Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
File:                     Rg0xSfxQypeX9Q_engKggxNMUBk.mft (raw, json)
Hash identifier:          jvtHMBBGvA1vNF246noDUV5q2HOebn4XbdWLq+SwNJ4=
Subject key identifier:   21:58:17:DA:AF:67:7C:C3:FF:3D:64:71:D0:D9:14:23:72:A8:A5:C6
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Certificate issuer:       /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial:       01A132C6A08299BC056899A98FC945D7E9DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
Manifest number:          1967
Signing time:             Tue 13 Oct 2026 01:00:40 +0000
Manifest this update:     Tue 13 Oct 2026 01:00:40 +0000
Manifest next update:     Wed 14 Oct 2026 01:00:40 +0000
Files and hashes:         1: 80AHb416dPFtah1nGaAc_7l46Ec.roa (hash: 2D/X4apH00Mk7Ti0XtGlvP9oq+7ZpgnstiU/IgSvOD0=)
                          2: ANo9L73aObGqzdP0orWNPP3485k.roa (hash: Q3dDG3+jQe8HP6goxHrxtXjwKKzMb7l9p077g0BZffQ=)
                          3: KXpXJO-YFLLgP89XzYYz7qcHQUY.roa (hash: GGh45Wv5joUkRSI7WVUZH33rmAafKbq5cLNpmunXMXY=)
                          4: Rg0xSfxQypeX9Q_engKggxNMUBk.crl (hash: elieutkIF/B+cWvHxn6n9Ej4wldTeoY3txBlL6ih/hE=)
                          5: ZGPQKEDVE9F1MV2KWCts_BoufGk.roa (hash: epehMPMwEjYywMBrhnF1PZ/wa0g0S9LNY7+R460jN/I=)
                          6: iWOLIa8CHwTMmCIWqUjl6myNeCQ.roa (hash: rcAH7VEF8TBjliKTDv/7zF+IYhohItkkjWceaK+DiMY=)
                          7: uUDFzxBxpPtA7UjADRUOTQEPY_Y.roa (hash: h5Q3Ax5wjUbWsPmn7ajHFEGC0r7tCkijHeUzTOQ9fVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:c6:a0:82:99:bc:05:68:99:a9:8f:c9:45:d7:e9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
        Validity
            Not Before: Oct 13 01:00:40 2026 GMT
            Not After : Oct 14 01:00:40 2026 GMT
        Subject: CN=215817daaf677cc3ff3d6471d0d9142372a8a5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:12:c0:20:37:83:42:20:86:e7:f9:15:be:09:
                    2a:7f:b0:fa:e0:fa:ca:4c:89:d9:2a:c9:8a:da:78:
                    a3:ae:2c:db:6a:90:68:65:17:6f:2e:9a:fd:0b:1d:
                    c0:b5:91:ab:4a:1e:a6:cc:a8:26:5b:f5:4d:f1:d8:
                    c1:43:72:58:e0:07:56:07:68:3b:c5:2a:cf:b6:e7:
                    52:59:2a:c2:36:ef:e2:c9:5e:3f:17:e6:ce:55:76:
                    92:04:fd:84:0c:e1:37:37:90:d3:1c:21:45:66:f5:
                    e8:b9:c2:ff:3c:71:8d:35:fa:64:74:fe:45:eb:39:
                    f3:d3:cb:8c:b2:29:d3:b6:82:6b:76:bb:5a:2c:be:
                    ea:64:e7:5e:df:d3:8d:4a:1d:4d:fe:ee:b2:91:f4:
                    ec:84:84:59:2d:f4:ac:ba:e7:7b:2a:ed:33:df:77:
                    03:ae:3f:66:8d:8b:03:c7:13:08:61:d1:94:cd:25:
                    6d:89:d6:26:07:17:b6:00:a8:55:6d:52:21:ce:cc:
                    78:e1:50:04:e5:3e:75:2a:10:d3:8e:d6:91:2a:8b:
                    a7:4e:4e:fc:9d:89:98:1f:b8:33:9d:11:d8:65:d1:
                    cd:e4:3a:c2:10:22:ad:0c:53:cc:e6:78:e6:8b:43:
                    c5:17:40:9a:f7:54:07:4a:a1:b4:ee:f6:17:a3:65:
                    0b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:58:17:DA:AF:67:7C:C3:FF:3D:64:71:D0:D9:14:23:72:A8:A5:C6
            X509v3 Authority Key Identifier:
                keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:0f:af:07:85:81:f4:d3:d7:5e:79:8c:47:70:8a:36:df:6e:
         da:b9:ba:ba:56:b9:05:48:69:b9:53:a4:90:87:45:5b:36:c7:
         11:14:8a:47:24:e4:74:09:e4:85:4e:d2:dd:28:ae:26:dd:c5:
         76:90:d1:d8:26:ee:43:d3:34:c5:49:21:3d:c1:b1:71:43:f6:
         bd:11:24:5e:1f:be:5b:49:19:d3:9d:38:cb:5f:56:f2:92:f2:
         4f:09:20:af:3a:f3:a3:8f:00:a7:16:ff:0b:4a:bb:b1:c7:e0:
         d6:d9:c1:9f:51:f0:19:70:3d:97:98:8a:5f:bb:36:bf:e8:48:
         23:1f:f4:7a:91:a6:6b:ca:9f:66:41:3f:42:8e:29:d6:25:c5:
         9f:9a:bb:58:e4:72:33:f3:7a:22:b7:c7:b0:1e:eb:77:e5:b1:
         e5:3a:23:4f:30:e6:10:ec:c8:d1:a1:3a:b0:28:35:18:87:1e:
         9c:62:4f:c7:f3:f3:a6:6d:bb:66:28:fc:ac:18:56:81:0b:92:
         db:42:c6:b5:92:13:92:de:b4:2c:5f:28:92:d1:61:d6:d0:08:
         b0:fa:1b:a6:7b:e9:97:3f:be:e4:56:64:44:a3:c8:73:53:97:
         c2:8b:53:3d:92:39:c5:8e:59:86:76:50:8a:c6:60:4d:71:06:
         98:ed:1a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:25:42 2026 by rpki-client