Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
File:                     ijndHRPq-YwAdGPZWosv_eojbOM.mft (raw, json)
Hash identifier:          jDpTLwE5ENqNRLLmD1E6a54TydygPXsvjhEGMHRRFZc=
Subject key identifier:   AE:7A:60:FB:91:AD:07:71:65:24:A6:15:3B:84:0D:CB:A0:49:22:4C
Authority key identifier: 8A:39:DD:1D:13:EA:F9:8C:00:74:63:D9:5A:8B:2F:FD:EA:23:6C:E3
Certificate issuer:       /CN=8a39dd1d13eaf98c007463d95a8b2ffdea236ce3
Certificate serial:       01A114BCA9E19E4BEF972801C5488C78DB12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
Manifest number:          010A
Signing time:             Wed 07 Oct 2026 05:01:10 +0000
Manifest this update:     Wed 07 Oct 2026 05:01:10 +0000
Manifest next update:     Thu 08 Oct 2026 05:01:10 +0000
Files and hashes:         1: 6rv05GtLZsXL9J9Y6iVnWISfLLc.roa (hash: GAnhNVg8nqzeI7Ci7ArjFVVwDPu5FHycG1EQRRYdOSs=)
                          2: FdICOUOUZECuZrYTF0rlnSSQfSg.roa (hash: UxVhHcCRrdLBmXzhpiCm6r/fpPjHyB3h0v03x9mBzNo=)
                          3: _2bBQtFU643Ua_XDUBQXnI5_hL0.roa (hash: o1RrXnEGdNnf+Cc7zxGHA3KTxxkiPiJd3UQspAymEfg=)
                          4: ijndHRPq-YwAdGPZWosv_eojbOM.crl (hash: 2ZJ0zzIzx0SBI3XDP9Pj3PqkS+wBLkqbHBCFIOQSt30=)
                          5: qEVDrxw8lXCl8aRODSA_1SPziJA.roa (hash: Q8I9Y/Qx/205GtVMmvPcisKl71EAafMgAUaQkhvO3XY=)
                          6: w5AS2KGdDReJzcd8Ht55gZO1pE4.roa (hash: ytd5KWe3NLPZnEwsv+SGbVXQdd/O7rHivZ3d1JF1Ww0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 05:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:14:bc:a9:e1:9e:4b:ef:97:28:01:c5:48:8c:78:db:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a39dd1d13eaf98c007463d95a8b2ffdea236ce3
        Validity
            Not Before: Oct  7 05:01:10 2026 GMT
            Not After : Oct  8 05:01:10 2026 GMT
        Subject: CN=ae7a60fb91ad07716524a6153b840dcba049224c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9f:ed:9c:d2:1c:02:5a:7c:4e:7a:52:4c:ac:
                    62:a9:75:05:aa:ae:fe:4e:bb:9f:52:ac:74:21:e0:
                    be:87:49:b0:b6:ce:12:e2:4a:4a:25:55:ad:d4:d8:
                    80:5a:98:32:30:21:4a:12:cc:69:d8:f9:7c:4e:c6:
                    66:88:6c:63:b4:f8:d7:36:be:9c:53:d1:6f:b6:71:
                    96:cf:28:9e:ee:96:73:77:b3:3b:5c:aa:5e:57:dc:
                    1b:7b:4c:c2:74:8e:cf:57:52:97:3a:b5:63:62:dd:
                    bc:cc:a2:1d:38:5a:fb:07:3a:3f:10:ba:d2:6c:1f:
                    be:8b:3a:0b:b2:c5:6d:6f:e8:88:be:0a:dd:08:85:
                    ef:66:bf:b5:6c:30:3c:57:11:89:85:12:d9:39:bd:
                    26:f6:ac:ad:7b:86:2e:c7:75:ea:57:b9:3b:e8:7f:
                    b2:25:65:38:31:49:f7:ae:22:fb:21:cf:2c:23:f9:
                    10:d7:41:d8:96:41:2d:15:24:49:85:84:c3:3f:f2:
                    a0:df:ff:40:7d:c8:9f:03:f6:df:75:a1:84:e7:c7:
                    12:d8:2c:ec:b1:91:da:b1:8a:df:92:64:94:12:b4:
                    1d:32:cb:da:84:e4:d5:72:35:27:42:65:51:b4:7c:
                    64:a7:f0:81:1d:d4:13:7d:29:f5:fc:e2:54:41:48:
                    ed:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7A:60:FB:91:AD:07:71:65:24:A6:15:3B:84:0D:CB:A0:49:22:4C
            X509v3 Authority Key Identifier:
                keyid:8A:39:DD:1D:13:EA:F9:8C:00:74:63:D9:5A:8B:2F:FD:EA:23:6C:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ijndHRPq-YwAdGPZWosv_eojbOM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/f88857-cc05-4bdb-91e6-ed4f0643bf25/1/ijndHRPq-YwAdGPZWosv_eojbOM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:5a:e4:f0:70:22:f3:15:75:75:48:0b:a1:94:6f:f6:c7:da:
         1e:c1:e6:b1:ca:e7:54:19:df:89:af:3d:e3:ef:a1:8c:6e:f0:
         b1:d6:32:db:3c:60:f8:5e:cb:08:f0:6a:42:52:b5:80:b3:65:
         f6:c5:4a:e3:91:5b:56:be:34:4e:30:0a:4d:a4:1b:87:bd:38:
         44:fd:44:0b:5c:31:43:9f:1a:f5:14:4e:60:c0:8c:70:08:25:
         8d:5a:85:3b:e9:11:03:c8:38:ac:9e:5d:1d:ce:37:6a:9f:84:
         b7:b1:8b:d5:43:7f:ba:53:f4:82:65:45:8a:cd:b7:9c:17:a1:
         2b:e8:da:7a:30:e8:af:ec:50:7f:0c:ed:ac:c3:5c:41:93:e9:
         8c:34:76:fd:f3:be:7e:a3:b8:a5:04:67:fd:45:52:0d:04:ee:
         71:a3:c8:66:15:d1:7d:b4:c8:b3:f4:35:92:fa:16:a1:cc:bf:
         e0:9e:d7:83:0d:43:db:97:8e:0e:5b:38:2a:a5:38:c8:9d:13:
         e5:f2:d6:29:6c:f5:f9:c2:b8:69:8b:95:94:0a:91:02:a8:55:
         76:80:1e:41:03:4b:5d:42:1f:ba:32:5b:96:4f:87:4a:77:af:
         5d:b2:05:9c:b8:cb:c6:53:4d:90:82:7f:73:8c:b1:3c:a4:2c:
         fd:5b:0b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 13:05:38 2026 by rpki-client