Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
File:                     hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft (raw, json)
Hash identifier:          AYxbMsozk5R9JAATsxGjg1zsYC5CeYvAVgKALqrGans=
Subject key identifier:   D1:02:D4:82:42:DD:35:F2:E3:7E:01:2C:17:8A:3E:D8:5B:B5:F9:BA
Authority key identifier: 86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54
Certificate issuer:       /CN=8686ae8e49374bac84caa3de0d26070b6b190054
Certificate serial:       01A18B9C56BCE3F3D32176791798FB56F1C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
Manifest number:          1ACC
Signing time:             Fri 30 Oct 2026 07:00:41 +0000
Manifest this update:     Fri 30 Oct 2026 07:00:41 +0000
Manifest next update:     Sat 31 Oct 2026 07:00:41 +0000
Files and hashes:         1: 5MskubVdeZ399_lrBcZSvQfk1sI.roa (hash: /9t5Xb57ICUooWV+uj5d8/PMRlDCg1qArWmBVdMVEwI=)
                          2: hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl (hash: o6c3S9j54QVfuoHVyRdK7cUABzao3TI0nxZyOaF0QyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8b:9c:56:bc:e3:f3:d3:21:76:79:17:98:fb:56:f1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8686ae8e49374bac84caa3de0d26070b6b190054
        Validity
            Not Before: Oct 30 07:00:41 2026 GMT
            Not After : Oct 31 07:00:41 2026 GMT
        Subject: CN=d102d48242dd35f2e37e012c178a3ed85bb5f9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:d8:0b:61:74:a4:8c:6c:ef:85:ca:89:6d:
                    74:99:5f:f0:4a:4f:e6:fa:fd:2e:23:14:b1:70:9b:
                    bb:d0:01:80:6e:53:d8:0a:20:16:94:c5:d9:07:1b:
                    e4:65:cb:c2:05:41:fe:ba:b1:49:e7:16:98:1c:64:
                    12:84:80:d1:2b:d7:43:84:cb:2f:5f:0e:42:0b:d0:
                    60:10:6e:00:55:6e:71:6e:1e:f8:f5:8f:f9:7a:f4:
                    ce:0e:8d:94:93:4b:c7:9c:71:95:3e:b7:64:b5:d6:
                    db:15:50:dc:b5:4f:63:3f:97:27:2c:d4:10:9a:ce:
                    97:18:3d:5e:c7:27:60:80:54:06:91:bc:3e:fc:8a:
                    17:d3:8c:32:dc:78:24:b2:4e:62:a9:1e:b7:b2:4f:
                    fe:b4:0b:f7:35:77:2c:da:f7:5f:ce:d5:a4:92:30:
                    d7:ad:da:be:24:98:8f:b1:ac:d8:96:88:52:5a:d0:
                    70:a5:8a:d1:24:f3:d9:5c:88:7a:1d:41:fe:77:b9:
                    f5:b5:b3:b2:7a:87:8c:86:09:af:77:7a:fc:9e:51:
                    56:2b:bb:b2:fc:7a:41:14:79:da:c6:4f:5a:1d:2d:
                    f1:83:dd:bd:12:42:47:ef:f6:3e:13:b8:ce:49:2f:
                    51:dd:0d:3b:ab:9d:ca:f4:fe:c3:8d:13:9a:80:13:
                    a4:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:02:D4:82:42:DD:35:F2:E3:7E:01:2C:17:8A:3E:D8:5B:B5:F9:BA
            X509v3 Authority Key Identifier:
                keyid:86:86:AE:8E:49:37:4B:AC:84:CA:A3:DE:0D:26:07:0B:6B:19:00:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hoaujkk3S6yEyqPeDSYHC2sZAFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/c1962a-c678-4e46-a076-a74f50e00dd5/1/hoaujkk3S6yEyqPeDSYHC2sZAFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:9d:ac:01:ba:fc:99:fd:3a:e6:60:f6:b5:81:be:3a:3d:43:
         40:b7:90:c5:9d:05:93:6c:3c:4b:2c:96:4e:de:97:6f:79:5f:
         9b:68:b7:f8:74:dc:a1:19:bd:1e:9a:a8:1e:9d:fb:86:7b:68:
         77:0c:45:2f:e9:9f:f5:1e:ef:ed:db:72:5c:4d:a2:82:f1:6e:
         1d:23:9d:bd:b0:ad:dd:74:4b:33:3e:93:0f:3c:9c:97:bc:c2:
         fe:03:48:a0:77:3b:09:83:56:fe:4d:8b:10:09:34:8a:48:52:
         91:34:bb:d6:5e:18:cc:e7:1e:00:41:e2:09:4f:e2:e1:d8:37:
         67:fd:fb:27:a2:83:94:2a:6e:14:18:43:de:94:18:e3:9a:45:
         f8:6a:7a:25:03:da:b2:90:52:e8:48:34:ac:80:68:2e:c6:47:
         1d:64:61:d0:5f:ec:f8:07:19:4e:51:86:b1:54:08:fe:fe:0d:
         7a:a3:c4:6c:d2:29:d4:53:54:17:73:ff:a7:08:af:d7:59:7b:
         e7:ca:72:41:94:f9:ee:3b:7d:28:3b:94:89:49:28:9a:2a:0f:
         82:ec:c0:fa:98:3a:07:f9:10:31:61:10:96:ca:2f:ac:c5:b2:
         94:eb:52:21:54:8e:e2:ad:7c:5b:c8:cf:16:00:1c:77:24:23:
         2b:79:62:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 10:21:30 2026 by rpki-client