Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
File:                     Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft (raw, json)
Hash identifier:          RXSWnmxoC5iOFYf+213fFLjiGPLxlzZwg+YKcCIwiBQ=
Subject key identifier:   EC:1C:5E:43:67:29:A2:B8:2C:39:28:8D:87:EB:9A:6C:88:0F:92:F3
Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Certificate issuer:       /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Certificate serial:       01A17F98768BB3BE853633EC3421B3354FFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
Manifest number:          1662
Signing time:             Tue 27 Oct 2026 23:01:00 +0000
Manifest this update:     Tue 27 Oct 2026 23:01:00 +0000
Manifest next update:     Wed 28 Oct 2026 23:01:00 +0000
Files and hashes:         1: 24FTYWICcL1IJMQzkDfWg_xAqy0.roa (hash: wR9QeEuSdjQ+0/1YXf2bsDaKWqR9jJk06EOJ2Q73fWE=)
                          2: DuCPfh0BtVEkEb46CmQmkJTEoiA.roa (hash: 4H+ADRlPO/G+o1dwkSRBoJP9og9DDlqIZuQkG2ZaHhA=)
                          3: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl (hash: xyaz5oFKa9sxk4AzbmILvHwRpq6zFOwXXYCJKv62yfU=)
                          4: mbhPJYTTTLQjyhJPjHYhYA_8z0g.asa (hash: x5khb0HktZZHvbZTlDX34dWsKJuM/5mUFiMflItMxQA=)
                          5: wqS_wfIdBlK7kC9o4zizHf0FBlk.roa (hash: Dvd4isDlS6MYBBiZdCyk9gJMQ1pHNGRCGxx3yyLp9qE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:98:76:8b:b3:be:85:36:33:ec:34:21:b3:35:4f:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
        Validity
            Not Before: Oct 27 23:01:00 2026 GMT
            Not After : Oct 28 23:01:00 2026 GMT
        Subject: CN=ec1c5e436729a2b82c39288d87eb9a6c880f92f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:c2:21:25:28:fb:02:53:d3:e5:ec:5c:f5:
                    00:75:63:3f:d3:1a:a5:e8:a2:60:1e:a4:70:fe:a0:
                    5b:67:e1:37:d7:7d:c5:28:c5:5c:7f:01:c9:c5:10:
                    53:0a:62:45:9e:e7:92:d4:a7:5c:29:2d:e6:b9:50:
                    e6:38:ab:cc:d6:e2:0f:86:12:09:d8:e6:70:a7:59:
                    97:c9:70:bb:09:d9:51:13:1d:b4:8c:31:03:85:e9:
                    bf:ee:b4:bb:b8:c2:50:ef:b1:c8:d9:27:c0:91:83:
                    76:3e:a7:4d:8f:9f:d7:b3:90:80:c1:a3:c2:c1:dc:
                    a8:9e:11:d7:fe:47:d6:77:3a:2d:89:3d:5c:73:0d:
                    9f:0e:1a:3f:98:c7:c9:54:b9:d1:d3:e1:d1:63:ce:
                    3b:48:fa:fb:d6:17:cc:16:11:22:f8:73:66:da:c7:
                    ea:31:75:9a:ee:d5:2e:7a:08:2b:cc:30:86:af:58:
                    55:88:5c:41:2b:d5:03:0d:45:8f:0e:30:f9:2b:10:
                    e9:93:81:17:d7:38:96:e3:93:4e:1c:90:0c:78:df:
                    e9:de:3d:c8:a4:7b:18:9a:fd:3a:7c:9c:3c:58:d5:
                    42:e5:30:ee:b3:d9:7a:7a:8c:97:1e:f1:a0:31:d3:
                    a6:88:54:34:78:c1:27:ee:6d:44:ba:c2:41:ac:62:
                    b8:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:1C:5E:43:67:29:A2:B8:2C:39:28:8D:87:EB:9A:6C:88:0F:92:F3
            X509v3 Authority Key Identifier:
                keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:fe:95:ea:0a:e9:ae:80:d3:65:da:13:1f:f8:b1:f3:b5:82:
         25:8a:73:9c:17:13:10:f4:28:fb:51:7e:9b:23:7e:43:c4:b6:
         9d:8b:1c:91:35:22:31:74:c8:ef:f7:1b:96:89:06:fc:cd:a7:
         a2:09:03:b5:29:6d:80:6f:71:88:e3:3e:3c:89:e0:2f:9b:e8:
         46:93:df:2a:bb:be:61:72:e8:14:29:10:be:f3:3d:c2:c5:62:
         bb:7c:4a:8b:42:79:f9:ca:a4:cc:62:97:4c:4e:e8:c5:84:9b:
         77:d6:56:34:5d:f3:ce:9c:47:d3:1d:be:8c:68:9c:36:94:ec:
         3e:63:bb:e2:87:14:32:bb:32:31:5f:b7:79:bf:90:74:2c:6f:
         7b:04:f8:a8:14:f5:ce:48:33:f1:c1:a4:41:a4:3d:ba:a9:55:
         53:b7:15:93:1b:63:b3:34:6f:62:c7:38:20:30:29:53:50:44:
         3c:2e:74:1d:b7:77:b7:f8:f1:08:2a:9a:e4:90:42:57:d0:c3:
         26:aa:25:80:e3:bb:69:50:c9:b6:f8:76:4c:62:14:2c:50:8e:
         91:03:22:ff:1b:a8:7f:a0:75:ef:34:9d:39:be:bd:9c:a1:a9:
         7f:5b:03:ac:f0:67:b0:7d:e6:03:cd:62:09:1f:ad:4b:95:12:
         77:a0:a7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:13:22 2026 by rpki-client