Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
File:                     Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft (raw, json)
Hash identifier:          mMC5mA8vsP0SIv4i7pNggztkman2JeChE1k7YRtqfIE=
Subject key identifier:   11:30:15:2B:F2:5A:F2:FF:17:0B:28:BE:47:1D:24:A8:19:59:68:71
Authority key identifier: 49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E
Certificate issuer:       /CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
Certificate serial:       01A183E3812C06A5303990A3725C1C772406
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
Manifest number:          0144
Signing time:             Wed 28 Oct 2026 19:01:27 +0000
Manifest this update:     Wed 28 Oct 2026 19:01:27 +0000
Manifest next update:     Thu 29 Oct 2026 19:01:27 +0000
Files and hashes:         1: 0lHNHAB1dSCHu8NfJvUD7DHgsFc.roa (hash: 722KSNZHtYdxDwgLoCah7ZpT1vkIwON9vi+ms0lvuNE=)
                          2: 4Dt7Mn1lHQkg5yii2IEpcWGwkhI.roa (hash: kHQ2nl9ekG4m6X2gKv/CM3Og7S1UQ5gzllovoXGKw5M=)
                          3: IIzVxtmDhdZdhpAbkL-ndC6CsU4.roa (hash: CQ228xdqWMGw11CGwR9Uzvgy1Q7ztTnBAHC18ATjAq4=)
                          4: NzEbjZMTTNc2f7hUh_DfDiEmK50.roa (hash: LA2UVOwQLl1GFakMw+qYipgL+jCj7BhKjZLnryCHmW0=)
                          5: Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl (hash: vRALYloRVmCzXXHlD8ULNkIIJfQoiD7VFZdBwS+ZkwQ=)
                          6: SwlwWC6qeIOhSte4Utz7PdUgqHg.roa (hash: yli4qoeWd8be0mGTI1Qdhmlvgjg03i5HcPN89QNf6ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 14:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:83:e3:81:2c:06:a5:30:39:90:a3:72:5c:1c:77:24:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49f933fc732d42128c3c88b3de0e48ca94acdd7e
        Validity
            Not Before: Oct 28 19:01:27 2026 GMT
            Not After : Oct 29 19:01:27 2026 GMT
        Subject: CN=1130152bf25af2ff170b28be471d24a819596871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ed:27:fa:71:ce:6f:d3:cd:9f:10:6c:bb:0c:
                    f0:9e:95:3b:85:ce:c2:bb:dd:db:49:1c:d5:06:37:
                    ef:6b:f3:72:09:cc:b1:c4:e1:88:8c:79:7a:4f:0a:
                    d4:25:16:2f:56:56:6e:25:e3:f7:61:d2:88:4b:20:
                    e0:5a:e3:ef:61:1a:e5:80:10:22:24:d0:0b:88:41:
                    7b:a8:18:64:89:fe:1e:93:83:2a:9a:9b:80:fa:53:
                    35:a4:42:cf:65:b9:d9:a7:6c:2c:41:40:33:06:07:
                    44:64:93:1c:87:fc:c8:5e:5a:ba:bc:1d:8d:78:00:
                    5a:5c:c6:40:3b:cb:e9:e9:8c:32:2a:78:37:e3:5a:
                    23:50:ad:41:53:36:42:77:49:cd:f1:ef:35:43:cc:
                    02:e0:96:be:d3:e5:c2:00:b7:34:9e:d8:14:6d:8c:
                    08:ed:c9:53:67:f1:fa:fc:ca:05:f6:cd:14:0a:73:
                    08:b7:c3:e8:51:f1:d1:0c:7e:b9:dc:a3:76:17:fe:
                    c5:75:4e:7a:28:f2:4a:0a:93:b8:66:8e:13:2a:36:
                    34:45:bd:9e:ad:f1:c9:d0:ea:4d:97:76:83:93:bd:
                    05:ca:9c:e0:88:3f:aa:4a:dd:70:ce:c7:89:f7:59:
                    b1:85:08:18:a2:5e:c6:c1:4b:74:c3:78:f3:c4:23:
                    8e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:30:15:2B:F2:5A:F2:FF:17:0B:28:BE:47:1D:24:A8:19:59:68:71
            X509v3 Authority Key Identifier:
                keyid:49:F9:33:FC:73:2D:42:12:8C:3C:88:B3:DE:0E:48:CA:94:AC:DD:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfkz_HMtQhKMPIiz3g5IypSs3X4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/58e655-e713-45d2-958a-1822867e1596/1/Sfkz_HMtQhKMPIiz3g5IypSs3X4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:b9:cb:a9:3c:d0:4f:50:3c:bb:c4:cb:97:5e:d1:c5:c4:d2:
         23:5a:34:26:1c:61:2a:cb:b4:f8:c4:13:11:9a:2a:72:33:ad:
         d6:fa:9d:e4:d9:9f:ac:ad:de:a9:a3:f2:95:b8:aa:7a:be:82:
         81:12:4d:2c:bb:c9:26:5e:b4:14:e1:ad:64:79:2c:b4:f9:d1:
         fd:d6:87:7a:70:a4:73:bd:ab:5e:99:ad:e5:e3:a0:fe:5b:5c:
         56:c5:0c:de:b5:de:be:d1:e8:c0:15:2f:1a:80:dd:c5:ae:ee:
         dc:95:01:f1:3a:90:63:0c:04:f5:a8:f0:c1:33:f2:01:7b:12:
         3e:f2:bb:24:d1:d4:d6:bb:30:1c:13:0a:45:19:47:bd:80:10:
         01:50:da:5b:5a:e2:57:85:0d:7c:bb:74:6b:af:6c:46:9b:74:
         72:98:da:28:d8:71:fc:d6:96:b6:d2:d4:5c:a6:70:7c:36:e4:
         38:f0:54:2c:1e:81:d5:fa:48:2d:27:e9:0a:c0:d4:42:79:2c:
         97:eb:88:c9:15:fc:51:af:2a:ba:b8:0b:54:39:13:fd:22:0e:
         95:5e:7b:85:cd:98:2d:4a:cd:38:17:6e:5a:4e:eb:b4:c0:80:
         4b:8f:b3:2c:68:c2:ec:83:75:2c:56:6b:e4:20:22:4b:5f:f5:
         75:2f:ad:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:43:29 2026 by rpki-client