Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.mft
File:                     XdMSIR8ZVxKcIcQXUD1DsAqia0M.mft (raw, json)
Hash identifier:          os40bemxIyxaxJxb60sf9k/fmi1ok7XKGx4l+R6FS3c=
Subject key identifier:   84:29:3B:29:0A:B1:79:9A:5F:CE:78:8D:A9:8C:B9:D3:30:D5:4D:7E
Authority key identifier: 5D:D3:12:21:1F:19:57:12:9C:21:C4:17:50:3D:43:B0:0A:A2:6B:43
Certificate issuer:       /CN=5dd312211f1957129c21c417503d43b00aa26b43
Certificate serial:       01A11184C2F2E40DE4B7E4950377E244FF22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.mft
Manifest number:          1E
Signing time:             Tue 06 Oct 2026 14:01:15 +0000
Manifest this update:     Tue 06 Oct 2026 14:01:15 +0000
Manifest next update:     Wed 07 Oct 2026 14:01:15 +0000
Files and hashes:         1: XdMSIR8ZVxKcIcQXUD1DsAqia0M.crl (hash: wXgCT4zwdxVQMtJNFxiW1pv3Ac7scBg3ODGRWfeO4eY=)
                          2: XwsEHTTfKZyOfZioYcd5xK-7DUY.roa (hash: W0QoWvYYKuoimLyk595xMNCZXWen03Fn/n2Kgoe4UIg=)
                          3: dFXsJZfQgG4PPcKpL9A4u7SceGI.roa (hash: +r3bmYepYhEkqhELDDbQyhEm/b/SgOFhDC0nC5oacBE=)
                          4: iCAXabpGCd_wrbFC6Q7HHXtjbd4.roa (hash: fvuSD8OT+kk7mQC64EnGnya0B3aCUtklezIY+XWru1A=)
                          5: mljMw9hDDBwppo2fOtd4bvMBSv8.roa (hash: kKWz8xzzb/ACHLlgkNDESxsmm3x/9yRa+aMhsPrOVK0=)
                          6: tlPhgJrYrC8oySm3UeQESAEzsZw.roa (hash: XK/LL5VakqWxgYff8rMzkZEOne7oJFvF+WwLbSMcQXI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:84:c2:f2:e4:0d:e4:b7:e4:95:03:77:e2:44:ff:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dd312211f1957129c21c417503d43b00aa26b43
        Validity
            Not Before: Oct  6 14:01:15 2026 GMT
            Not After : Oct  7 14:01:15 2026 GMT
        Subject: CN=84293b290ab1799a5fce788da98cb9d330d54d7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:fa:b6:c5:52:5d:38:fb:99:63:29:82:f1:93:
                    8d:af:3f:f3:21:9f:32:2b:a7:57:c7:4d:19:e9:b7:
                    3b:b0:7c:d1:63:8e:40:39:c8:73:b7:5f:f9:46:26:
                    44:ce:ca:9e:9b:10:3f:1b:b8:d5:87:71:e9:fa:6d:
                    55:b7:a3:09:cf:0e:97:94:96:b2:c9:01:9d:01:5f:
                    1f:51:cd:89:63:21:0c:03:9a:5a:7f:57:72:8c:e3:
                    44:ff:fd:b9:e3:5c:71:2d:aa:34:7f:a4:6d:13:ed:
                    a7:ea:fc:1c:d7:39:6b:dc:a2:c9:94:7b:02:bf:b5:
                    fb:86:4c:95:1e:34:17:6c:4b:de:e3:39:0e:3f:91:
                    05:56:ae:db:87:3d:79:2c:c7:03:b0:d6:fd:d8:7b:
                    19:67:89:d2:88:9a:14:dc:ce:08:dc:0f:96:53:81:
                    61:90:6a:a0:35:0a:75:f5:8c:55:c5:dd:e3:89:c3:
                    18:30:84:2c:10:df:7c:7d:89:79:2b:a4:8c:1b:24:
                    e1:ba:6f:3c:dc:b3:87:47:4a:c1:a0:51:cc:e6:62:
                    9e:8f:b6:9e:69:cd:10:43:6f:55:3d:21:da:ef:d3:
                    a8:12:0a:aa:5b:3d:4a:49:19:c6:b7:bc:3c:90:3d:
                    68:4f:e8:2a:c6:f6:d7:05:13:78:d5:bf:86:f4:a2:
                    de:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:29:3B:29:0A:B1:79:9A:5F:CE:78:8D:A9:8C:B9:D3:30:D5:4D:7E
            X509v3 Authority Key Identifier:
                keyid:5D:D3:12:21:1F:19:57:12:9C:21:C4:17:50:3D:43:B0:0A:A2:6B:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdMSIR8ZVxKcIcQXUD1DsAqia0M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28d508-b59b-4e2e-97b3-5b571447ab77/1/XdMSIR8ZVxKcIcQXUD1DsAqia0M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9b:7e:72:f1:40:98:6a:2b:99:46:10:2c:04:20:2a:e5:21:
         28:ae:ea:f3:39:30:71:1f:bb:04:29:55:d9:5c:2a:4f:7b:fc:
         55:3f:6e:71:70:d8:f7:64:0b:fd:79:92:0e:c6:50:0a:74:83:
         05:65:56:8f:6f:ba:32:d8:2b:fc:b2:e9:eb:af:6f:e6:2c:0f:
         fa:4c:6c:a3:1d:31:71:72:67:6c:1c:cc:4c:49:09:7b:76:a2:
         dc:7d:f9:5c:9e:e6:e6:b2:a7:84:7d:76:8d:da:f6:75:e9:f6:
         c8:d4:aa:a8:07:41:48:f4:09:30:27:8a:a7:e2:eb:9d:48:28:
         b3:4f:fc:86:f6:d8:34:36:be:61:d8:fa:c4:7a:a4:75:41:94:
         86:6a:c7:88:2a:3a:27:a7:9c:6b:c8:88:3e:eb:02:64:76:e8:
         5c:16:9e:09:5e:65:29:c3:a0:3b:79:18:05:19:d3:b2:a2:1f:
         7a:8c:88:aa:36:21:0f:68:1d:54:bf:d5:62:5f:04:9c:b1:b6:
         8e:5e:75:43:48:f5:03:11:9a:20:09:ed:36:41:e8:c6:73:4f:
         74:88:cd:ef:93:ee:08:ef:b5:50:57:e1:68:f7:76:d0:57:53:
         40:dc:7f:9c:c7:db:13:4f:df:53:81:56:d1:13:ea:d2:f8:c7:
         74:94:45:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:05:09 2026 by rpki-client