Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File:                     deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier:          3tud7qhd7sZgoKOtancSgnQ67xJY8A7TQpT4eSNr1cQ=
Subject key identifier:   1A:0B:6F:4A:78:DE:AE:DF:98:82:CD:3A:93:BE:E9:4A:E9:A7:4E:34
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer:       /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial:       01A1938CEC4135E0319AF1C68A35F81E0AF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number:          1ADC
Signing time:             Sat 31 Oct 2026 20:00:48 +0000
Manifest this update:     Sat 31 Oct 2026 20:00:48 +0000
Manifest next update:     Sun 01 Nov 2026 20:00:48 +0000
Files and hashes:         1: IKecYpJsyQoCMXhzFQm8qwezc6Q.roa (hash: AyBWoAIIW8QVXSZmJhv+7IehUMdxfXtLu4x8wnOD+Zo=)
                          2: Niz0xaF_UJO5sK6yvy3cMVF07nA.roa (hash: l65DOQXiJc/vw8R7nLx1kl+6tdgkTZuIaNzOHJm95Zo=)
                          3: WFTfI5tspGo4Ss0OCZAL-JGWw3k.roa (hash: ygHs+fWVxGVJnQRLr2/Xp2LQTIWtPolhwTvnQdcJhwg=)
                          4: Wrrx-J8255kGZZQo2Z_lshL_g94.roa (hash: RJwUNDcFiRkR23EOeiZYpldoRJTn3DHSqOqjyT0fbkQ=)
                          5: _RQQ5tVF2eFgG4W622rODRsfodw.roa (hash: tBfa8G6tBLKfwxInkvbCwg+hxTDjAv00awjpszqTn38=)
                          6: cKp2OZnMQ6gfuVdFBIpAAe-tLzE.roa (hash: mbO9zdERKtIWiDiD8x4e0EjpaANpcC71gfDZ39R7GH8=)
                          7: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: waMR50kBnwT9dx0ETre16uhsIlJoUp5Cw0GwB7pe7NM=)
                          8: p6DmQaVdSnpO0418vCwa-3h5IyU.roa (hash: oLcwvSqddOQ2Ul0V7nGknSGHPS/F0P9Nc73tzvsSSQ4=)
                          9: tzZM7nYn-Yv6VuwdydL4arg8J2c.roa (hash: k/xFXsG2Cc7BkpgSwakJflKtWLf9ZeYiel+DCWnqX60=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:93:8c:ec:41:35:e0:31:9a:f1:c6:8a:35:f8:1e:0a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
        Validity
            Not Before: Oct 31 20:00:48 2026 GMT
            Not After : Nov  1 20:00:48 2026 GMT
        Subject: CN=1a0b6f4a78deaedf9882cd3a93bee94ae9a74e34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0f:8e:96:93:95:9e:e6:c2:f0:f0:82:dd:22:
                    4e:d2:3d:5c:80:47:35:a9:3a:fd:20:96:39:24:07:
                    9c:a3:13:b4:02:a5:b0:36:55:12:03:49:df:f8:8b:
                    bd:97:2e:10:89:f1:c8:97:7d:a2:6c:01:3c:19:9e:
                    b2:1d:3c:67:7d:3f:7e:d4:0c:c7:cb:a5:ca:ea:58:
                    c2:b4:85:cd:fb:a3:d6:e1:7f:59:69:3b:b6:6a:e4:
                    6a:88:aa:dd:86:88:db:51:2f:cf:56:13:e6:58:74:
                    b9:aa:cf:5e:06:5d:4f:cd:fb:f9:f5:a7:c2:73:b6:
                    1b:20:75:ff:de:dc:4b:15:18:28:2a:e9:9c:c5:85:
                    4b:e9:b2:79:6c:a3:34:14:eb:1a:2e:22:12:0b:50:
                    80:f6:3e:87:df:1d:5e:02:d0:a3:c3:bb:e0:cf:d8:
                    dc:0e:f5:c2:bd:92:4a:ed:bb:c5:7c:1e:3d:2a:d7:
                    12:7d:99:7b:91:10:21:e6:eb:81:b1:29:3f:63:c7:
                    be:32:6c:d0:96:4e:34:08:39:55:be:4f:9a:5a:7b:
                    0f:32:c8:07:1f:08:77:63:24:b3:b3:05:30:e8:51:
                    c8:37:90:64:d3:61:ae:d7:51:79:90:e8:79:a6:17:
                    41:51:6f:9a:a2:3e:12:47:45:61:09:53:a8:0b:3d:
                    76:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:0B:6F:4A:78:DE:AE:DF:98:82:CD:3A:93:BE:E9:4A:E9:A7:4E:34
            X509v3 Authority Key Identifier:
                keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:fe:ec:9f:57:6f:00:94:c4:d2:2f:3e:42:7f:71:ba:1a:9d:
         bc:06:53:ae:10:b9:da:52:f2:8f:37:5b:7d:50:58:94:f6:e7:
         45:c9:f3:bd:d4:78:1c:a6:1c:e7:77:b7:43:2c:c7:04:a8:00:
         17:3b:c3:f7:78:d7:d7:3f:ab:9b:10:20:30:21:85:d7:51:f2:
         cc:7e:43:3a:56:2c:e3:09:ae:fe:14:cf:3d:5b:94:65:6f:d0:
         28:4c:4a:d4:6e:2d:f9:66:7e:8a:0c:f5:11:19:d5:3b:0c:fd:
         05:c6:66:63:1c:27:77:42:95:0c:af:34:ba:4f:26:8c:db:4a:
         ea:d0:55:d2:bf:92:06:62:31:ef:bc:a2:0f:88:fb:41:a6:02:
         62:8e:dc:7d:44:0d:d0:b6:10:5e:98:0d:79:48:36:f7:c3:ec:
         f5:84:93:fb:7e:3a:58:98:07:74:dc:ce:bd:f8:b8:e1:8e:86:
         65:6a:f3:35:7b:ff:7c:3c:80:3f:7e:8e:df:2a:10:93:fd:78:
         01:0a:b0:9b:7f:aa:f2:b7:53:01:2e:ea:55:66:ca:81:c8:a4:
         41:9e:89:c1:7c:4a:d5:63:81:56:57:4f:6e:84:a6:13:f1:92:
         e5:c2:72:cf:2e:6b:3a:91:35:b4:7f:c7:a3:d5:44:cc:46:75:
         c0:cf:b8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:52:36 2026 by rpki-client