Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
File:                     26EiB69NGGxE2iUzwLjx_R9V2Ns.mft (raw, json)
Hash identifier:          yh1CUcZxEDq/UQTMHUrxNV+MkRt9BUg0JRdv2hbgEYw=
Subject key identifier:   0F:AC:EE:E1:8F:FE:C0:CF:03:02:02:E3:38:51:33:E4:AB:33:AB:DC
Authority key identifier: DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB
Certificate issuer:       /CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
Certificate serial:       01A17D738B4F22F20BF549C8305756927788
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
Manifest number:          1AD1
Signing time:             Tue 27 Oct 2026 13:01:26 +0000
Manifest this update:     Tue 27 Oct 2026 13:01:26 +0000
Manifest next update:     Wed 28 Oct 2026 13:01:26 +0000
Files and hashes:         1: 24obiy0fZ4sjIR9zAVWZfKpa6-U.roa (hash: cL10Osj+d9kvxaGxqEkN7sCB5SFh6aaa9j3lYMjcpj8=)
                          2: 26EiB69NGGxE2iUzwLjx_R9V2Ns.crl (hash: zQ1p+JqcTGIYaPoG66vby2bpzXuqBYTZUWRaaFZstUg=)
                          3: 8YBwOotyLS2h7Bd2s6jHy2zPrAM.roa (hash: tVCSOcfP5D/IltKQq/VCjFNHxuz/aHy6IKMpOAq5EPY=)
                          4: w_0FUO6PVfHDWxWyUSsrIkxbdM8.roa (hash: jFgnrNVIYXYVywvyG4XzGQRIEIm59a6cbEHdSQPGz9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:73:8b:4f:22:f2:0b:f5:49:c8:30:57:56:92:77:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dba12207af4d186c44da2533c0b8f1fd1f55d8db
        Validity
            Not Before: Oct 27 13:01:26 2026 GMT
            Not After : Oct 28 13:01:26 2026 GMT
        Subject: CN=0faceee18ffec0cf030202e3385133e4ab33abdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:16:81:1b:b1:af:6c:c1:f4:ec:a7:f6:c5:35:
                    fb:01:de:82:09:3b:ca:b1:69:4d:27:f3:b6:1d:b8:
                    5d:56:37:7b:a8:d0:5d:b5:fa:c6:29:4d:46:dd:76:
                    6c:d2:f8:ee:d3:54:61:73:2f:33:d3:8c:41:05:38:
                    33:b4:0b:e9:be:63:cb:02:42:2c:be:0b:1e:e2:4b:
                    97:dd:76:df:dc:4c:4d:ec:b0:36:77:49:0b:91:3f:
                    1d:a7:7a:ad:91:f7:be:45:50:28:95:a8:8a:57:05:
                    ff:9b:f4:ff:9b:f7:be:5e:38:dd:21:b9:57:bf:a2:
                    c1:c8:3e:6f:21:c5:d2:5b:c4:bf:f6:a0:0c:62:3b:
                    52:59:5c:12:b3:cb:c6:08:82:be:56:7e:10:a9:6a:
                    b6:7d:b2:f2:44:ff:f4:b9:a9:ad:c1:b9:46:0c:1c:
                    44:75:7e:08:3f:f2:00:8b:ad:0d:18:6a:66:32:85:
                    2a:19:42:00:d6:c6:e5:91:5e:7d:e4:d2:94:d7:89:
                    e6:66:70:a5:22:54:cd:dd:a9:9f:e0:fe:83:9e:15:
                    cc:16:b7:0a:5b:74:8c:c8:85:74:1e:e9:4e:49:ae:
                    40:52:86:1d:1f:12:42:7d:c6:8c:57:7c:f4:f6:6a:
                    17:ac:2a:ea:01:f8:37:8f:37:92:66:51:e4:89:00:
                    4e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AC:EE:E1:8F:FE:C0:CF:03:02:02:E3:38:51:33:E4:AB:33:AB:DC
            X509v3 Authority Key Identifier:
                keyid:DB:A1:22:07:AF:4D:18:6C:44:DA:25:33:C0:B8:F1:FD:1F:55:D8:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/26EiB69NGGxE2iUzwLjx_R9V2Ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c8010e-3289-4a36-a2b8-12b2bc58053a/1/26EiB69NGGxE2iUzwLjx_R9V2Ns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:59:a0:0c:af:74:dc:db:df:96:2d:5b:99:d4:e3:c2:a4:97:
         df:bc:05:72:56:ce:e7:f2:98:e3:94:54:cd:4f:5a:f6:eb:bd:
         32:eb:50:1c:91:db:49:ab:1b:ac:ef:22:72:e1:50:27:da:9e:
         da:60:4f:d8:64:1a:bb:da:9c:36:9c:12:54:0d:c1:85:45:d8:
         4c:41:e6:99:45:e4:49:4b:f9:28:32:3e:56:67:25:c1:1c:76:
         93:b3:bb:53:5e:98:bf:ce:d3:41:47:b4:0e:24:b0:7e:d5:10:
         b1:e6:23:9e:96:15:35:03:a1:7e:f3:7b:39:91:03:22:f6:3f:
         94:ee:03:55:3d:51:af:22:2e:8f:5a:ab:74:1d:2e:01:d4:a9:
         4b:70:a8:0a:5b:7a:21:5d:f7:67:9b:6b:4f:b5:cb:e9:53:08:
         24:2e:66:dd:a3:d2:31:37:fd:8d:a9:44:ed:ed:9d:c6:10:8a:
         cd:85:26:ea:c0:90:c9:36:54:0e:95:09:eb:f6:38:1f:b8:9e:
         16:8e:e8:26:13:cb:3f:85:1f:a8:a0:50:cd:62:07:fe:d7:02:
         fc:8b:5e:da:9f:2d:7b:32:b1:1c:b1:e3:e2:d2:b1:05:5b:8a:
         ee:5b:2a:1a:26:99:b3:3c:d6:40:e4:ce:7b:5f:ce:9b:2f:bb:
         58:57:02:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:37:32 2026 by rpki-client