Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
File:                     cS8iadFWM728cdjNP0WMvQP-Ax8.mft (raw, json)
Hash identifier:          W///t1lgWl5GxeSZhUk/eVTLr3rcaauYeJ7wXCo+xD8=
Subject key identifier:   51:8C:63:BA:66:7A:1C:B6:9D:22:FC:86:20:48:7A:FE:A2:F2:EE:31
Authority key identifier: 71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F
Certificate issuer:       /CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
Certificate serial:       01A137B61CEBFE9A38283EEE5A24A29F6A14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
Manifest number:          0E4E
Signing time:             Wed 14 Oct 2026 00:00:44 +0000
Manifest this update:     Wed 14 Oct 2026 00:00:44 +0000
Manifest next update:     Thu 15 Oct 2026 00:00:44 +0000
Files and hashes:         1: 6Tbppy4MQkLuvQtyLGsGd3CPcic.roa (hash: 7/QkF9HhHe+dG7SWSPYfgjpwfSEFuQhLwXrd2nTq/qU=)
                          2: NzZA0ZJSkjRaWslFXPndZfar7cg.roa (hash: RJF0xypUlCqc73vpWjXekHDMqnQ2dCd2RLXFaZqKXeQ=)
                          3: T6_UDLgOp2Kr0SqLbwdbPGeDTkA.roa (hash: gTWxLHMemzdxPWumDbDMhn2BGfQjWXuVToW8lRVJiYA=)
                          4: W1ZhWsdodClad0dJ8wh53Ch0fp8.roa (hash: VKkRvsz7R9Hk3QEeT4dAIBuH8DXYchOllD8/vRJTJCI=)
                          5: cS8iadFWM728cdjNP0WMvQP-Ax8.crl (hash: EzxyDtoZoIs2qB3BiLvVSp0sZU0V8WV4K5gUrxLpXdE=)
                          6: iafYMwA1CChI3CF3y86ruCA7o6I.roa (hash: tTSoeaNC29Xke1fF6xeZHo/CiLM3GLD82IygoT7IYr4=)
                          7: iioQdMFsttIkzLsks2Jp19kCC1I.roa (hash: 8e3WC7/8HWnnhrJ3InF3EeTww9JbZ0JooKgafOgwKoI=)
                          8: yHbHdVra8JQS6bdIo32Jx7OYffk.roa (hash: ScC+mBQJVOrQxUSi9bIaW+yLlmfLXJYJdtutIzPb38o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 20:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:37:b6:1c:eb:fe:9a:38:28:3e:ee:5a:24:a2:9f:6a:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=712f2269d15633bdbc71d8cd3f458cbd03fe031f
        Validity
            Not Before: Oct 14 00:00:44 2026 GMT
            Not After : Oct 15 00:00:44 2026 GMT
        Subject: CN=518c63ba667a1cb69d22fc8620487afea2f2ee31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5f:51:75:af:b5:d0:a5:a3:8a:fd:22:46:7b:
                    c9:b1:f9:64:e1:08:f0:8b:13:ec:4e:3a:31:61:32:
                    ae:44:03:97:0c:5f:6d:65:2d:1c:64:26:74:cf:57:
                    10:de:cc:59:9b:57:1c:b6:6c:4f:3f:b6:cc:8f:2f:
                    90:4e:3a:f4:12:a1:e3:a1:70:f7:34:ca:73:c4:7c:
                    2c:66:75:40:98:39:9f:a4:24:85:40:10:b1:86:1c:
                    4c:1f:ca:f2:3c:1e:bb:09:c7:9e:f7:5b:a1:86:b8:
                    4d:00:0f:cd:b1:94:00:91:e7:7f:37:9e:3c:8b:8c:
                    ee:94:31:b3:53:57:4f:a8:69:bd:64:4d:c6:f2:4d:
                    46:c3:19:6d:56:24:e4:b0:4b:1e:62:ad:4b:43:e0:
                    31:f5:ca:ef:0a:16:f1:2f:7b:b7:8d:e9:eb:c7:0d:
                    0a:29:8c:8c:6a:69:7a:60:e6:12:15:0a:ca:16:02:
                    7f:74:19:11:83:8a:34:c8:ac:f1:15:c9:9e:78:15:
                    6e:a3:ff:3e:9f:d6:3f:35:1c:3e:0c:da:d3:ea:8c:
                    e5:48:38:e0:a9:fb:45:26:5d:ca:40:05:e6:68:c8:
                    bd:55:21:c2:6c:36:d0:2c:71:1e:2a:8d:a9:56:e0:
                    b3:3b:44:15:35:d6:c6:1b:21:56:19:e0:21:59:04:
                    80:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:8C:63:BA:66:7A:1C:B6:9D:22:FC:86:20:48:7A:FE:A2:F2:EE:31
            X509v3 Authority Key Identifier:
                keyid:71:2F:22:69:D1:56:33:BD:BC:71:D8:CD:3F:45:8C:BD:03:FE:03:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS8iadFWM728cdjNP0WMvQP-Ax8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e6373c-53cd-4fd5-a435-d18bab9515bf/1/cS8iadFWM728cdjNP0WMvQP-Ax8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:99:c6:1d:52:ba:57:6d:8f:5b:3d:0a:ce:a4:aa:5a:52:4c:
         4d:0a:60:68:bf:de:79:ad:e4:56:17:a2:b7:aa:c3:9d:07:d7:
         c3:8c:a3:a6:38:a3:74:8e:6d:a4:21:73:bc:45:2f:5d:51:c0:
         82:6d:ed:4b:f8:0f:95:00:1f:bb:1f:70:2c:d1:08:c0:d7:2a:
         09:bc:73:df:27:df:c7:82:d4:7f:43:2c:5d:6d:3b:89:53:b8:
         0e:3d:b0:88:3a:d2:c2:66:29:2e:73:2c:e7:34:aa:22:37:d4:
         8c:38:1d:d1:1e:5b:ef:8d:62:71:2a:eb:6f:eb:a5:69:bc:32:
         a5:08:d8:71:2e:f2:9f:4c:4c:cf:25:62:70:a5:02:97:64:4d:
         43:34:5d:8e:43:67:6d:34:b9:60:af:56:f3:d8:c5:00:40:0e:
         5a:41:8d:7f:c5:ea:f0:e5:64:51:99:35:65:00:05:f2:b3:6b:
         d1:3e:1a:ba:85:c3:71:3a:7c:e2:e3:5a:2d:23:15:ce:05:47:
         cb:cb:f6:07:49:dd:38:4c:7e:50:21:5b:ab:00:4c:62:f8:75:
         ad:66:81:70:ea:4a:82:b1:8c:d7:a2:1f:9e:13:bc:64:99:44:
         9c:a5:d4:0b:50:d9:7a:c5:55:80:0a:8e:45:e3:37:2b:79:b2:
         07:c2:60:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:57:09 2026 by rpki-client