Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
File:                     sQvyxqnxpCuKzuASWfkfUUSrivU.mft (raw, json)
Hash identifier:          Z3gtkrGIkcph9A32LkhnJmS0Q2y/TBdmVu7b7jL9sP8=
Subject key identifier:   E5:DC:A3:5F:2F:12:2F:EC:E4:AB:93:8A:3F:C2:8E:0E:7B:39:0B:69
Authority key identifier: B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5
Certificate issuer:       /CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
Certificate serial:       01A184BEDEBDCBA31ACCB26018187726AE2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
Manifest number:          0A62
Signing time:             Wed 28 Oct 2026 23:01:03 +0000
Manifest this update:     Wed 28 Oct 2026 23:01:03 +0000
Manifest next update:     Thu 29 Oct 2026 23:01:03 +0000
Files and hashes:         1: IAJoSGAdba1WOQaqMAKoSdFEzeg.asa (hash: nvLhoLhLGBftquIxPSyHuikIUL8Xb8chkA8ma/JqMjM=)
                          2: fe8ukOhhEe7KXEfSiyV_DHengoY.roa (hash: HwZz3DBgstgEomr/Tp/wiHiggtvFxa7jhA0tFGZLzl8=)
                          3: sQvyxqnxpCuKzuASWfkfUUSrivU.crl (hash: GcFeKpnjyGSIfzt0j7L7jnwjCxp5b1LOa98nu5P4bxI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:84:be:de:bd:cb:a3:1a:cc:b2:60:18:18:77:26:ae:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b10bf2c6a9f1a42b8acee01259f91f5144ab8af5
        Validity
            Not Before: Oct 28 23:01:03 2026 GMT
            Not After : Oct 29 23:01:03 2026 GMT
        Subject: CN=e5dca35f2f122fece4ab938a3fc28e0e7b390b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:de:8a:a1:2e:ec:cc:70:74:5c:db:62:67:ab:
                    dc:47:0c:7b:81:9c:fc:3e:7f:8c:1a:c6:c3:a4:2f:
                    df:dd:a2:9c:ca:63:26:1b:ec:7f:b6:9c:91:3c:89:
                    47:3b:8a:3a:73:ce:a8:90:9f:47:59:a8:5a:ab:21:
                    0b:98:17:73:69:43:af:22:e5:60:c9:40:d1:ac:f7:
                    da:97:67:82:32:a0:c6:2a:34:56:b2:f3:b6:39:23:
                    c8:5e:87:86:0b:4e:94:72:37:ac:40:18:0a:db:f2:
                    de:f8:46:39:0e:0c:e3:4c:32:30:d7:38:8a:8b:b7:
                    69:a2:d5:dd:65:1c:c8:b1:35:e8:ba:8e:fe:8f:43:
                    bf:3c:6e:ca:2e:a3:dd:1d:b3:fe:65:59:30:d9:10:
                    f6:bc:0c:3c:ab:0c:72:c7:13:7d:88:1e:70:78:79:
                    1a:83:6e:9a:88:35:90:b4:80:86:01:90:5a:db:c8:
                    f4:cf:bd:3c:2f:6b:f3:d4:9d:4d:06:77:b0:9d:b2:
                    1e:5f:31:e5:56:32:f9:02:2e:87:28:f6:8f:3f:97:
                    6b:2d:c4:3f:3c:e5:e6:fd:61:96:b4:6a:c9:80:c8:
                    d6:40:a5:05:7c:1d:32:6c:78:08:b9:b3:d3:9d:fc:
                    0a:02:b6:87:bf:68:f1:52:3a:03:37:e6:30:42:4e:
                    30:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DC:A3:5F:2F:12:2F:EC:E4:AB:93:8A:3F:C2:8E:0E:7B:39:0B:69
            X509v3 Authority Key Identifier:
                keyid:B1:0B:F2:C6:A9:F1:A4:2B:8A:CE:E0:12:59:F9:1F:51:44:AB:8A:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQvyxqnxpCuKzuASWfkfUUSrivU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/ed188a-0fff-4f0f-a26d-251a9c864d26/1/sQvyxqnxpCuKzuASWfkfUUSrivU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:8b:e5:83:94:1c:49:7d:dd:96:32:43:ad:35:37:c5:64:1f:
         ed:df:f2:20:91:ed:5c:1f:22:07:35:9a:63:54:e3:06:e5:3d:
         85:7c:0d:15:d9:d2:96:2a:d3:d8:31:92:c1:17:61:de:d2:a5:
         c5:b1:6e:ba:62:a5:9c:52:47:a1:ac:c6:f3:4f:2d:c4:22:b2:
         6e:ca:80:65:d7:f9:99:5c:33:e0:42:23:b0:69:17:d0:f8:8e:
         e1:a5:b6:ee:68:11:39:83:9f:07:73:c9:68:08:cd:7e:1e:9d:
         7a:28:af:eb:06:63:03:ff:cf:60:bb:8e:97:38:22:35:1a:8c:
         00:14:f6:85:91:f2:35:d4:f5:ab:cf:ab:46:4f:46:20:f5:d8:
         37:66:63:ea:95:56:e4:69:aa:c4:c7:04:65:e3:cb:1f:85:30:
         f2:c6:5f:e2:27:c9:58:66:09:3d:4e:0b:c4:e3:c4:a8:c3:7d:
         c1:01:96:94:74:f8:01:46:26:d2:3b:67:09:52:b3:df:80:92:
         e5:e3:04:b7:26:58:77:1e:4a:24:38:2d:05:25:ff:b3:33:ad:
         52:28:8a:c9:0a:96:62:cd:a7:ff:d9:d9:8b:5d:bc:e3:26:7d:
         00:a7:19:4f:8d:aa:59:0c:40:a1:3b:9a:0f:02:ab:58:bb:e1:
         1d:8c:36:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:47:54 2026 by rpki-client