 GMT
        Subject: CN=3a81a8d456e16adb380695aeb95bdda0b64f59e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b9:f4:dd:c6:ac:0d:41:05:f4:c0:3a:c0:fa:
                    f5:c0:9a:b0:c8:e4:34:43:ce:fd:cf:86:96:03:57:
                    f0:31:f3:2f:5e:a6:50:9a:1e:db:8d:14:8f:04:3a:
                    ef:72:ea:d9:44:83:d7:8a:32:99:bd:7c:15:f8:d3:
                    cb:61:2c:17:5d:ff:2f:55:c1:6d:6b:dd:8a:83:0a:
                    02:b5:be:0b:d1:c0:33:ef:e0:4f:b6:ea:7d:da:59:
                    48:7d:ea:1f:91:4b:a8:27:d9:4d:53:1c:56:0b:27:
                    c5:83:af:81:ba:5f:d4:78:62:dc:60:7d:ef:33:44:
                    62:db:49:39:02:fb:f0:01:5b:a6:00:12:f0:59:f3:
                    3b:16:6b:9c:0c:44:bc:2b:1a:c5:0a:5d:51:1e:41:
                    44:f0:93:ab:29:2c:86:d2:f4:e8:e3:52:a8:7c:62:
                    b0:62:4a:1d:2c:cc:5b:a2:aa:92:90:cd:54:9d:78:
                    fe:1d:82:11:17:99:46:a0:db:d7:9e:17:b1:18:73:
                    6a:82:c7:c3:59:b3:80:25:80:fd:0b:0e:84:34:35:
                    48:e5:9e:cd:08:07:6a:98:95:2e:d6:0e:0e:3a:fe:
                    44:33:53:72:a1:63:b4:bb:83:67:16:48:ed:70:71:
                    e2:d5:c9:f4:23:88:4b:9d:e1:05:06:e9:44:56:c4:
                    d6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:81:A8:D4:56:E1:6A:DB:38:06:95:AE:B9:5B:DD:A0:B6:4F:59:E7
            X509v3 Authority Key Identifier:
                keyid:B0:C9:E1:16:67:89:59:B8:A9:47:8F:CE:A7:CA:3C:06:03:10:21:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMnhFmeJWbipR4_Op8o8BgMQIWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/68bf1d-6e50-4996-82af-0ac581a58cd1/1/sMnhFmeJWbipR4_Op8o8BgMQIWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:4c:a6:14:70:bc:fe:3e:a1:30:e3:04:7f:90:21:aa:da:f6:
         25:c3:15:98:eb:a4:98:d1:00:ff:c2:c0:bb:28:5f:12:bc:c8:
         c5:98:ba:c3:95:3d:a6:87:5a:6d:61:9a:b7:0e:9e:a3:2a:5b:
         0e:41:d6:8e:29:a6:80:4f:45:4a:13:15:8a:42:c4:37:a0:c1:
         18:ea:7b:5f:0a:53:af:a6:24:b3:5f:ea:33:0d:13:ff:9b:7e:
         4d:eb:31:db:c6:ee:9d:26:c1:50:71:49:cd:c0:36:e5:61:54:
         8b:35:7c:99:a3:bf:bd:15:84:e1:f9:01:e9:e5:b4:86:64:59:
         52:4b:e8:8e:c6:dc:7c:ff:72:da:38:ec:3c:9c:e7:54:c8:ae:
         e6:92:21:89:82:c6:c8:77:67:8a:9f:bd:7e:96:7f:c2:32:30:
         72:4f:7a:41:9a:8f:b7:f0:2e:9c:45:ce:71:b4:71:15:b7:1f:
         ff:c7:b0:ce:b0:66:04:2a:bd:21:9b:47:8c:e6:6e:42:b8:cb:
         e1:95:a9:f8:3f:8a:36:d0:d3:4b:9d:fe:6a:ef:67:1e:a5:14:
         7e:6e:ff:50:15:5d:52:76:16:06:86:d3:ed:e1:db:e8:8d:1e:
         6f:18:cc:7f:7c:ce:63:91:03:78:8b:0e:97:e4:8f:33:bd:59:
         53:bd:c4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:13:50 2026 by rpki-client