Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
File:                     g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft (raw, json)
Hash identifier:          Ki18m7FsS149G4doEb/g2RXri6AV2aHnpYrtF647Zbo=
Subject key identifier:   29:70:BD:62:FD:DB:98:F7:32:A4:A5:83:29:76:2D:5A:0A:4C:62:58
Authority key identifier: 83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91
Certificate issuer:       /CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
Certificate serial:       01A178158D9BBD3C13DE0F09C32C8940642F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
Manifest number:          1AC4
Signing time:             Mon 26 Oct 2026 12:00:40 +0000
Manifest this update:     Mon 26 Oct 2026 12:00:40 +0000
Manifest next update:     Tue 27 Oct 2026 12:00:40 +0000
Files and hashes:         1: 5Tr-A46rlsrct1a2T7fsA7Wj8sE.roa (hash: J9z4KJqT3zez3+Euk6pmUvH6T92V1tHwog0Mr9keWO8=)
                          2: g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl (hash: b7+8DI/r09VA0t+DLSYwQ2g7U2aqgmPQvgNHTFJ2M2M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:15:8d:9b:bd:3c:13:de:0f:09:c3:2c:89:40:64:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bf48f18527b2b3b59bfbf3fdff204492bce91
        Validity
            Not Before: Oct 26 12:00:40 2026 GMT
            Not After : Oct 27 12:00:40 2026 GMT
        Subject: CN=2970bd62fddb98f732a4a58329762d5a0a4c6258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:5c:f5:33:e3:d3:9b:76:4e:43:36:d0:2c:
                    ef:df:7c:c2:0a:4a:c4:48:7a:66:bc:9a:8b:32:74:
                    4e:d5:1b:47:0d:92:44:9a:88:96:41:52:41:36:fa:
                    70:51:ef:2b:68:c3:2c:fd:55:14:bd:44:48:5a:34:
                    93:c9:05:bf:c7:d8:fc:4b:5b:26:c1:7b:72:45:79:
                    67:93:fc:1f:97:e6:5d:38:dc:fd:6c:26:b2:41:3b:
                    dd:bc:b3:12:09:fc:78:8b:c0:de:32:10:2d:43:c4:
                    4b:e9:d6:73:95:ba:38:f4:17:78:85:6f:69:13:17:
                    ab:8a:06:37:a2:c8:af:ef:99:6d:37:cb:f5:71:dd:
                    41:22:9d:18:61:ff:09:39:d2:7f:58:d7:e6:43:30:
                    2f:2d:84:55:20:3b:a0:38:72:14:a0:82:76:5f:fc:
                    cc:7b:60:9b:7e:2b:a1:27:a8:28:cc:94:47:6f:82:
                    6f:a5:cf:27:2d:ac:e6:f4:7f:2b:26:85:8b:da:fa:
                    14:38:f5:cc:cf:49:5a:4c:8a:56:f8:4a:68:a1:27:
                    8b:f4:11:c8:6a:d8:e2:73:e8:d3:0a:3a:f7:01:fa:
                    87:c6:4d:3b:d0:b3:4a:40:51:a9:65:59:2f:9d:4d:
                    e1:92:53:0e:13:63:ca:12:bd:be:89:50:95:f1:3c:
                    57:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:70:BD:62:FD:DB:98:F7:32:A4:A5:83:29:76:2D:5A:0A:4C:62:58
            X509v3 Authority Key Identifier:
                keyid:83:5B:F4:8F:18:52:7B:2B:3B:59:BF:BF:3F:DF:F2:04:49:2B:CE:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1v0jxhSeys7Wb-_P9_yBEkrzpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/643f86-636f-4c6e-9e60-a95b637afc8d/1/g1v0jxhSeys7Wb-_P9_yBEkrzpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:6b:82:42:bb:82:f3:d1:34:a7:1a:83:89:74:af:91:6d:1b:
         1c:3b:0c:34:9d:94:5e:5d:96:96:9b:df:81:72:3e:9f:7b:c0:
         22:ec:1c:c6:38:00:a2:8e:b0:1b:bc:06:11:b4:2f:7d:ec:4e:
         b1:10:3f:74:b5:ae:a4:2b:fb:6c:1f:bc:db:1a:23:0c:5a:a9:
         4a:5c:11:ac:69:20:a9:c1:53:f5:32:40:1a:9f:fd:89:d6:09:
         fb:94:7d:00:3f:8b:56:d7:fa:48:9c:9f:40:85:0d:70:c3:e0:
         8c:5c:65:db:8d:f7:48:79:6a:a9:6d:0b:aa:46:50:bb:90:1d:
         19:5e:fb:a4:1d:93:bd:81:fd:ee:04:ab:74:b2:f2:0d:fa:8d:
         68:1b:12:51:a4:49:76:8f:78:b9:77:2b:71:77:0b:3a:7b:d6:
         aa:5b:b1:82:64:ec:95:3d:75:d1:cd:ad:53:8a:57:bd:24:5a:
         d2:08:ed:3e:0f:b2:b5:34:7c:a4:81:bf:9e:b4:c0:f7:0f:97:
         cd:b5:51:37:81:f1:fb:eb:6b:e2:40:48:3b:e5:a0:33:5f:ff:
         89:0c:77:24:6b:f8:ce:6a:3e:ec:17:78:e9:b3:98:18:cf:d6:
         ac:1e:de:b8:32:ac:83:99:8a:77:ce:07:2d:8f:4d:79:6d:91:
         ab:82:c8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:35:50 2026 by rpki-client