Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
File:                     rpPMjMqB-gDcU-e4B46RtcEbou8.mft (raw, json)
Hash identifier:          80WMW0T8AQmBvs+XSiU3e+gjj1Pl9bhnfD0+FseYma0=
Subject key identifier:   ED:63:4D:8D:22:8B:AA:03:62:CD:65:2A:A3:62:4E:5B:31:19:A6:84
Authority key identifier: AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF
Certificate issuer:       /CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
Certificate serial:       01A1193D70FD853E6BE7EF651E86454E46C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
Manifest number:          159A
Signing time:             Thu 08 Oct 2026 02:00:19 +0000
Manifest this update:     Thu 08 Oct 2026 02:00:19 +0000
Manifest next update:     Fri 09 Oct 2026 02:00:19 +0000
Files and hashes:         1: YinM9FZ7tYvDuQZElbcHdEksbHw.roa (hash: 8pZ2RgiQMW7t4pyoRKcJqD0BNRo6lf7CbatwYv4YjtM=)
                          2: rpPMjMqB-gDcU-e4B46RtcEbou8.crl (hash: G+DFVNvsBrF/0CaWCKDGuk8bUP5QQAc4KPgZkWHdbEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:3d:70:fd:85:3e:6b:e7:ef:65:1e:86:45:4e:46:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae93cc8cca81fa00dc53e7b8078e91b5c11ba2ef
        Validity
            Not Before: Oct  8 02:00:19 2026 GMT
            Not After : Oct  9 02:00:19 2026 GMT
        Subject: CN=ed634d8d228baa0362cd652aa3624e5b3119a684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:ce:5c:a0:04:e4:23:0a:e1:0f:c7:50:ae:
                    5b:59:54:08:b6:9b:51:f4:1f:98:fc:07:5f:f3:49:
                    24:e0:22:2a:6d:c5:67:6b:6b:4e:26:3f:7a:e9:7e:
                    d6:11:b7:34:36:0c:a6:63:04:ba:1e:a5:e7:48:c0:
                    a5:43:86:a1:dd:60:8a:d7:85:1f:b4:58:33:f8:c5:
                    d8:36:f6:7e:41:49:55:f7:24:cf:61:a3:8c:a8:d5:
                    fa:aa:cf:cd:3f:19:75:9b:27:61:e8:0f:0e:88:49:
                    65:de:a5:00:ba:96:50:ca:73:71:f6:a7:7e:c8:04:
                    68:24:12:b7:e4:91:bc:bc:33:11:95:fc:e3:3d:b9:
                    02:45:14:f2:28:af:51:2a:8f:2b:7f:21:2c:42:e6:
                    c6:dc:c1:11:96:ba:b5:6f:3c:cf:4d:58:41:0e:f0:
                    3b:0c:62:03:d7:61:6a:31:f1:92:ff:94:84:b1:75:
                    7f:57:33:e8:15:25:83:af:18:fe:e6:0e:72:0f:55:
                    dc:8e:b7:19:4f:28:8a:80:28:76:d7:e9:38:59:b7:
                    9e:c5:5c:ff:bb:d1:bf:cd:6a:57:fb:1a:c6:04:00:
                    31:81:de:58:4d:03:18:4e:de:5b:1a:f5:2d:6c:8a:
                    04:68:6f:35:1d:cc:40:d6:0a:b1:11:3f:04:c8:ec:
                    d2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:63:4D:8D:22:8B:AA:03:62:CD:65:2A:A3:62:4E:5B:31:19:A6:84
            X509v3 Authority Key Identifier:
                keyid:AE:93:CC:8C:CA:81:FA:00:DC:53:E7:B8:07:8E:91:B5:C1:1B:A2:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpPMjMqB-gDcU-e4B46RtcEbou8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/179891-41cc-4aa0-ab68-f406c83b3fba/1/rpPMjMqB-gDcU-e4B46RtcEbou8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d1:71:f6:c7:83:67:a6:e0:89:64:d2:74:2b:57:cf:f2:c8:
         b2:5a:05:8d:b4:e3:21:00:75:11:c3:29:fc:63:9a:a7:ab:b7:
         db:79:ae:93:67:4f:47:0d:32:77:50:16:85:71:5c:84:37:43:
         8e:1d:15:11:63:9f:0d:f9:d2:25:8f:38:ad:a9:66:fc:63:68:
         15:6b:9c:ed:e5:95:89:51:cb:ef:7d:4b:02:0d:f2:4e:8b:6a:
         62:56:27:ec:68:2f:5b:0b:1a:c0:f3:1e:61:78:30:a9:ae:70:
         95:8d:8f:e6:10:da:3d:bb:81:7c:6c:2c:d8:e2:e6:09:88:1a:
         f7:b1:7a:62:48:4f:b9:8c:ce:eb:d3:1e:75:85:72:df:9f:9f:
         61:2f:f3:80:40:88:e1:71:7e:71:fe:be:82:6b:93:21:25:4e:
         f7:1b:9b:14:7d:89:0a:fe:09:25:e1:3b:00:b2:55:1a:9b:1b:
         b1:26:91:bc:49:ff:0a:40:c9:3e:fb:bc:e7:a9:a7:86:e2:2b:
         2e:16:9c:d0:98:25:09:29:fe:50:14:03:ed:1e:a8:d8:1b:58:
         38:34:eb:ac:ed:5f:7a:a2:d5:8d:98:cd:73:61:48:de:00:5a:
         85:9a:53:79:e2:98:4e:6c:ab:47:ba:85:d2:f9:a0:d8:2c:2f:
         7f:8d:53:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 06:21:28 2026 by rpki-client