Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
File:                     mInX-DdYfC8jMrsJs-GtmZPXlyw.mft (raw, json)
Hash identifier:          LAS0fpAYllQfjehJeZhJfHgCKMGo/JHz4w78tRRQUyQ=
Subject key identifier:   A5:12:B0:7E:92:B3:6E:C7:ED:F2:D7:94:86:09:68:42:18:9D:2E:BD
Authority key identifier: 98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C
Certificate issuer:       /CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
Certificate serial:       01A179CCF896089EF36DCF1CC0F5DDCEAF26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
Manifest number:          1A55
Signing time:             Mon 26 Oct 2026 20:00:38 +0000
Manifest this update:     Mon 26 Oct 2026 20:00:38 +0000
Manifest next update:     Tue 27 Oct 2026 20:00:38 +0000
Files and hashes:         1: fePebiytxTMuGPH6fSC5E4YL5wc.roa (hash: yXbEU3IXKyJOB9RtZy0YOmQELScqMwS4Y+CH/uELRY4=)
                          2: mInX-DdYfC8jMrsJs-GtmZPXlyw.crl (hash: AlGDGW4qgaU3w9HC2ebxbgj4ujM/fa1I5/yG+bDAEuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:cc:f8:96:08:9e:f3:6d:cf:1c:c0:f5:dd:ce:af:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9889d7f837587c2f2332bb09b3e1ad9993d7972c
        Validity
            Not Before: Oct 26 20:00:38 2026 GMT
            Not After : Oct 27 20:00:38 2026 GMT
        Subject: CN=a512b07e92b36ec7edf2d79486096842189d2ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a8:20:77:cd:3d:06:a8:25:3b:f6:52:53:b6:
                    93:7e:8c:e8:0f:8e:28:51:14:30:44:57:39:b2:bb:
                    65:2e:f3:fd:95:3a:a7:95:df:1c:04:5c:aa:e8:fc:
                    c3:da:af:52:c9:cf:c5:8b:08:43:d1:b2:11:c7:86:
                    59:aa:d6:a5:23:82:96:76:25:61:1a:d4:c2:6f:b4:
                    62:d5:e3:8d:24:ba:4e:de:da:f2:c0:ba:5e:f1:61:
                    63:d1:02:16:f2:12:0c:0a:bb:6e:5e:df:0d:a9:8d:
                    02:71:74:32:15:94:b9:29:2f:0d:e0:2f:ce:3e:bc:
                    17:97:15:22:9d:75:97:39:3b:d0:77:a4:28:ad:1a:
                    b0:d1:1c:73:f8:0d:c9:33:9c:48:9d:7c:fd:58:26:
                    71:53:64:28:41:fb:c4:97:f3:e9:31:82:1d:03:16:
                    ab:90:1e:59:d6:49:68:38:23:fa:02:f1:66:ec:4f:
                    91:65:17:38:36:ac:3a:a6:fc:af:40:a7:79:c6:17:
                    57:34:7d:8e:d6:bc:38:6f:da:0b:bc:2d:7a:08:45:
                    fb:fb:25:90:7b:84:d2:1e:be:21:af:ea:36:69:e0:
                    73:ae:86:59:b6:76:01:b3:35:73:f8:c2:41:03:9c:
                    58:a5:64:e9:ec:d7:67:03:49:2b:ef:97:9b:86:eb:
                    1f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:12:B0:7E:92:B3:6E:C7:ED:F2:D7:94:86:09:68:42:18:9D:2E:BD
            X509v3 Authority Key Identifier:
                keyid:98:89:D7:F8:37:58:7C:2F:23:32:BB:09:B3:E1:AD:99:93:D7:97:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mInX-DdYfC8jMrsJs-GtmZPXlyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/2a69bc-05a0-46f0-b423-222b03114193/1/mInX-DdYfC8jMrsJs-GtmZPXlyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:8b:f4:51:10:0c:7b:1d:c5:f7:e8:c8:13:4e:79:cb:d9:0c:
         36:fa:ca:6c:f0:c0:24:e0:57:26:0b:0d:c7:49:fa:fa:4b:22:
         e4:b9:21:dd:b8:2d:2c:ca:c9:9c:cc:23:bb:f3:d0:d4:2b:06:
         d2:5d:49:0d:6f:2e:66:c0:2a:64:bb:f7:87:46:49:88:e6:4b:
         d2:db:40:eb:90:7b:ac:a6:8a:25:e3:9c:0f:6f:55:29:d7:45:
         56:2d:c0:33:97:fb:a6:78:7e:bf:3f:8b:2e:aa:84:cc:e9:59:
         61:7d:f6:fe:a3:ab:09:58:9e:80:61:15:88:2a:6d:4f:e9:0a:
         29:e6:9c:6a:33:7d:69:56:8d:47:4b:5d:da:76:a4:f3:fa:8d:
         94:ac:2b:a3:ef:e4:3f:fe:05:c3:cb:7d:ce:77:07:59:62:c0:
         73:1a:59:db:a3:28:da:fb:48:39:42:d0:25:74:aa:6b:73:78:
         ae:1d:1f:93:b8:58:25:02:0a:2e:53:eb:c9:10:8f:68:8f:a1:
         e3:24:d0:3e:f7:06:6d:33:4f:09:89:5a:70:66:c0:ea:ff:64:
         4f:97:fb:c0:54:fb:2c:84:0c:98:a7:9e:47:c2:9c:44:a4:d5:
         51:93:0f:24:43:c6:7d:81:2e:90:bc:c3:ee:f2:5d:32:ea:80:
         86:2d:63:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:37:30 2026 by rpki-client