Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
File:                     a5LPM5DKpYeedZcpzZAIxuylWic.mft (raw, json)
Hash identifier:          T04GeDlKwDuXcRnSvKtWNe233UU8Od1xGW5l3nOToN0=
Subject key identifier:   BD:BC:6B:46:92:D4:AA:1B:BB:64:AA:09:AF:60:84:F8:DA:FC:45:D2
Authority key identifier: 6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27
Certificate issuer:       /CN=6b92cf3390caa5879e759729cd9008c6eca55a27
Certificate serial:       01A14014E7C3517FEAE5075548316F8753BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
Manifest number:          0AD4
Signing time:             Thu 15 Oct 2026 15:01:14 +0000
Manifest this update:     Thu 15 Oct 2026 15:01:14 +0000
Manifest next update:     Fri 16 Oct 2026 15:01:14 +0000
Files and hashes:         1: KtxgiXPBK2OwoC3ywjIlMfN-WUQ.roa (hash: 82rT1wn8tLHS3yTCKW0vJmoxGtSf+pDEWCX5BqeTJXM=)
                          2: WjMwl8ZfVOdoyhMOTA8BMehWEJI.roa (hash: RHZCcknMsS5tx01/QhJWB8dlrXaXtmtm/9S2WPp95p0=)
                          3: a5LPM5DKpYeedZcpzZAIxuylWic.crl (hash: Pl9oF3WbabaQQ9/C2ZdR6+rXaDIzQvXhjQmIhOyCqQI=)
                          4: kKa1XAZi28YxfpB3mEQct4rM5D8.roa (hash: WRwHyOAs556xA5lR2SanPEOIWdbcPQ5+gONgps5Y/Wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 15:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:14:e7:c3:51:7f:ea:e5:07:55:48:31:6f:87:53:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b92cf3390caa5879e759729cd9008c6eca55a27
        Validity
            Not Before: Oct 15 15:01:14 2026 GMT
            Not After : Oct 16 15:01:14 2026 GMT
        Subject: CN=bdbc6b4692d4aa1bbb64aa09af6084f8dafc45d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:6f:96:31:18:0b:dc:d4:35:be:5d:d7:36:66:
                    f6:9b:16:d2:1a:7a:29:ec:0b:77:df:3f:d3:40:81:
                    14:9f:93:84:03:f7:48:b0:4c:b9:07:39:41:19:a7:
                    4a:0c:bc:8d:65:38:4e:99:e3:dc:5f:60:40:93:02:
                    a0:46:7d:f1:f8:45:d7:6d:0b:20:29:65:a0:0d:e1:
                    7b:33:c3:b3:7a:be:2a:40:de:53:0c:73:b7:c9:c2:
                    93:dd:11:6b:1e:2c:fd:6f:c1:95:f4:13:32:23:06:
                    bd:88:ce:94:8f:01:a0:50:7d:72:e9:9b:91:72:f1:
                    d8:16:d8:34:38:03:b6:40:84:c8:15:53:b0:77:31:
                    c8:bb:d7:41:5b:d3:ea:07:ca:a0:0b:72:18:97:0f:
                    b5:a3:93:3a:24:22:29:50:43:c8:1a:cd:3b:11:0a:
                    d6:20:23:d3:a0:dc:64:02:09:42:0a:89:4e:32:1f:
                    2e:a5:d6:84:6f:45:c8:a8:8f:3b:aa:98:43:bb:68:
                    bf:43:26:da:ce:f3:da:bd:a3:1d:a6:e7:ca:7b:3d:
                    8f:b5:95:5e:55:23:e5:ef:09:db:74:88:6d:8b:91:
                    12:dd:06:31:32:c9:8a:a9:24:d7:82:4b:c5:43:8a:
                    97:7e:ee:ee:ca:64:1e:50:bc:1f:78:f1:45:a5:60:
                    5c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BC:6B:46:92:D4:AA:1B:BB:64:AA:09:AF:60:84:F8:DA:FC:45:D2
            X509v3 Authority Key Identifier:
                keyid:6B:92:CF:33:90:CA:A5:87:9E:75:97:29:CD:90:08:C6:EC:A5:5A:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5LPM5DKpYeedZcpzZAIxuylWic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/12349e-5282-472a-ae52-2a06223623e0/1/a5LPM5DKpYeedZcpzZAIxuylWic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:05:b0:64:5c:04:ad:99:e6:72:a6:18:b0:dc:1b:c3:e2:99:
         69:c1:f8:0d:69:6f:2b:48:7b:40:c8:4a:f2:f8:59:6e:24:1e:
         17:4b:06:c0:67:09:ef:70:fe:78:02:62:4f:1f:ba:58:41:5b:
         90:b7:5e:ab:f1:a0:e3:a6:d9:6c:16:8e:74:6d:8e:34:08:d2:
         d0:77:15:27:f3:56:aa:28:24:09:37:64:10:14:c2:a7:cd:61:
         d0:4a:39:dc:96:ec:7b:1e:54:0a:1c:a4:91:b6:19:c2:74:9f:
         bd:43:be:f8:a3:d9:14:af:87:46:78:75:7e:18:8a:ac:92:23:
         c5:c7:6d:86:88:98:1b:c0:82:a1:99:b1:ed:3a:a2:fa:02:a3:
         ca:e5:c7:40:a8:ca:e7:5d:67:16:a2:94:a5:7c:a6:ba:80:a9:
         79:ef:f9:d6:65:0f:da:ad:17:44:38:df:b6:3a:67:97:6b:89:
         c8:3c:41:1d:27:b6:98:2d:45:05:45:5a:8f:5b:47:2e:50:65:
         cc:f1:4d:f8:a2:c0:08:42:6b:38:0d:9c:6a:f7:48:03:e7:bf:
         9c:92:a9:1a:1b:8d:67:23:fd:06:7d:21:09:a8:96:c0:e2:9f:
         07:52:14:4a:76:4e:96:c9:a0:0e:cb:ce:2b:6b:64:3a:0f:1c:
         4f:11:2f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:05:39 2026 by rpki-client