Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
File:                     R6qHj3a1CUfL197KBKyDLih7UU0.mft (raw, json)
Hash identifier:          3A1Ywfmb1Fv/BEnHlwTr2NFJuvDbc6JUAQFPj0lZaSk=
Subject key identifier:   DC:E3:D6:11:FF:AB:25:51:FA:E6:0B:F5:44:D1:18:F0:A6:90:4D:82
Authority key identifier: 47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D
Certificate issuer:       /CN=47aa878f76b50947cbd7deca04ac832e287b514d
Certificate serial:       01A1637C7E562734F7320149AD779DE678F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
Manifest number:          1ABC
Signing time:             Thu 22 Oct 2026 12:01:05 +0000
Manifest this update:     Thu 22 Oct 2026 12:01:05 +0000
Manifest next update:     Fri 23 Oct 2026 12:01:05 +0000
Files and hashes:         1: BivoMBiiKX1jnny2zKvOSrTYRUY.roa (hash: 8hB7iW5L2nOivqzn4BVVbjDdy20ghF6rXv05CZui8t8=)
                          2: KbO_rhcd_Py9G7bL23wPhQg_H1E.roa (hash: Gt+nLupr4LnlUwhUJTSyzH1eIxogBFFobyE9mPwX8Qw=)
                          3: LJQ2CSjZ3vUCVBe9x_aAVbx2eLs.roa (hash: 37sNgm8sahuJz7mDJK1LfOWx1Msk+HpvlqlI2WPKepM=)
                          4: LtE8in6FERFIEpRVKUfnYcuzmpQ.roa (hash: q4RfQwClDkZ6vDi0Ca1x3tfdzvX5MK4MZ7S3KpJaJns=)
                          5: R6qHj3a1CUfL197KBKyDLih7UU0.crl (hash: ol4n4urg9aJN5Suti1h6D8Qccw08TOF1OFjO4xb7NCk=)
                          6: hEXbRt4GR6sdCxsQ6con5D0SlaE.roa (hash: jGZHf86R7GGQ0RMCh4pHt1hpLp3iGJcQcFX98OKa04k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 12:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:63:7c:7e:56:27:34:f7:32:01:49:ad:77:9d:e6:78:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47aa878f76b50947cbd7deca04ac832e287b514d
        Validity
            Not Before: Oct 22 12:01:05 2026 GMT
            Not After : Oct 23 12:01:05 2026 GMT
        Subject: CN=dce3d611ffab2551fae60bf544d118f0a6904d82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:79:7d:d0:5d:69:12:da:b7:b1:32:b8:69:13:
                    6b:c4:04:35:77:13:17:c1:1e:e3:64:4c:66:3e:dc:
                    4c:39:55:76:ab:88:69:50:8a:a0:4e:f0:4f:85:6a:
                    f3:fd:e2:c5:0e:29:4f:f2:ae:0a:3c:29:a8:4b:57:
                    7d:e6:e1:46:5b:3d:f7:5f:46:27:80:39:be:cf:d8:
                    24:14:d1:7c:68:27:69:8e:1b:29:e0:e8:ab:67:49:
                    16:c6:33:80:38:1b:26:69:15:a7:fd:8e:53:98:ea:
                    f4:da:f7:53:26:2d:51:91:70:ca:89:4a:f6:66:56:
                    4e:4c:d7:32:50:28:92:8a:1c:11:10:59:ff:b2:4f:
                    8c:8c:67:f0:22:cb:32:58:41:81:25:5e:2d:fd:38:
                    69:36:6c:c0:a9:53:4f:31:78:e9:02:2d:91:01:16:
                    0a:63:c4:ce:af:7a:ba:0c:73:9a:69:12:80:f8:a0:
                    2f:30:b1:c0:aa:4b:ab:09:dd:1d:23:d8:9e:3f:75:
                    9a:4a:77:8a:a9:3c:7b:84:70:a5:85:96:98:6a:e9:
                    d9:2b:9e:b6:d6:7e:b6:04:30:59:f7:d9:33:1f:3a:
                    81:34:e4:4e:e2:05:5b:17:ab:cd:5a:6b:5e:f8:15:
                    7f:d6:e8:b7:a8:8c:33:3b:96:5f:ad:4f:40:31:58:
                    32:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E3:D6:11:FF:AB:25:51:FA:E6:0B:F5:44:D1:18:F0:A6:90:4D:82
            X509v3 Authority Key Identifier:
                keyid:47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:6f:27:04:54:f9:24:0a:9e:21:c8:2f:0b:bf:ec:79:23:ca:
         63:1c:99:0e:e2:23:d5:a7:c0:9a:8a:31:12:a5:4b:4c:c1:77:
         74:78:c5:cd:fb:6d:5a:69:bb:2e:a9:d1:17:7a:3d:34:5d:e7:
         9b:a6:8c:d5:92:41:f1:a4:b1:b0:92:ab:9c:0b:df:b9:fe:5d:
         87:dc:2a:57:06:d5:c7:5e:9c:b3:2d:5c:e8:b2:78:9f:95:3e:
         37:fc:d6:de:88:c7:6f:1c:7b:dd:5b:8b:ee:ec:f4:76:83:f8:
         78:0b:24:4b:cb:e2:5b:b9:8b:93:84:e9:f2:83:56:fa:bf:c2:
         3b:15:86:b6:06:e1:48:0b:72:4b:c1:bc:5a:31:5a:48:6f:88:
         3a:3e:0f:ac:c3:80:b6:8f:e5:a3:27:e5:b3:b8:d0:e5:6e:9d:
         ab:ba:78:28:19:10:93:e2:14:f7:f5:70:08:db:4e:ba:6f:df:
         27:e3:c6:db:18:a4:c1:dc:79:99:63:47:98:90:84:93:a0:ff:
         48:98:f1:25:3c:ba:7f:e8:d9:07:94:52:26:1a:51:18:51:3c:
         6f:b2:ba:c1:06:75:aa:0c:50:b0:31:29:1c:8c:b3:e5:35:2e:
         ed:d7:a1:36:31:0f:65:0b:5d:1c:83:c1:be:fa:46:d0:bf:e4:
         66:1f:19:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 23:05:10 2026 by rpki-client