Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
File:                     ToWU69x9fPfaLgA8hNhqfBr4cbw.mft (raw, json)
Hash identifier:          F4OUDEvg4Ldo5J54Z13fUIsfQvNt9Tzq4s++EaXdZjU=
Subject key identifier:   B9:C4:E6:D0:3F:AB:D8:A1:CB:E5:D0:C7:DB:90:2B:73:13:46:15:BE
Authority key identifier: 4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC
Certificate issuer:       /CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
Certificate serial:       01A17B161FD3F960ACE030E6BD35E3557FD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
Manifest number:          0967
Signing time:             Tue 27 Oct 2026 02:00:09 +0000
Manifest this update:     Tue 27 Oct 2026 02:00:09 +0000
Manifest next update:     Wed 28 Oct 2026 02:00:09 +0000
Files and hashes:         1: S8bTyJBZhokS15ViVs9bepd7lJY.roa (hash: 8XtBGUfQ0OE1e70++hji6820sGNOYH1fI8pCKjr4jm4=)
                          2: ToWU69x9fPfaLgA8hNhqfBr4cbw.crl (hash: sH1lmCKzNyBKfj/ZgbNmHwoemxK14KCBSMALGjXYZ5I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:16:1f:d3:f9:60:ac:e0:30:e6:bd:35:e3:55:7f:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e8594ebdc7d7cf7da2e003c84d86a7c1af871bc
        Validity
            Not Before: Oct 27 02:00:09 2026 GMT
            Not After : Oct 28 02:00:09 2026 GMT
        Subject: CN=b9c4e6d03fabd8a1cbe5d0c7db902b73134615be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:a7:dd:13:9b:55:c9:21:d4:d2:fb:6b:e0:
                    18:b2:76:77:03:e3:62:f5:48:ef:df:e4:aa:4f:b5:
                    f7:f2:3d:f6:b8:30:1d:aa:7b:d3:d5:ee:7a:f5:31:
                    f8:10:8d:cf:69:03:9e:d1:97:d9:f7:ae:b8:fe:5b:
                    44:85:c1:01:a0:30:66:da:1e:c4:aa:92:ab:29:1d:
                    d1:61:ab:0f:5b:e3:f9:eb:02:3c:72:5b:61:49:6d:
                    e6:73:80:ee:f6:40:33:f8:9d:93:22:ec:8f:03:2a:
                    e0:b1:9f:ae:ac:10:31:9c:1d:be:88:1b:0a:0c:5c:
                    46:8e:2c:56:72:d5:b8:2f:51:3c:77:9c:a8:78:4b:
                    f0:9c:4a:ca:40:d9:23:91:29:e9:f9:ee:ab:69:8e:
                    cc:a9:09:94:db:7b:38:8b:3e:01:3f:14:14:00:8c:
                    17:ab:b6:db:17:7d:ff:b4:85:2a:ec:d4:55:4e:44:
                    9f:6d:c4:61:87:d9:f3:7a:41:d5:1e:87:e9:e2:ff:
                    e9:7e:ed:83:c8:ef:f8:de:72:f1:7d:0c:68:de:10:
                    6c:65:c6:c5:af:b9:f2:5d:a5:78:68:fc:f5:7b:d0:
                    66:41:96:57:59:d4:c3:07:f0:e3:a2:46:9a:85:82:
                    05:14:77:2f:8b:79:06:70:95:4a:d7:b0:cb:aa:9a:
                    7b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C4:E6:D0:3F:AB:D8:A1:CB:E5:D0:C7:DB:90:2B:73:13:46:15:BE
            X509v3 Authority Key Identifier:
                keyid:4E:85:94:EB:DC:7D:7C:F7:DA:2E:00:3C:84:D8:6A:7C:1A:F8:71:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ToWU69x9fPfaLgA8hNhqfBr4cbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ffe7d5-d91d-48ae-8ee5-ce94e38e82d6/1/ToWU69x9fPfaLgA8hNhqfBr4cbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:88:8a:08:09:93:df:ba:35:6f:a1:4d:b3:61:ff:55:4c:f0:
         d8:2c:ef:ee:cb:76:10:af:8c:93:e6:1d:11:df:67:76:3e:db:
         90:32:c7:d9:16:37:03:1d:fb:f8:67:0e:5b:84:2f:ee:8c:f0:
         30:c2:67:8e:72:5b:a4:dc:bc:75:07:d0:9e:4a:5f:93:9b:a3:
         39:ac:7a:07:21:64:5f:8c:3c:ac:55:c4:26:aa:0b:a4:bc:6f:
         75:c2:1c:dd:db:9f:b7:61:41:0d:0f:11:37:7a:d0:53:59:af:
         1f:7f:ee:0f:43:77:81:b7:5c:f9:68:ad:95:50:32:a9:86:f2:
         6b:2d:88:c8:a2:11:5d:ab:23:97:3d:18:bd:b8:a7:27:7f:a8:
         ad:35:3b:c1:4a:a8:0c:c1:48:01:33:e6:da:de:29:e7:c3:2b:
         7f:6f:b0:4f:4b:b3:f5:e0:25:8b:60:b5:a2:f1:5c:32:0c:4a:
         cb:b2:b7:24:b2:9e:0f:f4:cc:88:97:78:13:4d:2e:e8:7a:33:
         5b:a7:2a:fc:ea:2a:94:5b:7a:b0:b9:9a:a5:c9:40:f1:9b:8a:
         c5:33:a1:d1:db:d4:73:50:4f:39:78:e8:1f:36:ae:2a:09:93:
         04:62:10:ac:3d:2e:08:5f:ca:9b:bd:e8:33:d9:85:46:0d:6b:
         6a:d9:e6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:59:20 2026 by rpki-client