Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.mft
File:                     rnmjPOer5bhoQPOwbZjsisCfWaU.mft (raw, json)
Hash identifier:          A8FhpezyUC4msnLSQBAeA/toHRcwNzMBkVP3E7kC92g=
Subject key identifier:   80:99:3E:C3:1C:EC:8C:32:B7:E1:A8:79:B6:AB:9A:3A:5D:63:4A:1A
Authority key identifier: AE:79:A3:3C:E7:AB:E5:B8:68:40:F3:B0:6D:98:EC:8A:C0:9F:59:A5
Certificate issuer:       /CN=ae79a33ce7abe5b86840f3b06d98ec8ac09f59a5
Certificate serial:       01A13258EE91A7CD53512A5A912D55DF5E1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnmjPOer5bhoQPOwbZjsisCfWaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.mft
Manifest number:          E1
Signing time:             Mon 12 Oct 2026 23:00:51 +0000
Manifest this update:     Mon 12 Oct 2026 23:00:51 +0000
Manifest next update:     Tue 13 Oct 2026 23:00:51 +0000
Files and hashes:         1: HWjg4cqDlFcPbsnpbgKlaCRlbTY.asa (hash: T59UJlc60g8iD9F8A5gW9lus5ZkgqKFSvYU4ouF7Krc=)
                          2: rnmjPOer5bhoQPOwbZjsisCfWaU.crl (hash: /GSTI+ehnrD24oXD8Ie9IBdr2PLGzRyUuzM9vCUppi8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rnmjPOer5bhoQPOwbZjsisCfWaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:58:ee:91:a7:cd:53:51:2a:5a:91:2d:55:df:5e:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae79a33ce7abe5b86840f3b06d98ec8ac09f59a5
        Validity
            Not Before: Oct 12 23:00:51 2026 GMT
            Not After : Oct 13 23:00:51 2026 GMT
        Subject: CN=80993ec31cec8c32b7e1a879b6ab9a3a5d634a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:e8:c9:96:90:23:c7:7e:86:4f:21:7e:97:09:
                    8d:25:1e:94:23:82:dc:19:69:a1:f6:9d:13:ba:f9:
                    5e:07:d4:ab:ef:c3:29:0c:bf:fd:b5:2e:b0:97:bf:
                    de:4e:9c:40:04:e5:ee:e9:04:16:77:3a:3a:ee:86:
                    a0:ff:2a:e9:15:55:f2:e1:c3:5f:34:40:a0:3b:fa:
                    c9:5e:0c:67:26:cc:52:ef:fe:f9:fc:a6:02:63:90:
                    31:15:61:42:4a:dd:1a:e8:71:4d:a1:35:25:f2:90:
                    50:5f:ed:28:89:da:85:cb:1a:32:65:7a:af:d1:06:
                    0e:fc:d1:98:95:85:b4:9f:e6:b6:c4:40:d7:ac:95:
                    3a:0d:1a:47:5c:64:20:46:63:e0:11:03:21:12:c9:
                    63:3b:76:9a:20:43:48:6d:61:d0:41:3d:0c:d8:3c:
                    16:da:49:c9:22:21:56:19:a6:5e:19:01:db:e2:bc:
                    ba:8a:33:87:6d:ce:0d:f1:51:62:5e:dd:cc:55:cb:
                    92:5f:7b:6b:e0:63:15:55:83:f2:1a:d6:e9:21:6d:
                    d9:95:40:4b:97:f0:66:7e:f1:89:fe:5a:72:fd:3e:
                    cb:94:d7:d1:af:fc:47:41:af:23:d4:c7:85:73:fa:
                    89:28:ef:91:0f:66:f6:ed:f1:d6:dc:ef:3c:9c:00:
                    ad:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:99:3E:C3:1C:EC:8C:32:B7:E1:A8:79:B6:AB:9A:3A:5D:63:4A:1A
