Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
File:                     pLm08Dm8goYBw44OrUwZWrvf_mM.mft (raw, json)
Hash identifier:          mpITl7MmroLGSpSaQ0naD4Y0IwR9W7E4+fqB/5+R+rs=
Subject key identifier:   09:A2:F1:AB:42:DC:EE:51:61:7D:21:03:1C:AF:FA:47:86:EF:B6:3F
Authority key identifier: A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63
Certificate issuer:       /CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
Certificate serial:       01A13DB8A3EB3E179853A556312BA5A1D549
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
Manifest number:          050F
Signing time:             Thu 15 Oct 2026 04:01:13 +0000
Manifest this update:     Thu 15 Oct 2026 04:01:13 +0000
Manifest next update:     Fri 16 Oct 2026 04:01:13 +0000
Files and hashes:         1: JdkIQygmhQqcLnZC2_hEonjSX5Q.roa (hash: S2ckYV6ssSGLHtxoF3cPRRAOhiSavGP1nolNPr7KzVg=)
                          2: pLm08Dm8goYBw44OrUwZWrvf_mM.crl (hash: RTj7gz00hdKwZaMlLZsOw4TObnZS1merkj7o2JGIE1g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:a3:eb:3e:17:98:53:a5:56:31:2b:a5:a1:d5:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b9b4f039bc828601c38e0ead4c195abbdffe63
        Validity
            Not Before: Oct 15 04:01:13 2026 GMT
            Not After : Oct 16 04:01:13 2026 GMT
        Subject: CN=09a2f1ab42dcee51617d21031caffa4786efb63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f5:ef:42:ca:ba:0b:b2:e5:2f:32:45:da:0d:
                    13:5a:1a:e0:91:ab:54:09:48:10:0f:2f:c5:8b:cc:
                    3c:cc:5b:00:c8:8c:2d:a3:3e:5c:fb:46:d2:ae:bd:
                    2e:ac:df:50:14:1d:4a:65:68:a9:21:7f:09:b8:19:
                    28:d9:26:16:ca:29:55:59:9b:5d:26:a3:24:31:ae:
                    b0:de:a0:98:0f:a6:02:06:69:10:ba:f7:f5:77:3c:
                    78:6c:cb:b3:e3:4b:55:ad:63:d0:f1:99:d1:46:4e:
                    3a:1b:21:fe:c8:42:53:0d:5e:92:16:a5:54:b7:ea:
                    95:d0:75:95:76:a3:88:86:f1:a8:fc:43:c8:fd:0b:
                    a0:8e:72:d3:74:b4:d4:fc:28:45:b0:cb:ce:3c:dd:
                    1e:94:cb:01:b8:13:3b:c3:e9:6e:04:ca:15:74:a8:
                    66:c6:f2:3a:2f:f5:ca:82:a4:c6:2a:6a:12:dd:98:
                    18:5e:e7:df:c5:3a:0b:3a:4a:14:ed:81:ba:5e:eb:
                    7b:c7:36:cb:c8:5a:65:e6:2e:8f:92:6e:c2:48:fc:
                    87:16:ff:f8:80:11:b4:e6:c8:eb:b3:ff:eb:51:24:
                    b9:ed:32:0c:2b:88:47:48:23:a2:22:d1:7f:da:75:
                    a4:6d:6e:0e:3f:7b:22:49:b3:14:13:38:db:4a:b3:
                    7a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A2:F1:AB:42:DC:EE:51:61:7D:21:03:1C:AF:FA:47:86:EF:B6:3F
            X509v3 Authority Key Identifier:
                keyid:A4:B9:B4:F0:39:BC:82:86:01:C3:8E:0E:AD:4C:19:5A:BB:DF:FE:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLm08Dm8goYBw44OrUwZWrvf_mM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/56a163-9ccb-4131-972d-8cc6d192335b/1/pLm08Dm8goYBw44OrUwZWrvf_mM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:5c:c9:ce:68:90:9b:b9:85:46:90:97:01:19:a2:4e:5f:79:
         75:c7:f7:49:6c:84:34:2b:79:f6:70:bc:23:f4:5d:96:ec:e0:
         cf:09:a3:70:d2:a4:62:99:48:fc:a9:df:66:a7:47:c5:13:57:
         b9:7b:e3:64:bb:41:79:de:03:d3:07:21:63:77:bc:67:a2:46:
         a4:34:12:a6:99:bc:e3:96:9a:bf:4a:5d:e7:01:cf:51:67:af:
         10:b9:d4:d6:cb:4d:47:f3:b6:67:b2:e9:0c:e8:da:84:c1:f7:
         c7:1a:a0:b3:a8:b3:c2:33:1e:56:68:80:16:c4:16:37:a3:76:
         fd:72:20:85:56:88:3b:b2:f8:a1:3a:cf:35:6f:c6:ee:68:00:
         2f:ae:64:b1:9b:f3:23:5c:28:ce:a6:68:05:c3:6a:15:9e:57:
         e6:0f:38:52:50:ff:6f:47:c4:6a:62:d8:a7:5e:a9:3f:9f:b0:
         0a:18:47:cc:42:55:b7:ee:dc:2d:ff:a3:9c:fa:27:3f:36:54:
         f0:74:b9:37:2e:ee:78:a8:ff:f7:1d:bb:e0:4c:36:7d:ca:47:
         54:78:26:7e:e3:e9:06:80:54:81:6b:b2:cd:2c:77:fd:cd:28:
         bf:be:60:fb:04:99:e1:31:93:b8:f7:16:25:91:64:b4:8a:64:
         c7:1c:f3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:36:10 2026 by rpki-client