Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
File:                     K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json)
Hash identifier:          i8OhqIgiESis+iNbc36bG/pj4hMr/o7dMiMbE6mfWtM=
Subject key identifier:   5A:F8:EF:DF:80:33:68:61:A4:A7:C5:C8:E1:82:0A:A2:2D:BF:FA:2E
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Certificate issuer:       /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial:       01A122AFB724F461BAAF2DA833E38D37BD62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
Manifest number:          1A9C
Signing time:             Fri 09 Oct 2026 22:01:43 +0000
Manifest this update:     Fri 09 Oct 2026 22:01:43 +0000
Manifest next update:     Sat 10 Oct 2026 22:01:43 +0000
Files and hashes:         1: 5seVusnKx_Ys9lX6helV3VYtD2U.roa (hash: PZFyRFcdx9T5Z2TzIZsPirDrvtRVVFWfye1bbVqWbBc=)
                          2: 9btJARByxb1iHyonPUVBkRTOsVo.roa (hash: OoaKNkwSuE9swZGc5WUnPf4K5AgnLBPyAFCvevkhF9U=)
                          3: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: wMoPUIopcqO8zZErc4+1ifmGO1lBIcrK4l63drawh0Y=)
                          4: XWrsnRZ3w0e0DoMnOjNkuaIXctc.roa (hash: hKOZKXZd+O54dyQoUT1ViJz0QYsGp84f/gyggnOHiyY=)
                          5: _VixDRlDHcr6PrncvZUZ-GW6afw.roa (hash: XqMR9xWk1nvAk22Z7sQHJKRu3wfO9rwjwEWrKeLB+8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 17:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:22:af:b7:24:f4:61:ba:af:2d:a8:33:e3:8d:37:bd:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
        Validity
            Not Before: Oct  9 22:01:43 2026 GMT
            Not After : Oct 10 22:01:43 2026 GMT
        Subject: CN=5af8efdf80336861a4a7c5c8e1820aa22dbffa2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:57:ac:0a:b2:15:ca:51:dc:14:43:09:b2:39:
                    dd:d2:9e:63:5e:4e:a8:b9:a1:b2:3d:d1:0d:6c:c3:
                    4a:47:0e:67:dd:54:48:07:b7:6f:84:8e:94:fd:5d:
                    5e:b5:98:14:54:29:39:85:0c:41:40:f9:0b:bf:fb:
                    cc:91:e5:53:3a:0d:b8:9a:66:64:28:01:c7:98:87:
                    36:d3:d6:f0:c2:0b:52:75:8c:80:a4:76:a3:16:85:
                    20:82:01:33:93:ea:f1:c7:cd:cd:56:a4:f9:71:5b:
                    f2:9d:54:44:42:bb:0b:e2:da:59:e6:0e:e2:67:a0:
                    ce:80:3d:d0:c0:4d:5c:32:d7:53:77:73:5b:d5:20:
                    d8:7d:8d:08:fd:ef:2d:75:98:69:26:ac:fb:9c:c3:
                    e9:a1:43:71:38:9b:83:54:ff:66:24:76:b1:76:55:
                    f0:12:55:e0:b7:b7:b1:36:a1:e7:a9:bb:ab:0d:f5:
                    bc:7e:2e:7e:cb:54:17:ab:04:61:e6:0a:4e:d2:75:
                    ca:47:22:dc:fd:af:d7:b8:3c:c1:7c:8f:ca:fd:2d:
                    53:a1:ea:13:50:5b:30:72:cb:b5:ed:c8:fa:08:1b:
                    eb:cf:04:a6:e2:82:81:45:03:00:19:31:34:ac:36:
                    71:c7:44:f5:6b:fd:98:bc:6a:d2:3b:f8:06:30:cc:
                    77:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F8:EF:DF:80:33:68:61:A4:A7:C5:C8:E1:82:0A:A2:2D:BF:FA:2E
            X509v3 Authority Key Identifier:
                keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:52:b7:07:00:10:26:84:f4:a2:14:05:28:0a:99:bd:a0:22:
         ea:87:d9:31:cf:7a:b7:15:4b:8d:16:86:7b:05:5c:df:6f:ae:
         ac:d8:54:77:4d:19:26:20:8a:d5:81:28:64:c9:7f:04:be:b8:
         f1:f6:88:22:ca:e0:e9:be:1b:39:07:82:a2:ba:67:29:9d:b1:
         3a:0c:3e:aa:16:e7:08:b1:15:5a:88:e5:2a:42:a6:54:7f:7b:
         7c:ec:e6:e7:4e:71:81:94:71:6a:14:30:f8:81:c2:85:7e:ed:
         43:4b:78:88:ab:7f:47:ce:72:68:26:fc:30:81:30:a8:75:5b:
         e7:e8:cf:44:ea:7e:05:cf:4b:08:22:66:7b:92:64:df:8e:40:
         52:34:18:90:34:33:67:ba:2d:4c:40:31:f8:34:b7:cb:04:4f:
         72:aa:43:db:3f:c5:ac:46:91:07:12:ab:2e:4f:c4:c5:2e:49:
         4d:48:97:ae:b7:a6:4b:f7:49:36:01:11:04:07:9b:4a:f3:c8:
         bd:08:81:d5:6c:7a:31:1b:07:21:fe:a3:c3:c2:6a:54:35:4f:
         bb:b0:b0:e0:1f:ea:d1:96:ee:36:2b:b9:9b:a3:56:0c:dc:27:
         36:5f:51:9e:75:61:1f:4d:80:1a:f7:a8:07:56:b8:5a:6a:da:
         62:b5:2b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 02:54:18 2026 by rpki-client