Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
File:                     pKAVstPT6Qm2Avn91Pb29hiHPFg.mft (raw, json)
Hash identifier:          1zJOL9/UxDWwi37Kyiuy/k/sdRf5BrPJQNhAd0Id1tY=
Subject key identifier:   B8:52:F7:36:B6:E3:32:5E:D4:5B:7D:97:F9:64:9B:9F:79:5B:AE:BB
Authority key identifier: A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58
Certificate issuer:       /CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
Certificate serial:       01A17D3C973B44D29BBF4AE412CBC7C888DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
Manifest number:          115A
Signing time:             Tue 27 Oct 2026 12:01:25 +0000
Manifest this update:     Tue 27 Oct 2026 12:01:25 +0000
Manifest next update:     Wed 28 Oct 2026 12:01:25 +0000
Files and hashes:         1: iV4TEXZQGdAAaWWF18D6iGDTgkU.roa (hash: 8qmQo/R70e8QrQGIHQoR59I934fzerQsOqLOaPFw/WU=)
                          2: pKAVstPT6Qm2Avn91Pb29hiHPFg.crl (hash: YKWjRh9mearDE+T4cf7AlJ0QXJbFS7P8wVKPSqkl5Q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 12:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:3c:97:3b:44:d2:9b:bf:4a:e4:12:cb:c7:c8:88:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4a015b2d3d3e909b602f9fdd4f6f6f618873c58
        Validity
            Not Before: Oct 27 12:01:25 2026 GMT
            Not After : Oct 28 12:01:25 2026 GMT
        Subject: CN=b852f736b6e3325ed45b7d97f9649b9f795baebb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e8:73:3d:f4:7a:18:b7:83:b4:e9:da:8a:11:
                    09:c4:0c:59:5e:cd:ec:06:7b:f6:54:36:31:37:d8:
                    53:2a:2c:72:13:06:87:17:a3:2b:19:18:c8:ef:58:
                    99:7a:10:4f:b6:cd:76:90:97:a9:83:93:d9:b3:3d:
                    b7:3a:72:92:5f:eb:c6:e2:5e:ce:55:1c:9c:7b:4b:
                    25:78:34:79:a9:b9:c1:c5:bf:62:2b:ea:c1:d8:23:
                    31:ac:41:53:75:a8:26:4e:ed:5b:af:a2:57:1e:4b:
                    0a:5a:7d:1a:c4:43:21:10:4c:d7:22:93:42:e9:2e:
                    85:78:a3:72:70:19:9c:22:72:b2:65:2f:98:1f:c0:
                    b7:03:13:b6:7a:91:c5:95:b6:a3:02:8f:dc:ec:a9:
                    ed:b5:c8:2f:ef:ae:c6:0c:df:05:45:60:c7:03:b4:
                    fd:a4:de:e7:2b:ab:e4:0c:fe:63:c2:a1:82:92:f2:
                    fa:c2:28:52:27:4d:e6:89:09:89:13:c8:e4:bc:08:
                    84:99:d9:7b:62:72:e0:83:09:57:c2:a3:ab:b0:68:
                    1e:19:3d:d4:ef:05:cd:96:bb:9d:8d:64:f3:c1:0f:
                    e5:76:7d:9e:0b:90:0a:c8:78:4c:d8:68:0f:7f:6f:
                    ef:9d:0a:0a:69:14:3d:b4:03:62:74:4b:3c:f6:6f:
                    b9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:52:F7:36:B6:E3:32:5E:D4:5B:7D:97:F9:64:9B:9F:79:5B:AE:BB
            X509v3 Authority Key Identifier:
                keyid:A4:A0:15:B2:D3:D3:E9:09:B6:02:F9:FD:D4:F6:F6:F6:18:87:3C:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pKAVstPT6Qm2Avn91Pb29hiHPFg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b9bda3-b611-4338-bbe8-a7dd16343297/1/pKAVstPT6Qm2Avn91Pb29hiHPFg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:70:b4:64:93:96:52:d1:a8:fa:ca:83:3c:ab:d6:00:a9:d0:
         2f:6d:3e:7c:c5:45:01:fa:cd:55:c5:cd:0c:f7:e7:b2:c0:90:
         03:db:7c:f3:6e:dc:5e:a0:79:16:a3:af:ac:1e:02:35:1a:ce:
         eb:4d:2d:3d:04:19:75:2f:46:d5:d3:d5:00:54:cf:3a:6e:98:
         84:58:75:27:39:4d:1c:ad:30:55:90:13:c3:11:c0:33:64:3f:
         0d:6a:56:1c:41:e4:57:8d:df:eb:61:98:8e:56:d0:ad:cb:0f:
         a3:1e:9c:36:0a:5c:8d:d6:bd:b4:bc:dc:c3:12:d8:da:9c:e0:
         66:1e:c2:ec:55:1f:e1:67:3f:4a:04:52:33:80:15:09:48:77:
         43:d0:90:55:4c:fc:e8:90:c4:81:1f:06:67:90:29:8d:39:7f:
         02:b4:c2:33:6c:8c:32:e9:41:74:8c:3d:09:77:51:e9:36:5a:
         0b:a8:46:50:52:16:d3:18:42:56:7e:cd:58:0e:68:21:f6:32:
         e1:9b:ef:7a:39:3d:b7:b7:db:b4:5c:ea:a5:67:41:8e:d8:8d:
         83:71:88:80:ac:1c:72:5f:71:7e:42:33:65:52:ef:b1:ea:6f:
         97:45:59:d3:b4:1d:d9:a3:d0:26:55:fd:05:b6:b9:c6:a2:6c:
         b6:3b:7e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:47:31 2026 by rpki-client