Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
File:                     mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft (raw, json)
Hash identifier:          laPqKupyL5ZkOuASlT6x9uI4LcDU+pSOUIKnCTROums=
Subject key identifier:   E5:E2:DA:47:19:36:B9:4B:09:6A:BD:91:10:9A:98:CF:DB:C7:5A:47
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Certificate issuer:       /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial:       01A118D0032BADFF4440DA10AF53693D3921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
Manifest number:          1483
Signing time:             Thu 08 Oct 2026 00:00:47 +0000
Manifest this update:     Thu 08 Oct 2026 00:00:47 +0000
Manifest next update:     Fri 09 Oct 2026 00:00:47 +0000
Files and hashes:         1: 5z8L94SxohW89feZF-x7UUHOUGw.roa (hash: J9U9SwJZOAhHbw/+dwZT4u/bEO014TJ7Spfz6aawrAo=)
                          2: 60ZuDyr70onvZz7b_VP-SDmx33E.roa (hash: twz5MCkaRcivByRDA9QCyxItgQZO9OCdluDvL7eF7Ro=)
                          3: BlrqBtWblMfctvze6Z4e1h26Vg0.roa (hash: mrpfN/u4KNrOk9l0nXYVVF7vi+rRmvUj9lVXmfONvc8=)
                          4: NHjW7dPsyIq0Ra6kfJvb1FDPOrc.roa (hash: eNPkOFpshNdBId/GwxgDcZ/1OocRZllruwGL/l+cxaA=)
                          5: TmO2qs3CJ7nD3brN-Xezi1R7_Eo.roa (hash: r53OH2xwFa4qKn9FoyBvVY4gvGfnLfCBjSGuWq2Tb+U=)
                          6: e9W3bqM-9Cf9J8NK5NJYdPxtNqQ.roa (hash: fhBttHfpH+r5wDlnd1XHbP4VIUk5mx77G0HB40PrGrc=)
                          7: mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl (hash: DBRUaEbq3Fpyp0R0bQkGqLaciOSmJmQfCpyYuSJVyCM=)
                          8: vLogJj6NuTRQtmEXSY4brF-qnBY.roa (hash: zohFkXr1VCR5q6x1R2Xx5enwasHpy8O1g/gJdKkByho=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 18:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:18:d0:03:2b:ad:ff:44:40:da:10:af:53:69:3d:39:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
        Validity
            Not Before: Oct  8 00:00:47 2026 GMT
            Not After : Oct  9 00:00:47 2026 GMT
        Subject: CN=e5e2da471936b94b096abd91109a98cfdbc75a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:34:c4:81:3a:69:ab:c5:2a:eb:90:0d:5e:b4:
                    dd:b5:63:4e:d9:2e:6e:7f:01:d7:b6:96:c5:96:5f:
                    69:44:76:f6:73:aa:3a:51:13:51:71:b7:56:56:5b:
                    4d:e3:92:1d:a6:87:eb:a3:b1:ad:d6:8f:10:54:2d:
                    63:9b:aa:b6:c6:db:06:a7:7e:02:20:1b:57:b5:58:
                    f8:ed:23:c4:48:09:d4:6a:79:44:c6:cc:7f:97:3f:
                    22:2a:0b:eb:27:bd:da:bc:b6:71:28:16:72:fe:52:
                    fc:f1:33:6e:b9:94:73:4c:fd:ba:4e:5b:34:c7:b3:
                    5b:5f:c1:72:cc:30:ae:b2:b1:89:95:95:53:65:a0:
                    59:3f:25:91:29:5b:4d:19:25:36:75:e3:ea:4d:a3:
                    13:32:6a:57:bc:b6:de:8d:35:84:dc:4e:3b:c4:95:
                    cd:c7:3b:e1:43:f6:fe:5c:2f:6f:01:f1:8d:c2:48:
                    d3:09:56:ef:a4:1d:12:78:bf:63:d6:33:a8:17:fa:
                    4f:9d:11:c8:d1:a8:16:94:2c:a6:b9:4c:c6:c0:58:
                    d3:b1:7c:24:53:3a:f1:98:c0:cb:cc:ce:df:98:63:
                    e7:25:d2:65:e3:53:f5:ac:78:62:15:2f:33:e4:b5:
                    13:58:36:52:34:64:b7:a7:51:9d:a7:c7:b8:06:a2:
                    71:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E2:DA:47:19:36:B9:4B:09:6A:BD:91:10:9A:98:CF:DB:C7:5A:47
            X509v3 Authority Key Identifier:
                keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:8f:15:eb:34:9d:30:73:71:6e:b6:3c:f4:af:46:b5:b3:bc:
         ae:93:e7:53:2c:81:97:bd:98:f9:29:b9:25:e7:22:69:15:a3:
         ad:38:e9:33:9e:5e:8a:0b:31:bd:61:49:84:63:ce:7d:6b:bd:
         8d:64:8e:70:d2:8a:06:a0:af:7a:13:86:3e:50:1c:0f:b0:c3:
         00:ef:b2:06:a6:a9:52:f1:06:52:ec:25:8c:40:7a:b8:5b:c6:
         a1:6b:e0:57:9b:43:59:34:37:d9:85:bf:26:fc:ae:14:1d:ba:
         8d:93:06:d6:b7:75:56:d3:2b:70:ba:05:69:6e:6d:6e:92:f3:
         5d:5f:3a:c0:b7:74:e1:2c:fe:56:22:22:57:8d:79:78:11:3f:
         ee:76:43:93:9e:2b:43:da:01:a6:31:3e:65:51:02:cf:0b:2e:
         df:d9:ba:01:06:78:66:a2:56:d5:41:74:91:47:a7:57:e0:b4:
         07:cb:fe:bd:d3:f0:ff:dc:47:2b:d7:2f:b1:34:b6:fe:c2:6a:
         a5:10:4f:a2:2a:f7:f4:8b:97:ca:fb:e6:6b:d3:43:95:21:d8:
         45:d0:ea:d3:40:79:3b:3b:b7:46:c1:28:44:08:98:7d:62:34:
         28:f6:28:c4:fb:39:69:cc:f3:0a:26:ce:62:9f:a4:53:54:a3:
         7e:87:5d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 03:41:53 2026 by rpki-client