Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
File:                     1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json)
Hash identifier:          ardN3FpUdKlSXg76QVZ1K9Lgt9API/iu2qani2nCfKc=
Subject key identifier:   71:BA:EB:0A:89:6A:2F:E3:CB:E3:76:20:17:8A:AB:79:EC:C1:F3:CF
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Certificate issuer:       /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial:       01A1268B85187850907E5C397BCCAC9C2482
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
Manifest number:          1AA4
Signing time:             Sat 10 Oct 2026 16:00:39 +0000
Manifest this update:     Sat 10 Oct 2026 16:00:39 +0000
Manifest next update:     Sun 11 Oct 2026 16:00:39 +0000
Files and hashes:         1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: Rpjoo+ElF+NZhl+gI1/Rx5w9rN1a4O6mdb7S+nywu58=)
                          2: 5DaV4gudkDeBpkpNjorFjKdwKas.roa (hash: 9p8+UHTs/RBIZPqnbM430sMtYPmrN12mqZCcC9V+LKI=)
                          3: GUFmBdi0_Y_tG7LWELBPh9QEM9o.asa (hash: ZMR4mH+eqRB4yaYaBEAA+Z5mr/sJpbjQJrZ/3hcHthA=)
                          4: NXcDx5Sh25pDfJxJSkQVgnYIs4Q.roa (hash: iydF4IYrO0jpMLNCVz/nzmnnrXkl06goqTATkMGnBns=)
                          5: PQ1WsgJ8M5ShklrV4cWrXgsRk98.roa (hash: AjAU0i8BrIwCW5B50+6SMIS7/KHtVI1eqRb3YHJQN80=)
                          6: PV0ldyvamyXaSXwGWeb_iIj6z1Y.roa (hash: xcQLOrHxGLRq/OYf2oo8JfChvAAfg4ixHJ0AkaTe8sQ=)
                          7: UCPHMmyCJR4JmPeGnCgq8nfbn60.roa (hash: p5d6kd0pgtOUZ1UeSMMJANP3mYr/gpl0DKc8A48nhnk=)
                          8: UbMfCzQPRA-kXXe02IoFpUNWHRI.roa (hash: Y+LpUOlGM6jHvhHw5voeozmV7CMx8mnBHn3GF0Ey7Mk=)
                          9: duDdMIsWaX3Qv6Ulhf1btV1iznY.roa (hash: 8VGr6lGBwXaEA0xjsXJFLABQFwnIWckpws1DFvMKFV8=)
                          10: tA5rc4xvYJaghwkQOKn8tH8_iLQ.roa (hash: QuIvgGmxEmrKFzj/tALJgGDhMmAZX/608ZoICxEakwY=)
                          11: u5FKfMgZNEwRxNieZ5Cq5Wc0Bng.roa (hash: logMCehLES5I14Fvvq1Wfet2WZemmEdMO+ZvgR5D7JY=)
                          12: uB8MKGWb3Ah0aZK2Vf2usmZHzG8.roa (hash: BfFc9lt0STbJmAF8lGnEz5SYrhiI62mYVaN3nT2PLtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 16:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:26:8b:85:18:78:50:90:7e:5c:39:7b:cc:ac:9c:24:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
        Validity
            Not Before: Oct 10 16:00:39 2026 GMT
            Not After : Oct 11 16:00:39 2026 GMT
        Subject: CN=71baeb0a896a2fe3cbe37620178aab79ecc1f3cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4f:3a:34:6b:c1:27:63:b8:06:ef:cd:29:77:
                    63:ec:8c:32:67:7e:3b:1a:89:35:7b:f7:8a:2d:29:
                    2d:4b:8a:b5:71:4d:30:6b:13:f3:05:be:cc:74:b8:
                    57:f8:93:9f:8c:77:3b:ec:8a:51:c6:08:3a:82:a9:
                    f8:f9:6a:cb:37:ba:9c:cd:95:76:53:d5:34:1e:9b:
                    8b:f4:71:c5:fb:ce:20:f1:cb:be:37:34:5f:30:68:
                    c3:b0:aa:65:5f:f5:74:70:fa:f7:b2:5a:05:53:2f:
                    93:03:7a:0a:bd:31:4a:3d:c8:6d:1a:6f:e9:e0:01:
                    4f:44:73:fc:85:2d:24:d5:20:0c:c4:f0:cb:e1:27:
                    1b:79:bd:9c:3b:43:06:c1:7b:33:2e:f5:61:4d:b4:
                    d7:85:1e:85:cd:62:c1:25:e9:b2:9a:77:f5:4b:59:
                    ba:e5:a1:bf:7d:2a:00:fc:c5:64:25:8a:90:70:0b:
                    71:46:c1:bb:bb:4c:e9:a3:06:ba:e6:81:41:2f:c8:
                    4f:a4:ba:2d:a7:2e:bd:19:11:bd:bd:d7:0e:de:97:
                    67:1c:b5:20:6f:30:ef:34:e6:36:eb:65:e6:0e:a1:
                    f9:45:30:89:e2:5a:9b:09:cd:e7:6a:4a:b2:e2:4f:
                    7e:b7:70:af:23:bd:11:b4:53:b0:95:66:da:eb:8d:
                    a2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:BA:EB:0A:89:6A:2F:E3:CB:E3:76:20:17:8A:AB:79:EC:C1:F3:CF
            X509v3 Authority Key Identifier:
                keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:0a:a0:6e:d5:7c:7f:91:29:86:f1:a1:c4:89:be:ce:a8:53:
         a8:61:b2:31:2b:d5:c8:c4:2f:20:71:76:a1:d1:ad:78:5d:bd:
         3c:47:22:ee:c8:23:1c:cc:b8:97:b4:e0:e7:fe:c0:08:ac:5f:
         05:62:72:50:29:8d:64:7d:f6:ad:2f:0f:28:07:13:cc:20:4f:
         41:ad:56:7e:0c:a2:11:47:33:b9:d9:e7:f7:69:a9:e8:85:2c:
         98:27:de:5e:d9:37:b9:ae:ec:96:9b:eb:3c:4b:6c:8d:f6:06:
         70:70:13:95:49:da:68:80:be:51:29:14:4b:d0:5b:ce:42:16:
         40:8d:43:61:ac:55:25:59:96:ef:83:3a:23:cc:83:d3:fd:4c:
         50:e7:4c:1a:01:78:6c:93:41:ac:5a:4f:a5:a0:89:e7:c0:73:
         85:ee:7c:e3:f3:fc:47:f6:9d:ce:1d:f5:3a:10:a5:94:ce:d9:
         95:c1:96:c7:28:52:7e:04:9d:1f:5d:5c:60:27:8d:5d:15:79:
         3d:b9:21:fa:24:92:b4:5b:62:d9:81:ea:2d:59:6a:dd:50:90:
         0b:9d:e6:7c:74:00:6c:b3:30:8a:2b:cc:37:2f:0a:3c:94:c6:
         0f:6e:c2:08:10:46:10:ca:ac:0f:ae:64:16:98:13:0c:77:ff:
         11:0a:2d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:32:04 2026 by rpki-client