Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
File:                     0sHV_U4greXxG2avsQpUyP_ksEA.mft (raw, json)
Hash identifier:          X9FSCJFGxnfKT4uFaTh93I1nkCmo90LbJN+Ka9nBjTE=
Subject key identifier:   FE:B4:B6:72:CE:88:CC:AC:86:29:0F:45:AE:41:26:56:AD:38:99:D6
Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
Certificate issuer:       /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Certificate serial:       01A13D810FD9D989582EBD49DFC428C39345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
Manifest number:          1965
Signing time:             Thu 15 Oct 2026 03:00:30 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:30 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:30 +0000
Files and hashes:         1: 0sHV_U4greXxG2avsQpUyP_ksEA.crl (hash: ZRQMhG1c4mo+OUKYshFK/L2XMb27N158IEYs7/vZvlA=)
                          2: HXdTxxWcJtGk43e4sYB_pqFMLTc.roa (hash: RsmEntoDX046XG0OnjFT3g2UwaVd62q2eGZGnABzJrY=)
                          3: aAz2084YN5AIEG28w26S7CIam4E.roa (hash: aLh2/I7u2RUBoHwMQV1fEF1N56viK2J9i2I4M3Pdo98=)
                          4: xjT1qO5EWxpQrrhnqAJVt7vBTz4.roa (hash: jjMJpW6iAOXQaad1T6wVanui4hCLnhsX9J2X5epM//8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:0f:d9:d9:89:58:2e:bd:49:df:c4:28:c3:93:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
        Validity
            Not Before: Oct 15 03:00:30 2026 GMT
            Not After : Oct 16 03:00:30 2026 GMT
        Subject: CN=feb4b672ce88ccac86290f45ae412656ad3899d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e4:8d:36:36:52:f1:3f:b0:00:76:50:3f:34:
                    d5:8c:f4:c4:20:13:37:31:99:10:6a:37:37:74:d0:
                    4d:43:4a:1e:d7:5d:e5:d5:7a:e4:fc:29:fb:f6:8c:
                    64:34:43:1e:a8:34:9a:76:cd:a2:a5:4f:3b:ee:67:
                    c1:a4:66:3f:af:b5:80:4f:32:0d:5f:9b:7e:3f:c8:
                    bc:4a:6c:c7:cd:87:38:bf:a4:41:7b:3a:28:53:e4:
                    25:02:1f:05:0b:d4:20:ef:b8:73:8f:fa:4e:3c:60:
                    71:30:d0:4e:a9:d7:73:9e:20:86:ca:83:1c:4d:90:
                    d0:be:f0:93:8c:fa:ed:7b:55:b6:5f:a1:75:2e:09:
                    fe:81:de:3b:a2:03:6b:1c:ef:68:ed:d0:59:ec:97:
                    d4:6c:0d:75:0c:2c:26:11:1f:ab:b9:74:01:9a:a7:
                    fc:97:15:2c:b2:1f:cc:be:06:6b:ab:95:4a:d0:f9:
                    83:9f:72:85:fc:03:2e:18:c6:a6:dd:2f:dc:9d:dc:
                    7e:0a:62:41:68:80:b7:f4:93:91:3c:f5:1f:3f:d5:
                    2d:18:c5:8c:ae:09:95:9d:37:51:cf:0f:75:44:51:
                    19:42:7a:8f:37:d1:7a:e6:6a:c8:a2:0e:54:37:c9:
                    d0:94:45:fe:9e:78:2d:d8:cc:cc:c9:15:a0:8e:bc:
                    be:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B4:B6:72:CE:88:CC:AC:86:29:0F:45:AE:41:26:56:AD:38:99:D6
            X509v3 Authority Key Identifier:
                keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:cc:d3:1e:28:c2:5a:d8:ae:c1:9e:2d:c8:f9:a8:60:83:dd:
         98:84:d1:0c:02:06:81:98:43:28:ee:35:52:a9:26:01:a7:8e:
         0d:57:de:8d:39:ba:0e:61:fd:6e:b3:d2:64:1a:24:e8:50:91:
         a0:7c:ad:9f:93:4b:42:09:17:3d:5b:f1:d7:ca:3d:c3:46:38:
         b6:0d:4d:8f:48:27:2a:db:fa:4f:30:21:c7:b6:d0:19:d8:5a:
         f0:04:78:9e:4f:30:44:52:5d:16:0b:ce:57:dd:70:35:b0:e2:
         be:65:f8:05:b5:f6:18:ef:ba:be:b8:88:4c:71:ee:cc:33:c2:
         e7:22:b5:05:a0:7d:07:38:e8:62:69:3d:ae:7f:2a:6e:37:79:
         23:d8:4f:6d:07:32:8d:62:f7:fd:be:76:dd:14:ee:a0:2a:fb:
         8c:67:1b:e2:3a:7a:7f:fc:7d:a3:d9:2c:28:9e:5f:96:a2:51:
         a8:a5:ae:b3:e6:2a:ca:e9:dc:94:6f:b6:3b:f5:76:df:6c:df:
         d4:15:70:1e:e1:0b:f7:6d:f0:7d:2b:5c:98:7a:cb:e3:c5:9d:
         9b:25:20:86:b9:44:c1:2e:09:d0:ba:9b:b8:25:1d:eb:b6:14:
         d0:5f:8f:09:91:17:de:e0:f9:7f:76:b5:e3:e0:97:09:95:ca:
         7b:a5:70:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:32:13 2026 by rpki-client