Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
File:                     RKw-QPgEbPOHzJFwxdFifUIh190.mft (raw, json)
Hash identifier:          nQF1NTFVn8wki38gMm6/DEADrp3yabs6VIBL5EpIAHY=
Subject key identifier:   F7:18:DE:A7:BB:AD:EC:D4:48:23:26:7E:F4:AB:2E:EF:D2:F0:B0:C5
Authority key identifier: 44:AC:3E:40:F8:04:6C:F3:87:CC:91:70:C5:D1:62:7D:42:21:D7:DD
Certificate issuer:       /CN=44ac3e40f8046cf387cc9170c5d1627d4221d7dd
Certificate serial:       01A14F881C45710A5835A367AA74EB0EF38B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
Manifest number:          0127
Signing time:             Sun 18 Oct 2026 15:01:22 +0000
Manifest this update:     Sun 18 Oct 2026 15:01:22 +0000
Manifest next update:     Mon 19 Oct 2026 15:01:22 +0000
Files and hashes:         1: RKw-QPgEbPOHzJFwxdFifUIh190.crl (hash: YzhNaeq7qkT5/GBWnzZ/ZfmRKdAfsoUIraN2I9YMPZM=)
                          2: SVKbgAlazhSBrSFI_Vfp0bKjVhY.roa (hash: 7TPEHCfibMPRsy9xSphGCCfugTiCDmZv7qGFp4wnVmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 08:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4f:88:1c:45:71:0a:58:35:a3:67:aa:74:eb:0e:f3:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44ac3e40f8046cf387cc9170c5d1627d4221d7dd
        Validity
            Not Before: Oct 18 15:01:22 2026 GMT
            Not After : Oct 19 15:01:22 2026 GMT
        Subject: CN=f718dea7bbadecd44823267ef4ab2eefd2f0b0c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d7:8d:6f:86:43:75:d0:af:63:49:91:19:1f:
                    fa:74:1e:a7:57:2b:9c:da:55:4d:e9:e5:40:9a:5b:
                    95:67:d9:94:3a:5b:bb:09:9a:4f:1f:8d:ac:f0:33:
                    fa:fd:45:6d:d5:55:c6:eb:c7:d7:75:75:7d:cc:e0:
                    c3:41:44:21:cd:60:37:2a:ac:60:ed:c6:dd:14:10:
                    dd:5f:cd:84:72:7d:bb:33:69:7d:ad:51:34:b7:7b:
                    f2:c0:e4:8c:1b:0b:81:c7:1b:05:15:a8:a6:e9:b8:
                    6f:31:f7:77:d0:2b:c1:60:98:96:5c:d1:e6:ea:ab:
                    97:ac:e7:83:5a:ba:90:62:5d:4e:d0:55:a5:09:1b:
                    01:fc:de:1b:22:4f:d2:48:93:3c:85:76:b3:5d:1c:
                    39:55:8e:be:2d:5c:f7:24:57:24:c5:c6:f9:18:91:
                    fd:da:f8:a9:f5:e1:1c:8a:c6:88:91:ba:75:56:7a:
                    3e:f9:69:bc:a0:a5:83:22:46:ae:b4:76:2e:cd:8b:
                    50:31:a6:0e:d5:8c:40:4c:29:df:4b:9c:df:9a:f7:
                    6d:a8:67:d2:6c:70:51:39:1c:5e:82:ae:ef:c0:ef:
                    25:c1:e1:0e:7a:94:73:fa:33:bf:58:ec:98:47:e8:
                    80:a4:3d:41:ca:4a:e5:2d:fb:1d:cf:3b:ca:2e:71:
                    e1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:18:DE:A7:BB:AD:EC:D4:48:23:26:7E:F4:AB:2E:EF:D2:F0:B0:C5
            X509v3 Authority Key Identifier:
