Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
File:                     pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json)
Hash identifier:          4dqIrrIMS7qjazPXTcP1rpEr/iTY9rP8AaM020JKzpI=
Subject key identifier:   43:10:75:AA:68:43:31:13:F8:C8:49:A8:61:77:26:6C:AF:CC:AC:5F
Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4
Certificate issuer:       /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
Certificate serial:       01A1618E15BA8C94506D8321D839192F7066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
Manifest number:          0513
Signing time:             Thu 22 Oct 2026 03:01:03 +0000
Manifest this update:     Thu 22 Oct 2026 03:01:03 +0000
Manifest next update:     Fri 23 Oct 2026 03:01:03 +0000
Files and hashes:         1: 0MThwc4dXYxn4L8jsKgRgHG69GU.roa (hash: MKgBpJ/UU/ZtKigtHysf59U625q1r0cBUzNiuUSy1qM=)
                          2: 1-QpEsL_AtML3ScLvBXvkFT8qJ80.roa (hash: +pcA6aIuMEkhsfThQ01/KfIXIckOnFaz60ouEEzocyo=)
                          3: 3fS5dP7sG-xvFMbBP7UUi0eUUSk.roa (hash: pz2rG+hBKqBtyp01TUwFPW7c8W6AKlPJM3L7dBpBCVg=)
                          4: 5N096s-nFOH4_ZBqCouMJS-TbiU.roa (hash: Hh9HPS5FHpAUp4ixlEmsdD6a/vJqjzSz9yCpNR0cnOs=)
                          5: CiOsTyFL2d40vTJ0m9LvEDBbyFI.roa (hash: VtrIAitong9umQO4BUpXCYiuBJOk+XfuDXmVgwoHhXU=)
                          6: Eja0CE3ZxbDf7o-_WJU2Gi-eewc.roa (hash: fP4z0QfDdb5/q/K705XT9QrkxFFgOo2XV/DFWmhk+oA=)
                          7: S5Oy7oscdtTcE5PBdD76sxyxh8g.roa (hash: wjsYCyEbFrcGXZDDLcR3Z02bldg/o6w1jakXsiZwWwo=)
                          8: WMJW8PYFLwejvXuXLZdPSAFJeBs.roa (hash: K12FYnuwBEd2xhuCex9yO/lOKeYGEYVxhKuR491paWw=)
                          9: aPo9aKd2phX6IWiBvTkLJP8xZtM.roa (hash: ncpZr6Zu5WNnsN4SU+6F0b3Jkur0FLP5e1Yt6yA8ajA=)
                          10: cngSEETmst842JVqCMuJdzGT1YQ.roa (hash: +hcoS9Ai/ANXECo9DMi3KQohP9rUHNrlLQnH58O1SI0=)
                          11: demNlliFBXRCd4_BO7uGvr9OBWs.roa (hash: 3e0uS6Ngag4AQ8UkZJyAtJ3ajUAIc6mhDPE4a8UAS9c=)
                          12: hRhmaOU4gZ_tvD1FIXmr8g0vgP4.roa (hash: zCLqNFR/17rQqa13pT3OcgSGKUtKcJcNjAIXmiREIUM=)
                          13: jPK12EYF_F8N9qChJCYpeTggBjM.roa (hash: cyHVL2RzfZB+h/aqJsGsHiAbfgN+RdRCYZxKbcrn16k=)
                          14: mEFHR3ZO54gTaeeTWU5lmspVd_s.roa (hash: 0w2qL/ViAbe9xLVH17D2YZ/NouaV1VQroh9IMJno9TE=)
                          15: ot2MZTCpP9nZaT3V6EzfFvrzrkw.roa (hash: TYtFpB5ZnIdcgyHQu349+PWyQhvze7WRX2PQON2Vge0=)
                          16: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: uFN/lPh7q2SP5tzbxN7nRsS7A6Ql/9p5usVsYMYSoBo=)
                          17: t2IZILmIlkrYmXptt2wUGw2uQwM.roa (hash: qFiwLdqK/Y7OvzgsKoQ4QT/arrjkDtpZ8/DZq9XFtzw=)
                          18: wnofk64UVBKP93Op1kPJw8OAZVA.roa (hash: tsj9FpIfOqGKJfVIRwRR/8c5mdUoax0lYr1/5kPg6Rc=)
                          19: x8XmJx41-rS3oQopw9axsmo7U5o.roa (hash: wJ4AKER/vvm4LzEhdW9wwiO9rdRJ4Gqly2DS/+StjsU=)
