Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
File:                     ehuwNttA15nYYRmKUkOzwD1Wwgo.mft (raw, json)
Hash identifier:          cmek53nW24Xgw5T7/jmC6IFiazy206n3h+lmm4IxM3o=
Subject key identifier:   6F:02:8F:06:6F:25:CB:69:B5:3F:BD:ED:EF:AD:9E:4E:BF:A8:C4:7B
Authority key identifier: 7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A
Certificate issuer:       /CN=7a1bb036db40d799d861198a5243b3c03d56c20a
Certificate serial:       01A15FD698DE3EC8FB2A27AC1A2757576AD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
Manifest number:          05FD
Signing time:             Wed 21 Oct 2026 19:01:01 +0000
Manifest this update:     Wed 21 Oct 2026 19:01:01 +0000
Manifest next update:     Thu 22 Oct 2026 19:01:01 +0000
Files and hashes:         1: 2xwSBwS6RDNnNKRZKOi0MbfjwVc.roa (hash: RMcEguGLwOa0BQU2j27En5sOEwzBOElDccZLVB4NNcw=)
                          2: MRM-CoQOpNzOiMlv-SoepHZ_vkg.roa (hash: XmXaFQhLTQFHGNBv8hvjwKW9TmIBhDQDOsRTHRNNRp8=)
                          3: ehuwNttA15nYYRmKUkOzwD1Wwgo.crl (hash: 1P8zWTUMoBpf1uh51834UTurR5D71G925/Z51dyP7Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 18:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5f:d6:98:de:3e:c8:fb:2a:27:ac:1a:27:57:57:6a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1bb036db40d799d861198a5243b3c03d56c20a
        Validity
            Not Before: Oct 21 19:01:01 2026 GMT
            Not After : Oct 22 19:01:01 2026 GMT
        Subject: CN=6f028f066f25cb69b53fbdedefad9e4ebfa8c47b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:89:68:cf:2e:1b:a5:70:98:f6:0c:19:47:74:
                    3e:c1:23:30:3d:48:f4:dd:32:78:9b:e9:8f:78:38:
                    2d:89:8b:a9:8c:e2:90:f0:7f:bb:e8:a6:29:59:37:
                    15:3a:cb:33:a3:ea:2e:1e:01:8c:7e:a1:67:b6:e6:
                    5c:66:db:ba:aa:66:cd:2d:3c:e9:76:05:42:60:c5:
                    ba:66:7b:28:28:36:56:ac:cc:ff:08:3d:e9:4d:72:
                    ae:5f:b6:53:5b:1e:a3:7c:bb:8a:05:0f:64:e1:ed:
                    44:90:31:a2:dc:2d:16:ab:3f:9a:9d:1d:68:3b:f3:
                    10:b7:33:9a:39:66:15:b1:6e:c2:53:e1:13:59:09:
                    67:39:ff:fe:8a:01:c1:50:73:66:ee:ab:7c:c2:3d:
                    42:8b:61:1a:1f:a6:51:54:3f:09:39:0b:68:0b:2a:
                    49:45:a8:92:63:2a:7e:5f:1d:fa:ea:64:50:c5:29:
                    59:de:18:18:40:8c:fe:67:67:31:fb:82:ab:7d:c3:
                    25:47:c1:d5:ef:bd:8e:c9:1f:8f:87:bd:4f:5b:8b:
                    05:38:77:a8:07:d1:d9:e8:84:85:9c:6d:4d:82:a2:
                    90:d1:2e:4b:d6:9a:d7:5a:02:6f:33:33:5a:fe:41:
                    fe:66:05:23:4a:3e:84:7f:dc:f4:cd:34:78:f1:0f:
                    91:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:02:8F:06:6F:25:CB:69:B5:3F:BD:ED:EF:AD:9E:4E:BF:A8:C4:7B
            X509v3 Authority Key Identifier:
                keyid:7A:1B:B0:36:DB:40:D7:99:D8:61:19:8A:52:43:B3:C0:3D:56:C2:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuwNttA15nYYRmKUkOzwD1Wwgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/6da5b3-24c7-4ee5-95dc-b08db3c36fbb/1/ehuwNttA15nYYRmKUkOzwD1Wwgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c1:22:c0:bf:98:de:a0:b1:6f:0c:88:7c:8e:70:3c:96:6a:
         e5:88:01:4f:d7:c0:e0:f4:3d:8c:d8:1d:69:2f:d9:de:23:d2:
         ed:bc:b7:03:59:df:8a:81:a0:1b:0f:0c:38:e3:ed:de:28:c0:
         38:ec:0a:7f:82:cf:1b:07:fe:b6:64:16:58:fb:09:54:08:eb:
         0d:e6:16:da:4b:55:ca:ef:e6:51:f4:fa:5c:87:54:53:25:32:
         c4:8b:49:1b:67:27:4e:14:e5:53:95:a1:ed:e5:88:74:8f:c4:
         f4:01:41:5b:2a:b1:4c:a6:20:a2:f5:30:4e:c0:c0:a8:b7:e2:
         06:81:c9:0a:c3:af:8f:fe:0a:cc:93:f8:e3:96:d0:ee:b6:cd:
         8e:d0:f0:09:92:87:4e:3e:ad:90:d0:a0:f4:f9:9f:c5:44:f8:
         1c:fc:09:1d:8d:08:f3:1e:f1:e2:63:97:5e:95:24:1a:87:b2:
         69:a2:f3:82:4b:ff:16:36:c6:17:61:db:93:33:8f:54:d5:c8:
         07:9a:8e:aa:b3:d9:fb:67:7c:56:9b:cd:07:16:75:8f:98:b3:
         73:07:aa:0a:59:88:bd:2e:17:ca:97:6b:90:22:13:b7:91:f5:
         a6:d6:5c:b6:42:f9:c5:b1:24:4b:c4:81:eb:d3:91:26:9e:45:
         cc:2f:d8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 04:25:08 2026 by rpki-client