                keyid:44:AC:3E:40:F8:04:6C:F3:87:CC:91:70:C5:D1:62:7D:42:21:D7:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKw-QPgEbPOHzJFwxdFifUIh190.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/f2fbd8-d6e1-47ad-aa21-147e4572873a/1/RKw-QPgEbPOHzJFwxdFifUIh190.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:75:9f:8d:c7:27:ac:e4:a1:a4:9e:3f:86:8a:70:cb:ce:69:
         43:23:1c:a5:53:2b:31:58:dc:8b:cf:1f:6b:16:15:de:fd:e9:
         10:f4:a1:4c:02:7c:34:e5:71:30:1f:43:46:bc:42:4a:5a:1d:
         b1:ee:b5:95:9e:c1:58:91:c7:c9:a7:d9:6f:68:7c:71:ea:60:
         b2:e1:cb:f0:d8:75:0e:25:f8:d3:6a:60:b3:c3:48:9d:b9:94:
         8a:45:22:3b:00:80:11:e3:77:c5:34:d4:7d:d5:4d:bd:91:f1:
         ca:ed:c9:20:36:a5:10:26:4c:82:a2:ae:34:b6:c4:96:f2:18:
         f1:95:ad:c6:4e:e8:68:1c:49:37:c4:9f:0f:7b:71:8c:42:81:
         a6:18:1f:fe:19:cd:3f:41:bc:2a:bf:eb:e0:3d:87:c6:81:7d:
         3d:6b:6a:b4:d3:65:2d:e4:42:9c:b6:d2:9b:cc:be:bf:13:92:
         28:76:13:b0:24:b4:e6:25:62:5a:84:3f:5b:51:fe:d6:bd:77:
         73:11:b3:9d:95:dd:53:67:09:78:c5:65:80:86:25:5a:22:d0:
         45:e3:c5:03:d3:be:1e:c7:61:46:92:a1:1f:ff:e6:c2:ab:a3:
         b6:e4:9d:a5:2f:b5:d7:b5:bc:cd:34:77:9e:df:ed:b2:ad:32:
         c4:1d:17:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFPiBxFcQpYNaNnqnTrDvOLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YWMzZTQwZjgwNDZjZjM4N2NjOTE3MGM1ZDE2MjdkNDIy
MWQ3ZGQwHhcNMjYxMDE4MTUwMTIyWhcNMjYxMDE5MTUwMTIyWjAzMTEwLwYDVQQD
EyhmNzE4ZGVhN2JiYWRlY2Q0NDgyMzI2N2VmNGFiMmVlZmQyZjBiMGM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9eNb4ZDddCvY0mRGR/6dB6nVyuc
2lVN6eVAmluVZ9mUOlu7CZpPH42s8DP6/UVt1VXG68fXdXV9zODDQUQhzWA3Kqxg
7cbdFBDdX82Ecn27M2l9rVE0t3vywOSMGwuBxxsFFaim6bhvMfd30CvBYJiWXNHm
6quXrOeDWrqQYl1O0FWlCRsB/N4bIk/SSJM8hXazXRw5VY6+LVz3JFckxcb5GJH9
2vip9eEcisaIkbp1Vno++Wm8oKWDIkautHYuzYtQMaYO1YxATCnfS5zfmvdtqGfS
bHBRORxegq7vwO8lweEOepRz+jO/WOyYR+iApD1BykrlLfsdzzvKLnHhVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPcY3qe7rezUSCMmfvSrLu/S8LDFMB8GA1UdIwQY
MBaAFESsPkD4BGzzh8yRcMXRYn1CIdfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkt3LVFQZ0ViUE9IekpGd3hkRmlmVUloMTkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9mMmZiZDgtZDZlMS00N2FkLWFhMjEt
MTQ3ZTQ1NzI4NzNhLzEvUkt3LVFQZ0ViUE9IekpGd3hkRmlmVUloMTkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9mMmZiZDgtZDZlMS00N2FkLWFhMjEtMTQ3ZTQ1NzI4NzNh
LzEvUkt3LVFQZ0ViUE9IekpGd3hkRmlmVUloMTkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHWfjccn
rOShpJ4/hopwy85pQyMcpVMrMVjci88faxYV3v3pEPShTAJ8NOVxMB9DRrxCSlod
se61lZ7BWJHHyafZb2h8cepgsuHL8Nh1DiX402pgs8NInbmUikUiOwCAEeN3xTTU
fdVNvZHxyu3JIDalECZMgqKuNLbElvIY8ZWtxk7oaBxJN8SfD3txjEKBphgf/hnN
P0G8Kr/r4D2HxoF9PWtqtNNlLeRCnLbSm8y+vxOSKHYTsCS05iViWoQ/W1H+1r13
cxGznZXdU2cJeMVlgIYlWiLQRePFA9O+HsdhRpKhH//mwqujtuSdpS+117W8zTR3
nt/tsq0yxB0XKA==
-----END CERTIFICATE-----
Generated at Sun Oct 18 21:00:07 2026 by rpki-client