                          20: zn5InVym4Qw5pjaPhyuTeRl9bXQ.roa (hash: 1aIIVljxsESDDdBO8gz+BvW7tts7pQ5Z+DlOMn4Xgvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 03:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:61:8e:15:ba:8c:94:50:6d:83:21:d8:39:19:2f:70:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4
        Validity
            Not Before: Oct 22 03:01:03 2026 GMT
            Not After : Oct 23 03:01:03 2026 GMT
        Subject: CN=431075aa68433113f8c849a86177266cafccac5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:f9:75:77:38:d6:87:e9:65:e9:a4:56:2d:
                    1c:60:aa:1a:b2:b9:15:32:3c:46:d7:7a:ef:b8:f5:
                    7d:87:8b:69:d8:71:03:86:36:d6:ac:7e:74:e7:c4:
                    5a:56:73:58:0a:b1:cd:82:a1:5b:b1:9e:7b:0b:c9:
                    99:8f:69:07:3e:5d:19:86:ba:ab:d3:2e:19:63:1b:
                    38:0e:ea:57:a7:a6:c1:f9:13:b2:84:97:15:16:c1:
                    87:a3:8f:bb:a4:9d:33:4f:57:42:63:f1:24:c6:b9:
                    12:94:66:af:3a:fe:36:b1:92:fe:30:c4:7b:44:43:
                    63:53:2b:e3:46:78:73:24:8b:62:24:93:39:03:14:
                    4e:ce:3e:ad:ef:80:8d:69:56:fd:d2:59:ed:d6:c4:
                    8f:44:d0:77:11:2c:5d:05:6f:08:f0:04:95:69:71:
                    bb:a7:32:06:57:d3:14:27:7e:ea:44:bd:45:f4:d7:
                    9d:9a:8c:6b:d2:5a:6d:dd:90:c8:ce:95:a3:d1:86:
                    10:2a:0a:e2:98:ef:77:d9:25:47:c6:7b:67:8b:42:
                    b5:e7:8e:05:6e:6c:90:77:1a:be:13:7c:b6:d6:e9:
                    ab:65:0e:11:79:c2:fb:d9:3a:07:e9:9b:5d:96:b9:
                    68:49:d2:ab:11:9d:54:c2:60:a7:3a:2f:c3:7a:92:
                    b5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:10:75:AA:68:43:31:13:F8:C8:49:A8:61:77:26:6C:AF:CC:AC:5F
            X509v3 Authority Key Identifier:
                keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:05:28:7e:70:68:d2:69:28:57:f2:2b:d6:9d:47:be:c9:74:
         4b:c1:ec:b2:bb:f3:8f:01:65:9b:fe:61:b2:b3:08:d2:62:2d:
         9a:c4:f2:96:47:be:c6:6d:5e:fe:b3:20:7d:d8:ff:98:bf:3c:
         9f:57:c2:6b:3e:ed:5e:4d:cb:eb:db:5c:d7:78:7d:1e:96:96:
         a8:a8:85:14:ba:49:52:3f:d9:a1:41:7c:d9:70:0e:ae:38:90:
         07:e2:41:40:26:2a:ad:b6:cb:c8:24:14:0c:5c:95:1f:4f:28:
         55:56:d3:21:8d:00:5c:3b:a2:2c:4e:c8:9c:a5:6c:f1:68:ca:
         6c:df:71:6d:11:fe:f3:f8:10:b6:aa:25:94:c2:0b:50:d0:6e:
         84:92:cf:26:dd:31:48:bc:ab:24:b6:b6:2d:e8:03:3f:31:59:
         c2:0b:7f:a6:77:3a:11:0b:c1:a6:0b:4d:38:2a:7f:5e:b9:b1:
         1b:66:de:35:9c:e5:98:57:7a:ec:31:00:38:12:4c:0a:5d:18:
         b6:d6:34:43:c2:98:a6:1c:bd:bf:c5:dd:e4:41:ab:7a:c7:34:
         08:86:36:3a:6c:64:a1:cd:eb:55:26:d4:f5:d7:04:b0:6a:a6:
         58:3a:29:d8:1c:7f:ad:6e:23:d7:7d:f9:87:39:5d:24:f4:c7:
         dc:39:d4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:33:50 2026 by rpki-client