Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
File:                     ml52-SnSG1hvQuMPfZsAOZs9y_A.mft (raw, json)
Hash identifier:          0TtxDuU/us4XgzXqff1KVD7DOs4c902kCF7y1cfg4MA=
Subject key identifier:   88:91:A3:99:45:D9:E9:D0:7C:51:57:DC:81:9E:39:AC:98:74:0C:28
Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
Certificate issuer:       /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Certificate serial:       01A128B13E66F5955B7720C5D3697C8DD0C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
Manifest number:          0841
Signing time:             Sun 11 Oct 2026 02:01:06 +0000
Manifest this update:     Sun 11 Oct 2026 02:01:06 +0000
Manifest next update:     Mon 12 Oct 2026 02:01:06 +0000
Files and hashes:         1: 717UmVfC56DLyzJIkewUlvfIFG0.roa (hash: Xhib9unp/jlsbHbrOLeTYpepAcBI94Ed/fU4OASJBZU=)
                          2: A04NEEmR-b8Xoh0d4OKy5U0cXcw.roa (hash: tMLU1+o5/LddVWNgQ5lko/f9lGooQJP4uTiuXhUHRkg=)
                          3: BCOBN8DqixOn7YBQJAuR5IVl3Tk.roa (hash: 9eQOj920J0RKfKOBG+x3ZwJkzFsoj5C4wlDIoVBASe0=)
                          4: _Na7vfMNE6KH8ABANOjjdG6uU4g.roa (hash: ucbQ9Dez3TCtvipedZVK8XnEorKB2QzPJMl5rkm50kY=)
                          5: _fhuGjpkRKlqYVqbCWdqX4nzLXQ.roa (hash: pemjsumjmI0Bd/B3SuE+a27XcI8Ly+FKaqAAHNiWTdM=)
                          6: ml52-SnSG1hvQuMPfZsAOZs9y_A.crl (hash: EZM9CU0hho5+PX0YtMPbIlKT/8Pxg+1lq5X6giQTskg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 02:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:b1:3e:66:f5:95:5b:77:20:c5:d3:69:7c:8d:d0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
        Validity
            Not Before: Oct 11 02:01:06 2026 GMT
            Not After : Oct 12 02:01:06 2026 GMT
        Subject: CN=8891a39945d9e9d07c5157dc819e39ac98740c28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e7:91:12:85:8a:64:54:f5:a5:9d:4a:24:f9:
                    26:d6:10:8e:88:e8:44:76:eb:64:94:19:e4:27:46:
                    8e:19:36:f0:43:64:50:46:82:2c:98:a5:6a:3e:0f:
                    81:a8:b0:2b:d8:27:22:fd:6b:03:e7:b5:9e:f3:fc:
                    75:d6:14:05:7b:eb:e7:62:85:7c:ad:e5:15:c8:20:
                    a3:de:6a:d2:10:21:f8:91:82:78:94:63:a3:77:23:
                    4a:e4:6d:cd:99:0b:16:e7:e6:fa:51:22:f8:27:67:
                    43:18:48:0c:bc:ba:fd:5f:e0:4a:7b:63:ca:7e:19:
                    df:df:a8:73:0f:fc:69:52:df:ad:cd:17:85:55:d0:
                    66:64:98:39:b4:9a:03:25:67:e6:b1:06:e2:80:82:
                    f9:bd:6f:b0:74:50:03:0a:eb:2f:12:30:85:bd:b5:
                    f8:40:3f:62:90:e7:6a:2f:e2:39:f6:e4:a3:19:79:
                    84:ea:33:dd:4a:44:49:58:80:bd:b5:a9:b6:38:c1:
                    5f:e1:4a:d9:c7:9c:47:4e:94:55:19:52:24:13:4a:
                    68:16:62:6d:ec:ef:61:29:14:b2:ca:95:4e:6f:1b:
                    c2:5a:d8:d9:ab:2b:f3:52:9e:80:20:ae:d8:7b:4f:
                    53:9e:66:77:10:e9:68:b0:55:e1:03:1d:73:b6:45:
                    dd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:91:A3:99:45:D9:E9:D0:7C:51:57:DC:81:9E:39:AC:98:74:0C:28
            X509v3 Authority Key Identifier:
                keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:8e:e5:d1:4b:8c:df:6a:3f:12:46:5a:01:69:af:93:df:2a:
         7c:9e:8c:a5:4c:aa:21:77:f8:ae:8c:2c:c6:3e:9c:45:fa:80:
         78:db:d1:18:e3:98:e4:e2:21:bc:d6:f3:eb:1a:9a:73:95:39:
         2a:aa:d5:9b:87:a1:67:40:34:58:aa:ae:fb:e1:e3:0f:ca:76:
         d3:a4:ce:04:2a:2e:69:e0:ca:1d:37:43:fd:47:98:f5:94:ad:
         bb:b8:ba:98:d8:47:11:e1:b3:9f:0a:f3:c0:1d:d6:74:0f:5b:
         a8:d9:12:ef:f1:10:5a:88:2c:32:2d:50:0e:24:b9:d9:a6:43:
         58:0f:c3:7e:06:75:10:f6:a9:a9:5b:a4:c9:ed:58:5c:a2:4b:
         d8:1d:68:92:c2:bd:30:f3:4e:6d:56:47:8a:56:62:60:58:1b:
         ed:8d:0d:4e:00:6e:c5:e0:2e:e3:cf:8f:e8:7a:74:c7:fa:18:
         18:8d:5f:e9:d4:cc:09:d2:e6:43:71:6d:64:d1:01:b9:4a:f1:
         27:d0:5d:fc:f4:91:91:43:f5:85:eb:59:45:1c:55:6f:21:47:
         48:8a:c7:ac:2b:12:b9:82:3f:99:ac:b1:14:48:86:03:d4:3e:
         cc:ea:f4:a5:24:fd:a9:cf:39:93:44:0d:65:bf:d1:d3:2d:98:
         4f:d3:b4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 08:45:47 2026 by rpki-client