Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
File:                     wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft (raw, json)
Hash identifier:          QxR45h8Vw7JfSkt23CKZ4Axth3oYJ9kl0K83DnGjpuY=
Subject key identifier:   B9:DE:B3:BE:B5:DE:86:9F:B8:FF:13:20:CD:D7:CC:A8:A8:B4:3B:D5
Authority key identifier: C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC
Certificate issuer:       /CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
Certificate serial:       01A17CCE4F3F31DEB05B5F0570F98BFBC63F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
Manifest number:          1AC7
Signing time:             Tue 27 Oct 2026 10:00:57 +0000
Manifest this update:     Tue 27 Oct 2026 10:00:57 +0000
Manifest next update:     Wed 28 Oct 2026 10:00:57 +0000
Files and hashes:         1: jsDYE34UviBew9m4vDFXo1V4oc8.roa (hash: gdIEnE0XT9mqo9eWipuUMBco0clAJ+AoSte8Ebzw+Y4=)
                          2: wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl (hash: 3y1tqoowngca+qIIeshIg7SEpuqASAktOZafkmbHeAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:ce:4f:3f:31:de:b0:5b:5f:05:70:f9:8b:fb:c6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c126122b4ceee41f97ffb8cc22550be3fa0a53dc
        Validity
            Not Before: Oct 27 10:00:57 2026 GMT
            Not After : Oct 28 10:00:57 2026 GMT
        Subject: CN=b9deb3beb5de869fb8ff1320cdd7cca8a8b43bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:be:c3:bb:f3:8f:3f:d6:7b:0d:3a:be:79:10:
                    64:07:db:da:69:74:1d:02:a4:84:83:ae:40:71:e3:
                    e9:6b:34:a1:df:0a:6a:a8:13:98:80:6c:76:88:c0:
                    8e:16:7c:13:15:0b:d1:df:30:9d:60:6b:dc:2b:7c:
                    c7:86:77:b9:c5:d4:14:ba:78:c4:f8:ad:9c:2a:54:
                    81:da:60:61:d3:2e:44:9e:b7:4b:42:8a:69:f0:1f:
                    93:98:5d:c0:47:75:a5:90:4b:0d:95:ba:d6:83:ad:
                    9e:e4:30:d9:1e:cb:fa:dd:e4:f4:50:e9:e8:14:fb:
                    68:4c:82:39:9e:c7:fb:d3:f2:52:a7:03:e6:fa:2d:
                    1a:06:81:94:4c:a6:33:30:97:5e:d5:df:7f:d1:19:
                    c0:f7:a0:82:81:7b:82:e8:27:98:fb:1d:35:20:c4:
                    f4:04:7b:1f:95:d5:a9:57:39:23:2c:c7:42:1c:d7:
                    ce:f4:b7:bb:e2:9d:7d:1c:9a:c7:58:3b:eb:6c:ae:
                    3f:93:35:c4:95:c3:60:3b:49:b3:b1:a6:cc:e4:ad:
                    af:d8:b8:60:91:1d:a7:88:e5:ca:fc:eb:56:be:26:
                    aa:97:81:cd:fa:78:96:a2:0e:9a:63:da:9b:c1:32:
                    a9:d3:1c:16:b4:a4:d0:bb:23:f9:cb:9a:c7:3c:a4:
                    f3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:DE:B3:BE:B5:DE:86:9F:B8:FF:13:20:CD:D7:CC:A8:A8:B4:3B:D5
            X509v3 Authority Key Identifier:
                keyid:C1:26:12:2B:4C:EE:E4:1F:97:FF:B8:CC:22:55:0B:E3:FA:0A:53:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSYSK0zu5B-X_7jMIlUL4_oKU9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/80393f-2bd5-4668-acbd-152b463aa3ca/1/wSYSK0zu5B-X_7jMIlUL4_oKU9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:89:20:18:57:39:f0:a6:c4:61:1d:62:1e:ff:74:20:78:25:
         06:2d:64:9c:c8:dc:43:76:11:b2:22:46:fc:e6:7c:54:25:48:
         be:85:c0:c6:a9:99:ab:31:14:ff:7c:42:a1:5f:ec:96:67:07:
         25:55:29:0d:1c:f1:20:b7:0f:85:c8:bc:2a:33:91:1c:13:c4:
         f0:72:e7:30:60:ac:32:bf:df:d2:93:ec:94:d7:bc:f6:f6:53:
         c7:16:2d:5f:4c:4e:c0:35:4d:3f:88:1c:75:ec:2e:71:84:f7:
         83:ea:aa:1f:02:51:7e:2c:3e:34:c1:03:37:62:5f:ac:d7:23:
         1a:11:2b:d0:d6:ad:76:e2:7a:67:5c:9e:c9:97:54:b1:5f:6d:
         5e:00:27:51:08:a2:1e:32:15:24:8c:92:3b:92:ed:62:09:3e:
         d7:21:8d:f1:f6:e8:b7:66:b0:aa:04:32:9d:2f:60:ee:e8:61:
         b9:01:dc:e8:33:0c:a7:43:87:f9:23:86:39:c8:b9:a0:23:c2:
         cb:9a:22:fa:b8:13:b0:53:e3:48:26:c9:27:f0:2a:86:c1:76:
         69:63:fe:ce:51:67:e3:16:e8:71:17:2b:8c:bb:c0:c0:40:36:
         18:e6:46:82:49:e3:65:e2:31:76:3a:72:d3:08:30:9e:ea:e8:
         8a:11:a0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 13:41:28 2026 by rpki-client