            X509v3 Authority Key Identifier:
                keyid:AE:79:A3:3C:E7:AB:E5:B8:68:40:F3:B0:6D:98:EC:8A:C0:9F:59:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnmjPOer5bhoQPOwbZjsisCfWaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:37:26:56:2e:80:0d:a1:8d:39:5d:85:31:26:fb:75:df:40:
         65:48:b5:d7:a9:ec:70:71:bd:86:49:81:f0:82:5c:ad:c6:6b:
         b4:ac:b2:51:a1:47:4a:4f:a9:6b:96:30:8f:77:af:ae:99:c8:
         00:08:f9:f6:4b:cb:6a:28:59:49:50:ff:04:4b:f7:cb:a6:ec:
         a0:ec:e8:94:be:f0:3a:7e:7c:19:b0:55:f6:8c:4e:18:f7:6d:
         dc:65:ed:15:8b:0e:5e:e9:f7:4e:9a:cd:4e:b0:c2:b8:2e:36:
         a3:ff:be:1d:f8:12:cc:46:0b:9c:97:21:1c:c0:be:a7:1f:25:
         7b:52:85:e0:11:b1:ee:09:2f:70:6e:15:d2:c5:87:60:25:2e:
         42:6d:ab:7c:e9:f7:d7:e6:c5:6c:7d:33:8d:57:1a:b0:ca:95:
         96:80:53:6b:e1:be:48:b4:9c:fb:94:42:b8:1e:2a:95:4b:d6:
         f0:b5:97:6c:75:40:f6:a6:c6:5a:b8:6e:63:28:1e:7e:8c:7b:
         f5:36:9b:0c:cc:e7:a5:f3:59:61:7a:f7:23:e8:67:7f:d0:d5:
         03:ae:74:63:43:26:13:af:7b:21:a0:dc:a9:a6:df:ee:08:8e:
         2e:a8:50:6f:aa:19:19:4e:5e:29:4c:d6:cf:55:ff:a6:00:1f:
         23:77:79:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEyWO6Rp81TUSpakS1V314fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNzlhMzNjZTdhYmU1Yjg2ODQwZjNiMDZkOThlYzhhYzA5
ZjU5YTUwHhcNMjYxMDEyMjMwMDUxWhcNMjYxMDEzMjMwMDUxWjAzMTEwLwYDVQQD
Eyg4MDk5M2VjMzFjZWM4YzMyYjdlMWE4NzliNmFiOWEzYTVkNjM0YTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OjJlpAjx36GTyF+lwmNJR6UI4Lc
GWmh9p0TuvleB9Sr78MpDL/9tS6wl7/eTpxABOXu6QQWdzo67oag/yrpFVXy4cNf
NECgO/rJXgxnJsxS7/75/KYCY5AxFWFCSt0a6HFNoTUl8pBQX+0oidqFyxoyZXqv
0QYO/NGYlYW0n+a2xEDXrJU6DRpHXGQgRmPgEQMhEsljO3aaIENIbWHQQT0M2DwW
2knJIiFWGaZeGQHb4ry6ijOHbc4N8VFiXt3MVcuSX3tr4GMVVYPyGtbpIW3ZlUBL
l/BmfvGJ/lpy/T7LlNfRr/xHQa8j1MeFc/qJKO+RD2b27fHW3O88nACt2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICZPsMc7Iwyt+GoebarmjpdY0oaMB8GA1UdIwQY
MBaAFK55ozznq+W4aEDzsG2Y7IrAn1mlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm5talBPZXI1YmhvUVBPd2JaanNpc0NmV2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81ODcxZDItMTJhZC00Mzg5LWFkNjIt
NDNlZDkyYmNlNmE3LzEvcm5talBPZXI1YmhvUVBPd2JaanNpc0NmV2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81ODcxZDItMTJhZC00Mzg5LWFkNjItNDNlZDkyYmNlNmE3
LzEvcm5talBPZXI1YmhvUVBPd2JaanNpc0NmV2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYDcmVi6A
DaGNOV2FMSb7dd9AZUi116nscHG9hkmB8IJcrcZrtKyyUaFHSk+pa5Ywj3evrpnI
AAj59kvLaihZSVD/BEv3y6bsoOzolL7wOn58GbBV9oxOGPdt3GXtFYsOXun3TprN
TrDCuC42o/++HfgSzEYLnJchHMC+px8le1KF4BGx7gkvcG4V0sWHYCUuQm2rfOn3
1+bFbH0zjVcasMqVloBTa+G+SLSc+5RCuB4qlUvW8LWXbHVA9qbGWrhuYygefox7
9TabDMznpfNZYXr3I+hnf9DVA650Y0MmE697IaDcqabf7giOLqhQb6oZGU5eKUzW
z1X/pgAfI3d59Q==
-----END CERTIFICATE-----
Generated at Tue Oct 13 04:07:19 2026 by rpki-client