Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File:                     rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier:          lW7MPDxQQ+Xf6nPj8HZ2Oy0QqxY3goOrFfQR20d3bhY=
Subject key identifier:   A8:15:86:88:6A:D3:1D:55:78:1D:65:1C:99:46:42:D3:49:83:51:A3
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer:       /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial:       01A11304DBE3D72437F4EE05E28243A1CF17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number:          1A97
Signing time:             Tue 06 Oct 2026 21:00:47 +0000
Manifest this update:     Tue 06 Oct 2026 21:00:47 +0000
Manifest next update:     Wed 07 Oct 2026 21:00:47 +0000
Files and hashes:         1: 0SdAWy5FbGh2pB-UZZKsGcwkt5M.roa (hash: +N3CbDkY0v4sIs+KAKMovKpqq8wIicumkVCtsw7Q2eE=)
                          2: 2RHf-9fOIvKsA2VNSiC87nFbCOs.roa (hash: dgDZc/LxnLIjKHM4eGdgAhe4w7g3MVLAoMHC9X1LCgI=)
                          3: STxyqEZJdelIgYwPQkrFzkgfanw.roa (hash: s65hDXY2ql7cBoPqQwS0YK+flCpqESibXFG1uh5dHgQ=)
                          4: WnHzbxcWnfjBlVEJkzUqvflkBLA.roa (hash: eI8gIZ4QgUUkSDU1/GTW0FbHxY0wg/TC2Y43t8FWow0=)
                          5: qXgX-MgGakZBvHLGFfMng5J68aM.roa (hash: tdETsvPamgqJs8d2zdVQ7bKa0GNEeta7JZJxdAHdr5I=)
                          6: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: JLpQknGaeXxL2d8GkB08Lsm2OfWky8sZjoGtNLJtMik=)
                          7: uljHeXtwPoXTWfqHenoj_DXb3ww.roa (hash: wGmp5Bh78//8aIg6gUIYujT06jT2kqD/3V641rlo7LY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:13:04:db:e3:d7:24:37:f4:ee:05:e2:82:43:a1:cf:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
        Validity
            Not Before: Oct  6 21:00:47 2026 GMT
            Not After : Oct  7 21:00:47 2026 GMT
        Subject: CN=a81586886ad31d55781d651c994642d3498351a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:85:fe:5b:f1:4d:92:75:38:b4:df:41:79:43:
                    6f:40:71:1c:36:81:42:15:93:91:60:96:4a:f5:e3:
                    53:c5:14:a3:46:48:0a:62:63:4e:85:5c:91:5f:e5:
                    b2:f7:e7:d9:fe:53:89:99:79:d0:81:b3:8d:3a:3e:
                    7c:c2:9f:4e:6b:50:6c:d3:80:d7:93:79:79:f5:c1:
                    1c:c4:22:e4:54:a4:54:c5:21:de:ff:73:3c:56:04:
                    87:a2:26:5d:40:64:5f:a6:45:4f:4f:b2:14:ad:76:
                    e6:ca:79:da:d2:45:5a:27:f7:8a:58:be:ca:33:1b:
                    17:4c:94:ed:d2:d9:ef:a9:21:74:c2:88:ac:77:72:
                    64:4a:e4:dc:e1:0c:1e:e2:2a:dc:b9:ef:0c:74:0a:
                    a6:2a:6b:26:4a:03:c0:37:02:1c:47:90:86:ed:36:
                    db:25:6f:b6:64:dd:48:11:c2:c8:6f:5f:dd:35:de:
                    2f:d3:e2:d1:88:da:d5:96:8f:9a:21:30:cd:62:69:
                    54:bf:b0:b8:74:f9:a3:5a:8d:66:d2:d4:11:df:36:
                    e4:bf:75:16:35:49:a0:5a:9b:65:9c:5c:d6:2c:24:
                    44:d5:99:44:3f:30:01:95:f6:e2:56:10:46:26:ac:
                    32:ba:b7:ca:af:e1:53:85:02:01:75:50:cf:c3:ab:
                    8b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:15:86:88:6A:D3:1D:55:78:1D:65:1C:99:46:42:D3:49:83:51:A3
            X509v3 Authority Key Identifier:
                keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:09:dd:6b:50:dc:2a:06:25:71:21:15:02:c5:d1:6e:f7:e7:
         94:bb:60:fc:f1:c7:cd:58:48:ed:93:80:e2:c6:92:bd:22:4f:
         34:9d:2e:ac:65:4c:75:15:c7:9a:65:8a:4d:60:33:0a:5a:a5:
         ff:c4:a2:76:ae:86:bc:5f:37:4f:d0:99:07:c1:3d:91:60:94:
         9d:eb:c1:29:55:87:9e:5a:6b:fd:f6:9a:da:61:34:51:4a:bd:
         a3:2d:ed:69:00:0a:16:ab:aa:ac:d0:19:e3:89:f2:71:e9:2a:
         f2:5a:57:eb:dc:bf:48:6c:8b:eb:16:a1:2d:fc:2f:f6:1f:8a:
         34:89:a0:d3:9a:66:a1:30:dd:2b:39:48:b7:5a:4e:a7:39:00:
         22:3f:fc:92:d8:60:a7:a4:30:cd:2a:07:61:6d:61:b3:db:07:
         42:4a:8a:de:e2:ee:8b:c4:cc:b9:7e:11:a5:10:55:a4:49:71:
         8a:bf:19:55:f5:e5:8a:be:06:99:11:4a:1e:69:ec:71:2d:17:
         71:c2:da:fc:e5:52:4a:c2:ea:14:55:94:f6:c8:9e:02:80:d5:
         2a:cd:86:d5:90:05:63:5d:3e:85:24:19:0c:47:a6:c8:96:b1:
         71:2a:04:e1:b4:15:f7:dd:63:78:b5:78:31:07:5c:91:f1:85:
         80:a1:86:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:40:46 2026 by rpki-client