Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
File:                     sUP6cD--4Eu9kc5joyFIs2uOVao.mft (raw, json)
Hash identifier:          44FpkWuoPyFytMOyqiFf4rMtU/jN6ld6WFkyze3WXbo=
Subject key identifier:   4E:57:5F:29:FF:81:AC:1E:54:AB:C4:B2:E6:E2:2F:0C:50:5E:3D:BD
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Certificate issuer:       /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial:       01A121656A7A0C5AB80BDEBC3C27BEBA9971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
Manifest number:          1A9A
Signing time:             Fri 09 Oct 2026 16:00:56 +0000
Manifest this update:     Fri 09 Oct 2026 16:00:56 +0000
Manifest next update:     Sat 10 Oct 2026 16:00:56 +0000
Files and hashes:         1: AI5iPwrPeQM75vgCBirIJ7ULXR8.roa (hash: 6BPizRCmHI1yenYS4NwhiHl3z1wmNCdGTc9GKZg1Dkg=)
                          2: n5pV2dNWRA_f9PGG9onX31tv0X4.roa (hash: D07pEt8gK/cdGWqE9Zyt/+iA5IXUOBq9V7PLS+yh6/A=)
                          3: sEzlM5R6zA-ZnYv0970VvpCyW2s.roa (hash: QcSUN0qNT/RW84mhkqVzl01FcB1TS7ALX77ko6AurMc=)
                          4: sUP6cD--4Eu9kc5joyFIs2uOVao.crl (hash: IgCY1Dt/+G/XT1hDKQ8a1JV5ot5PFnAIECxZA9I9GNo=)
                          5: u3Sm5CQkYvsGuCc2LmoCaugkKjw.roa (hash: QovOPnDsIRjc0fHKUk+YUhtZOJkATZJ4vmW0nQyk6FY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 13:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:21:65:6a:7a:0c:5a:b8:0b:de:bc:3c:27:be:ba:99:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
        Validity
            Not Before: Oct  9 16:00:56 2026 GMT
            Not After : Oct 10 16:00:56 2026 GMT
        Subject: CN=4e575f29ff81ac1e54abc4b2e6e22f0c505e3dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:7e:ca:49:99:d5:f0:22:ba:e0:81:89:d8:
                    a7:52:f8:94:1f:05:bb:fc:a9:52:f4:90:78:c6:f8:
                    01:c5:62:c4:b7:06:c6:1d:d8:2f:f4:16:47:ef:c7:
                    fb:d6:8f:74:94:aa:ef:b5:96:1e:c1:db:dc:be:2c:
                    86:cc:22:a7:72:91:7c:f0:6a:b0:f8:e4:b3:b0:e9:
                    0c:a2:c9:c7:c3:cc:db:0f:62:9c:87:1e:7b:af:15:
                    1a:d4:86:4f:9a:f6:a5:33:7d:45:9b:38:09:da:35:
                    16:e4:ce:b7:cb:6e:2f:3f:54:0c:fa:7a:1e:16:e2:
                    70:c4:2a:a1:9c:78:3c:79:81:57:ec:6d:51:54:8b:
                    13:c3:ee:31:50:4a:c1:e0:c6:ea:5c:3a:76:92:9f:
                    55:3c:17:cd:36:31:da:bd:ac:8e:98:7c:85:5c:7d:
                    0e:50:9d:69:1b:51:2e:27:cc:1a:f2:84:e5:d5:f1:
                    64:f3:90:1f:d8:6f:27:5c:e1:07:94:9b:67:15:61:
                    11:78:30:d4:61:61:3c:ef:da:99:37:20:95:43:3e:
                    3a:5a:9f:68:f3:3e:48:ac:ba:3c:8c:18:63:f2:11:
                    7e:69:e0:de:51:85:70:a9:b3:2e:5e:28:22:84:da:
