Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
File:                     2gszzdt5m3vPXT3OAE_bqMPoZP8.mft (raw, json)
Hash identifier:          fzGkGEGFe/M4w/diBXjbsaRZBRW2UF4yC10aNBg38ek=
Subject key identifier:   A1:05:3B:80:98:78:CD:BA:31:3B:E2:4B:CC:2D:4A:D9:FF:CF:5A:EB
Authority key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Certificate issuer:       /CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Certificate serial:       01A13D80E06C60B14FDEB036D30F5B337EE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
Manifest number:          110F
Signing time:             Thu 15 Oct 2026 03:00:18 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:18 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:18 +0000
Files and hashes:         1: 2gszzdt5m3vPXT3OAE_bqMPoZP8.crl (hash: dFKyhyQFgsQLMEDYuEgm+YbRdMe8YONmLJRjFADSY0k=)
                          2: 5xg54AVWW6Xi4BJUknnWOr4xprs.roa (hash: dLKpdsBaGDiqHhkCmoQj4IsxNnhuKkpCJzE6NQ8QV10=)
                          3: 7NjBGXkoqrpJtik6hyWam_91fPM.roa (hash: Cd/yxor3wZg6xcWw81ojOZAbyI0L65eF/W7E8e19B7M=)
                          4: bb-V_rGf3B0QiaioeNxnU56I040.roa (hash: 4nxBn8kzAZLq0QSt7O7jxqlGii0yEkqJb0VFpRa6+jU=)
                          5: tpwdEfzMyWWx6VArR0hVjMo-3q8.roa (hash: UHSQrSMMwMC/F3MwzFHNY7G8M39N7oYGsjXC+3amyxw=)
                          6: xC0dGwS2hqJMFjJkASOl38eG4CQ.roa (hash: o1etJOQuElRRT8k2/A1UeIK9/USuVlD2nFRLc2q3+y4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:80:e0:6c:60:b1:4f:de:b0:36:d3:0f:5b:33:7e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
        Validity
            Not Before: Oct 15 03:00:18 2026 GMT
            Not After : Oct 16 03:00:18 2026 GMT
        Subject: CN=a1053b809878cdba313be24bcc2d4ad9ffcf5aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c9:1f:21:42:5f:ed:fe:3b:c3:8b:a6:d6:51:
                    09:a4:f4:5e:3e:9b:43:39:bc:9c:d4:72:01:ef:9f:
                    4e:6f:a4:9c:5d:b3:a7:89:15:42:7a:9c:93:f8:83:
                    f0:5c:6f:4f:89:ab:4f:dc:51:f2:6c:3f:9c:37:39:
                    13:8f:4d:19:20:f8:68:aa:e7:0f:c2:a4:8b:b7:71:
                    ea:a2:5b:47:9c:c8:c4:76:96:cd:7b:c2:ab:7d:04:
                    6c:7f:c5:5f:35:25:b0:67:13:a2:bc:13:3f:28:f4:
                    ea:75:9e:f6:79:53:4f:27:8f:4a:ec:bc:24:73:eb:
                    30:20:1c:a6:6a:d3:f1:fe:e0:de:d8:13:11:08:03:
                    be:fa:28:06:8b:a5:ec:fe:e0:5e:fa:f1:a4:5b:21:
                    88:ea:d3:23:03:5b:01:d8:24:a6:8f:48:f7:41:aa:
                    2d:b3:a1:3b:e5:ad:63:18:6c:50:ca:d3:55:55:0e:
                    4f:d5:d1:26:12:c9:8a:13:18:1c:85:db:df:e7:fa:
                    10:be:4a:b1:ee:4b:e4:38:74:3e:cc:7f:2f:80:a3:
                    62:e5:5b:b5:8c:98:4a:1a:32:70:37:04:09:74:5a:
                    fe:d3:d7:e5:47:33:0f:aa:b5:05:4e:a0:9d:be:a7:
                    99:f1:f5:5a:4e:2e:9b:d1:89:2e:21:95:39:25:1b:
                    b9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:05:3B:80:98:78:CD:BA:31:3B:E2:4B:CC:2D:4A:D9:FF:CF:5A:EB
            X509v3 Authority Key Identifier:
                keyid:DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:00:5b:94:89:79:3d:04:93:54:54:ad:60:ae:70:82:10:f7:
         58:ad:3f:56:a5:1b:15:63:a5:5c:53:5d:3d:90:b3:8f:4f:31:
         28:20:86:2c:b9:df:c0:1c:99:12:f9:0f:2b:11:84:c9:09:bd:
         da:38:69:96:81:24:a4:6e:d9:28:1a:46:d6:25:83:84:dc:74:
         3b:50:89:2e:ff:6c:15:49:f6:33:57:11:3c:fd:71:80:ea:6e:
         5b:fb:40:3e:c7:97:ac:e4:92:2e:d1:e7:2e:2c:98:ba:4d:60:
         97:6d:dd:d3:d6:9b:0b:93:e0:1f:26:53:e4:fd:a9:db:67:30:
         67:8b:8e:89:be:83:10:b4:31:17:bd:af:f4:e3:8a:68:70:40:
         cf:52:a1:51:ab:88:1d:5f:5f:b3:88:f7:22:5b:17:6b:82:bc:
         73:a3:3d:65:d7:95:3e:cc:bc:1c:7d:6b:6e:33:84:9d:e1:4a:
         cc:b5:2e:4c:70:82:3e:da:9e:5c:1f:1b:f7:0a:f9:b7:57:1b:
         ae:aa:c2:e6:10:c7:05:93:13:47:33:31:72:28:23:70:3b:1a:
         61:68:d3:08:c4:0c:10:dd:2e:5b:9e:a1:9a:4e:72:b7:63:89:
         78:38:58:c1:2c:29:f6:ee:b2:04:06:43:e1:ca:75:b5:86:ea:
         d0:4b:ec:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:26:55 2026 by rpki-client