Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
File:                     w6iCsQ8bqepLofp3BttkdH5ipBM.mft (raw, json)
Hash identifier:          jCdsanubS9rF7BWkjPIXQDa1WV6EgcYYwWFPT3kPSiI=
Subject key identifier:   B9:B5:4B:C3:97:C5:F7:94:1C:8F:C3:1D:D7:36:16:F0:5A:01:F6:4F
Authority key identifier: C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13
Certificate issuer:       /CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
Certificate serial:       01A151770EEE466E7618FCD9CFFD165192F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
Manifest number:          1AAE
Signing time:             Mon 19 Oct 2026 00:01:59 +0000
Manifest this update:     Mon 19 Oct 2026 00:01:59 +0000
Manifest next update:     Tue 20 Oct 2026 00:01:59 +0000
Files and hashes:         1: 3zDXj12FVAF9XeXyFE67e6JY6lg.roa (hash: yDL38rTQ8XpaiZahcdQcgu5FHofBAzcqqnIqz6pUsPE=)
                          2: QDqYZmLzV23YVoA-rNr3_dudehM.roa (hash: DU7wizlaOucg4WwRR/OJogCxUlPPjJyoBT/zCr/m24w=)
                          3: w6iCsQ8bqepLofp3BttkdH5ipBM.crl (hash: Qt2Xa9QXeesNoBKtiesnDFZzIt9AjXg2wjMB/25u/SY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:51:77:0e:ee:46:6e:76:18:fc:d9:cf:fd:16:51:92:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a882b10f1ba9ea4ba1fa7706db64747e62a413
        Validity
            Not Before: Oct 19 00:01:59 2026 GMT
            Not After : Oct 20 00:01:59 2026 GMT
        Subject: CN=b9b54bc397c5f7941c8fc31dd73616f05a01f64f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:11:54:33:03:ad:e7:03:12:30:70:c1:90:e6:
                    70:c2:c0:54:6a:9c:85:f2:da:47:62:5a:27:3c:b2:
                    fa:7d:cf:9e:84:c3:91:e0:41:81:76:71:8e:78:db:
                    b4:a2:51:62:b7:49:38:3a:e6:8c:de:5c:f0:cd:19:
                    d2:3a:e3:0c:c1:d0:99:a3:9d:55:41:4b:10:ba:87:
                    03:70:23:dd:e7:3b:3a:47:ff:c9:52:86:99:61:f3:
                    82:17:3d:a6:af:a1:63:86:eb:c5:95:9f:60:18:7a:
                    7c:7f:bb:16:4a:d2:ba:7a:d4:2d:33:f7:32:a4:8c:
                    1b:04:d2:62:86:a3:c9:24:dd:50:b0:85:66:36:97:
                    d8:bb:50:f6:0f:83:58:4b:1e:a7:ab:50:25:af:79:
                    e9:10:57:fe:30:4d:47:c0:05:7c:00:b8:94:26:ad:
                    69:eb:1c:2d:64:76:60:e9:e9:e4:dc:48:67:19:e5:
                    04:e6:21:07:7a:11:a3:ef:90:06:7b:21:61:8a:40:
                    e4:aa:5b:3f:d0:8f:df:30:6a:24:de:d2:19:fb:0d:
                    6f:80:d8:cd:28:7c:6f:09:ba:d2:d0:2f:7b:60:52:
                    b0:a8:5d:a7:af:64:fc:b6:54:d3:03:1f:0d:34:e9:
                    8d:f4:cf:72:cd:7d:f2:31:99:b9:5e:9f:12:c3:d0:
                    20:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B5:4B:C3:97:C5:F7:94:1C:8F:C3:1D:D7:36:16:F0:5A:01:F6:4F
            X509v3 Authority Key Identifier:
                keyid:C3:A8:82:B1:0F:1B:A9:EA:4B:A1:FA:77:06:DB:64:74:7E:62:A4:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6iCsQ8bqepLofp3BttkdH5ipBM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/93620e-7528-4aac-9212-c7857a033962/1/w6iCsQ8bqepLofp3BttkdH5ipBM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:bc:90:94:b1:eb:5b:22:13:cb:04:4c:cf:fc:31:db:4c:17:
         5b:7b:74:11:9f:45:a1:60:fa:b6:20:bd:78:af:9f:07:63:f6:
         dd:dc:a4:c6:35:b5:71:7a:86:84:34:07:af:0b:ec:f1:e6:79:
         93:4f:24:a9:04:a8:a7:e3:9b:94:7c:c7:cd:f5:1b:65:b4:83:
         77:29:7d:89:69:d6:6c:1e:59:f4:4a:b3:95:94:a3:c7:06:69:
         08:72:d2:7a:8b:5c:e3:dd:ff:ab:f2:4c:6d:20:66:3e:0f:28:
         a4:29:ad:a8:c7:64:b0:1e:37:9a:74:92:ee:4c:04:88:d1:93:
         d4:50:d4:be:d2:c5:74:bd:ad:01:dc:ef:27:fd:04:1a:18:5e:
         7e:03:8b:23:95:10:5b:e9:c4:1d:a4:19:cd:36:f9:21:b1:da:
         7d:46:4b:04:5f:3a:25:11:3e:50:1c:96:15:a7:9f:3b:02:9b:
         5a:fc:bd:cc:12:7f:16:af:0c:9d:35:ba:08:22:cd:7a:0d:3b:
         fe:ff:ec:ff:a7:8a:95:81:09:f0:23:c6:5e:07:3c:35:27:85:
         06:2b:07:49:fe:e9:9e:63:57:dc:8b:26:f9:2d:3a:3e:8f:07:
         eb:c8:ea:7b:b9:8b:f4:25:a3:54:cd:ce:a0:4a:6b:91:16:94:
         69:03:35:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:16:54 2026 by rpki-client