                    94:19:23:06:18:81:97:f4:d9:f5:b8:e1:39:a7:ed:
                    db:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:57:5F:29:FF:81:AC:1E:54:AB:C4:B2:E6:E2:2F:0C:50:5E:3D:BD
            X509v3 Authority Key Identifier:
                keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e2:bc:b7:ea:9d:2c:a4:c1:27:eb:0c:c1:e8:38:b9:19:5f:
         1a:a5:29:53:41:e7:09:32:b3:e6:e7:75:b9:61:9d:58:8b:b4:
         f7:a6:02:a5:77:cc:dc:39:f6:ac:ad:88:78:4b:66:e5:f2:ae:
         98:52:3e:d4:79:5b:e3:3e:b4:bc:8e:0e:d2:14:db:3d:7e:d5:
         e1:21:eb:61:cc:ae:16:fd:18:3a:47:de:eb:9e:b3:bd:4b:7f:
         87:ad:c5:68:ef:25:1f:e5:7b:30:b0:d8:ba:11:6b:f7:66:12:
         a7:a1:7b:e7:f4:77:68:98:f2:67:ff:e4:c3:dd:dc:e9:6f:d4:
         56:d2:c0:3d:d7:cb:71:4c:58:d7:07:ea:77:28:e5:15:33:ea:
         ad:16:1c:66:a6:84:95:3c:78:21:63:4a:69:db:df:f8:d6:02:
         4b:98:4a:4a:b2:31:87:06:d7:94:46:92:ff:ee:5a:79:1a:dc:
         df:9b:71:13:8c:5f:64:0b:91:bd:0f:ea:75:1f:b2:15:b5:49:
         1f:15:66:0d:a1:27:57:cb:c2:27:08:24:ac:15:c4:71:44:7c:
         30:6a:d2:32:68:a5:78:74:d9:8d:24:65:8c:62:10:a3:27:54:
         98:28:98:7d:5c:64:c1:f6:30:46:e7:0c:60:49:aa:dd:ad:a4:
         2b:fb:78:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEhZWp6DFq4C968PCe+uplxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDNmYTcwM2ZiZWUwNGJiZDkxY2U2M2EzMjE0OGIzNmI4
ZTU1YWEwHhcNMjYxMDA5MTYwMDU2WhcNMjYxMDEwMTYwMDU2WjAzMTEwLwYDVQQD
Eyg0ZTU3NWYyOWZmODFhYzFlNTRhYmM0YjJlNmUyMmYwYzUwNWUzZGJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrh+ykmZ1fAiuuCBidinUviUHwW7
/KlS9JB4xvgBxWLEtwbGHdgv9BZH78f71o90lKrvtZYewdvcviyGzCKncpF88Gqw
+OSzsOkMosnHw8zbD2Kchx57rxUa1IZPmvalM31FmzgJ2jUW5M63y24vP1QM+noe
FuJwxCqhnHg8eYFX7G1RVIsTw+4xUErB4MbqXDp2kp9VPBfNNjHavayOmHyFXH0O
UJ1pG1EuJ8wa8oTl1fFk85Af2G8nXOEHlJtnFWEReDDUYWE879qZNyCVQz46Wp9o
8z5IrLo8jBhj8hF+aeDeUYVwqbMuXigihNqUGSMGGIGX9Nn1uOE5p+3btwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5XXyn/gaweVKvEsubiLwxQXj29MB8GA1UdIwQY
MBaAFLFD+nA/vuBLvZHOY6MhSLNrjlWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iOTM0MmYtNTkxNi00NjQ0LWIxYWEt
MDBkMWU3YTE3MGEyLzEvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iOTM0MmYtNTkxNi00NjQ0LWIxYWEtMDBkMWU3YTE3MGEy
LzEvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApeK8t+qd
LKTBJ+sMweg4uRlfGqUpU0HnCTKz5ud1uWGdWIu096YCpXfM3Dn2rK2IeEtm5fKu
mFI+1Hlb4z60vI4O0hTbPX7V4SHrYcyuFv0YOkfe656zvUt/h63FaO8lH+V7MLDY
uhFr92YSp6F75/R3aJjyZ//kw93c6W/UVtLAPdfLcUxY1wfqdyjlFTPqrRYcZqaE
lTx4IWNKadvf+NYCS5hKSrIxhwbXlEaS/+5aeRrc35txE4xfZAuRvQ/qdR+yFbVJ
HxVmDaEnV8vCJwgkrBXEcUR8MGrSMmileHTZjSRljGIQoydUmCiYfVxkwfYwRucM
YEmq3a2kK/t4RA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 23:15:07 2026 by rpki-client