Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
File:                     pIKPtnaRQQizohBYAGsbdGU6coQ.mft (raw, json)
Hash identifier:          gcE6pUATi3Rbrp6pGiQGsBPefOGQG5SI0n+bH3LWsjs=
Subject key identifier:   CA:CB:5E:C9:7C:24:D6:31:AC:41:BD:3B:74:77:91:08:AA:8C:53:E4
Authority key identifier: A4:82:8F:B6:76:91:41:08:B3:A2:10:58:00:6B:1B:74:65:3A:72:84
Certificate issuer:       /CN=a4828fb676914108b3a21058006b1b74653a7284
Certificate serial:       01A119E29418ACE0CECB3A67D4C5BFD9D75F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
Manifest number:          010C
Signing time:             Thu 08 Oct 2026 05:00:41 +0000
Manifest this update:     Thu 08 Oct 2026 05:00:41 +0000
Manifest next update:     Fri 09 Oct 2026 05:00:41 +0000
Files and hashes:         1: pIKPtnaRQQizohBYAGsbdGU6coQ.crl (hash: SVYhrIHRlaE7ngFMv44cDH4rbWEmuZ6Xbq6/7qbvlSA=)
                          2: xnpLWQbK7jsUsduUEIccPsw5IXY.roa (hash: Twr62ldc2Qdv26LvzsZhRcIFu9JARGt1MRoXVZFiTVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 05:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:19:e2:94:18:ac:e0:ce:cb:3a:67:d4:c5:bf:d9:d7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4828fb676914108b3a21058006b1b74653a7284
        Validity
            Not Before: Oct  8 05:00:41 2026 GMT
            Not After : Oct  9 05:00:41 2026 GMT
        Subject: CN=cacb5ec97c24d631ac41bd3b74779108aa8c53e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:cb:a0:cd:52:bb:b1:c2:74:c9:d9:75:c8:91:
                    ac:96:00:20:51:ed:c5:fa:a8:d1:40:32:da:95:8f:
                    dc:e9:f2:b4:54:25:9c:08:e5:c5:12:01:d1:2a:51:
                    4d:fb:e0:e1:e0:bf:84:de:8c:79:e2:16:55:db:18:
                    fd:ea:f9:5b:cc:8c:f4:b5:cd:6a:e1:57:68:48:54:
                    92:25:37:a3:c4:ae:f6:2e:0c:d4:11:49:69:60:64:
                    d2:23:0a:49:42:48:d8:f3:74:06:55:91:33:c0:b7:
                    99:92:65:53:a4:cd:ba:ef:52:05:3b:3e:3a:ca:49:
                    3b:80:d6:b0:cf:c6:05:34:99:d6:79:66:a8:bb:e9:
                    2a:b2:e7:b8:8c:42:fa:60:49:a7:65:1f:c5:84:60:
                    b6:2a:14:f6:f0:ad:3d:90:3b:6d:a0:5b:37:12:fd:
                    83:74:5c:da:d1:4f:fc:64:f3:80:c0:ac:e9:19:be:
                    cd:e0:0a:fc:bb:b9:36:27:f2:2e:a9:4d:fc:d5:07:
                    3c:60:e0:2e:bb:1b:19:52:93:da:4d:67:18:3c:59:
                    9d:53:c4:e1:13:f9:5c:7e:2f:74:c9:74:0e:90:3c:
                    a1:4e:57:e5:60:b6:4f:5a:72:25:6f:7b:80:e8:df:
                    23:97:0f:f8:7c:0e:6d:b8:03:15:c7:ca:e5:39:e2:
                    95:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:CB:5E:C9:7C:24:D6:31:AC:41:BD:3B:74:77:91:08:AA:8C:53:E4
            X509v3 Authority Key Identifier:
                keyid:A4:82:8F:B6:76:91:41:08:B3:A2:10:58:00:6B:1B:74:65:3A:72:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pIKPtnaRQQizohBYAGsbdGU6coQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/566fb3-a641-4d19-a58e-640e075bf87f/1/pIKPtnaRQQizohBYAGsbdGU6coQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:92:d8:8f:0e:c2:52:27:ad:94:c4:81:ca:5b:e7:2e:9c:fc:
         ab:a5:c2:75:2a:04:6b:a7:33:c1:1b:74:05:a0:03:ea:94:62:
         0b:61:09:6e:82:09:f0:90:3e:ab:b1:7f:75:27:1a:3e:bc:36:
         50:f9:be:e7:c0:ee:1c:e0:73:d5:24:9d:b6:48:81:c3:e4:19:
         d5:c7:9e:8c:5a:44:ae:eb:bb:3f:ce:e1:b7:46:6c:de:a3:61:
         94:83:34:90:28:28:3e:db:67:f6:86:61:3f:d0:8d:f0:13:db:
         5d:8d:c8:45:07:14:25:5d:0a:98:48:45:d5:60:49:15:7e:f6:
         36:92:07:ba:9c:d9:b2:ce:f5:b7:3a:20:37:5e:9e:49:a2:d2:
         17:da:7a:74:f3:2c:3e:d1:44:2a:3a:75:e5:5d:ca:d5:19:7a:
         6f:ab:07:1e:58:0a:24:03:b1:5b:35:08:0e:ca:99:41:1f:f2:
         6e:d1:cb:58:59:1b:eb:91:19:cf:a0:0c:66:4d:f2:0e:56:b4:
         30:7c:df:50:8b:10:a3:c9:9e:e2:d7:1d:88:d3:d1:a2:50:e7:
         b7:5c:a3:38:15:9d:12:88:d2:8c:7a:94:31:69:02:da:1c:af:
         95:af:d7:76:46:01:c8:7c:b9:5d:61:98:8b:52:43:ae:27:1d:
         f2:27:b4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 14:45:46 2026 by rpki-client