Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
File:                     n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft (raw, json)
Hash identifier:          rwkFI4E1TiMkeSLgtSoNWI776RgjEbXgMTT/E1SsPhQ=
Subject key identifier:   95:85:9C:FF:02:8A:28:63:A4:CC:46:16:0A:F7:44:10:B3:83:38:CF
Authority key identifier: 9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46
Certificate issuer:       /CN=9fac2fdddabf20ea449870e1dcc0915e60148346
Certificate serial:       01A17D733595281AC7D6EE210ED60396D83C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
Manifest number:          1AC7
Signing time:             Tue 27 Oct 2026 13:01:04 +0000
Manifest this update:     Tue 27 Oct 2026 13:01:04 +0000
Manifest next update:     Wed 28 Oct 2026 13:01:04 +0000
Files and hashes:         1: dCyZ9Pf_BM16QCKCTZBWurk5tes.roa (hash: igMWMbqYVYQOf++wz4/c/zhgP+nD+9kvBZJquJqrWeo=)
                          2: n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl (hash: pFm8e+5/PpUX/HEdntZxDBoUqNHNEApjiC15pv3nhMY=)
                          3: nGxIqADkVb_mNggVwJxi_XzzMLg.roa (hash: AeNpYVfAfsiZNoHvge0sBO6h6Hi0L8OmJkT5GmZUJAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:73:35:95:28:1a:c7:d6:ee:21:0e:d6:03:96:d8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fac2fdddabf20ea449870e1dcc0915e60148346
        Validity
            Not Before: Oct 27 13:01:04 2026 GMT
            Not After : Oct 28 13:01:04 2026 GMT
        Subject: CN=95859cff028a2863a4cc46160af74410b38338cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:67:5a:24:59:65:5a:59:0b:b9:3d:f7:23:7e:
                    5b:39:ba:d0:5f:13:57:c4:0b:86:ea:87:3f:86:ad:
                    5b:99:c8:f8:bf:5a:3d:42:ba:73:b9:91:4c:ab:78:
                    07:ba:69:57:22:70:79:e1:ee:5a:43:73:f8:23:85:
                    e7:0e:b3:f7:22:b7:dc:6a:97:4b:87:95:86:e6:52:
                    2f:5e:86:de:a1:f5:48:77:67:e6:32:e2:f7:29:f3:
                    69:bd:30:50:51:03:ce:89:bd:6f:b7:82:3d:ab:97:
                    05:2a:ca:68:5e:b9:33:09:2a:ac:3e:6a:62:81:96:
                    c7:9a:db:ae:26:ac:10:97:c5:d5:81:30:07:ca:e0:
                    4e:7d:11:94:76:30:7a:c6:30:ef:68:d7:56:35:5d:
                    ad:b7:5c:34:3e:0c:42:97:0c:6f:42:03:5f:38:52:
                    b6:cd:e2:86:a9:04:0b:83:ba:32:69:6c:8b:4d:e8:
                    26:95:6f:5a:9f:ac:1e:77:09:97:5b:14:24:c0:1e:
                    1e:db:92:18:0d:27:2a:be:ad:a7:b1:1d:12:1e:1e:
                    55:21:0a:91:d9:a7:bf:6c:5a:36:52:85:ca:89:db:
                    8e:34:0a:12:77:d6:98:2d:0f:57:df:f6:cd:aa:1e:
                    9b:4d:f0:c1:20:f9:81:82:2c:97:89:ef:30:d0:a8:
                    01:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:85:9C:FF:02:8A:28:63:A4:CC:46:16:0A:F7:44:10:B3:83:38:CF
            X509v3 Authority Key Identifier:
                keyid:9F:AC:2F:DD:DA:BF:20:EA:44:98:70:E1:DC:C0:91:5E:60:14:83:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0b938f-189b-4a7d-8c36-2a3fa61c3dc5/1/n6wv3dq_IOpEmHDh3MCRXmAUg0Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c9:ba:23:73:10:83:27:74:fa:8d:5d:b6:0b:6f:d0:65:de:
         30:15:dc:d1:2e:4a:d4:e1:a1:c7:b2:fb:ac:e8:57:31:ed:e0:
         40:19:80:ad:51:57:29:27:20:51:d0:fc:0b:a5:61:15:93:af:
         e7:3c:e7:28:f6:e4:01:37:8b:55:e1:70:06:89:ce:cc:6b:53:
         70:6f:0a:f8:ad:52:73:74:48:59:97:ec:cd:e3:09:45:97:ed:
         52:a7:4a:11:a7:3f:2e:9d:4d:32:33:53:6d:b3:bb:af:5d:0b:
         33:b7:69:3b:4a:4f:43:68:3c:3a:04:83:ce:97:b3:f6:b2:00:
         c7:2c:f8:5b:4b:e7:03:95:54:d1:a9:ad:12:d9:ed:5e:9b:24:
         f9:4d:10:0b:f4:38:06:aa:ba:0c:f1:60:3e:50:0c:2b:d9:e8:
         5f:aa:00:6b:fb:d7:71:83:89:6a:f9:1f:8e:75:6e:03:49:db:
         ad:ca:b5:e0:55:57:0c:94:12:97:45:9c:79:37:c6:ea:57:43:
         5d:a2:52:7a:dc:77:5f:06:80:0d:74:78:4d:b5:7c:ee:c2:54:
         80:04:38:fc:5b:f6:f0:e1:8b:e8:1d:81:5f:96:a0:70:04:a9:
         d1:8b:94:b4:ea:55:f6:fa:35:59:08:86:c7:5d:65:94:9a:5b:
         c5:07:ec:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:44:20 2026 by rpki-client