Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
File:                     RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json)
Hash identifier:          HkYF0AgQbPxYusfNaSXBKu1rb5pGcb1J9lkzoc03d2c=
Subject key identifier:   DC:E5:B4:CC:AA:E4:6F:3F:B7:2A:DA:96:33:EE:29:4A:58:4E:AE:0D
Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
Certificate issuer:       /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Certificate serial:       01A17703217C6E8BD62D1A32B8D6DB857D68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
Manifest number:          1A9C
Signing time:             Mon 26 Oct 2026 07:00:56 +0000
Manifest this update:     Mon 26 Oct 2026 07:00:56 +0000
Manifest next update:     Tue 27 Oct 2026 07:00:56 +0000
Files and hashes:         1: FN53nLLPikhn5-nY05Uj4mP3Vj4.roa (hash: qx+sQ+sLjcsImqJ84C9BFMVyXO8qcwSUngwbw+Vb2nk=)
                          2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: 18PAqbNk0zfP1f73e/fIVeiXLL9zx41OUcL7e7JZ0fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:77:03:21:7c:6e:8b:d6:2d:1a:32:b8:d6:db:85:7d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
        Validity
            Not Before: Oct 26 07:00:56 2026 GMT
            Not After : Oct 27 07:00:56 2026 GMT
        Subject: CN=dce5b4ccaae46f3fb72ada9633ee294a584eae0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bc:48:96:ed:4a:b9:52:01:67:56:4c:cf:01:
                    ad:77:69:f5:ac:70:ff:7d:f8:9e:59:5d:c8:61:28:
                    16:dc:54:6b:76:7d:a8:0f:a3:68:1f:91:8f:77:94:
                    ae:97:1c:22:a7:0f:c6:c7:42:6f:a0:bb:5c:e0:e6:
                    f6:dd:94:39:08:b8:d3:d0:f3:a4:8b:4a:08:72:d5:
                    54:16:5c:aa:27:b5:21:20:1d:fa:c7:48:c2:b5:4c:
                    6a:56:fb:06:2c:c5:ac:15:f3:51:c7:78:c1:69:26:
                    b9:0b:03:83:4e:23:f6:7e:93:70:d0:0f:58:95:d7:
                    74:68:dd:4f:c6:b0:0f:e7:59:08:67:4f:b1:22:cf:
                    6f:af:1a:ac:bb:43:78:82:07:88:db:ef:12:87:d4:
                    c1:3b:83:38:22:f2:45:98:56:d1:83:98:17:d1:48:
                    b2:e7:53:30:cf:1b:9a:fb:11:10:e7:b3:ea:f0:9a:
                    f5:44:fc:9f:54:12:65:fc:40:a2:60:5a:69:f1:bc:
                    57:4d:c2:19:c8:d1:09:6f:87:15:4b:98:fb:48:b5:
                    e3:17:f3:4e:7d:13:21:d1:e3:89:c3:24:c6:aa:be:
                    7f:d6:e4:17:45:32:91:a3:d7:5e:ea:9a:3e:56:38:
                    86:5a:c1:63:e6:92:be:8a:c6:79:22:20:07:c2:9d:
                    12:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E5:B4:CC:AA:E4:6F:3F:B7:2A:DA:96:33:EE:29:4A:58:4E:AE:0D
            X509v3 Authority Key Identifier:
                keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:07:28:a8:99:cb:59:de:b3:15:88:ff:f2:2b:8c:c9:09:26:
         4d:26:a2:7e:9d:97:3c:21:79:80:4c:b2:03:36:a6:31:e0:ba:
         a2:b0:f4:f9:f7:d5:80:5b:4c:25:3b:a8:d6:78:2d:3d:7a:c8:
         98:44:e4:62:7b:69:ad:25:c7:c1:a6:14:bf:86:c4:c1:07:cc:
         66:e6:c9:c3:37:29:2b:dd:69:d2:fc:6f:90:85:ff:e9:f3:be:
         44:69:16:5b:ca:37:0e:14:07:fe:11:dd:c3:fb:83:5c:62:6f:
         9e:dd:c1:d7:6a:48:b5:2d:10:e7:40:b8:e3:fe:58:eb:31:0b:
         25:75:40:98:22:2e:6c:3d:e7:e0:84:54:ec:b5:30:78:df:8d:
         5c:9f:b2:c9:1e:f0:9c:f2:c0:1a:12:8f:4d:74:ed:b9:98:b9:
         f2:63:b8:d5:f4:0b:80:0a:13:17:7e:c2:15:34:92:ea:e3:78:
         cb:fa:6e:dc:7d:5a:09:25:84:fb:62:83:39:42:4b:ef:9d:71:
         b7:cf:cc:a5:8a:48:bb:1c:6e:e0:36:ca:fd:61:82:db:40:6e:
         72:53:a4:72:b0:be:0f:39:85:79:02:ba:35:95:f3:6e:b1:0d:
         95:57:3a:7f:fc:27:ad:f8:1a:b1:f7:0d:26:6a:f5:4b:2a:cf:
         86:8f:49:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 12:49:38 2026 by rpki-client