Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
File:                     458aboTAJ378tW2UKw615FZHESk.mft (raw, json)
Hash identifier:          Qsh+CuO44smkPy2KmnRSKuFG7G90nBm8Xl+12gbLljM=
Subject key identifier:   66:59:E6:26:0E:F6:EA:F1:F0:AE:5B:F6:8E:54:D2:9E:0E:D8:D4:BD
Authority key identifier: E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29
Certificate issuer:       /CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
Certificate serial:       01A1242F3AFD1F87B2733745FA4C314784E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
Manifest number:          1A9E
Signing time:             Sat 10 Oct 2026 05:00:37 +0000
Manifest this update:     Sat 10 Oct 2026 05:00:37 +0000
Manifest next update:     Sun 11 Oct 2026 05:00:37 +0000
Files and hashes:         1: 458aboTAJ378tW2UKw615FZHESk.crl (hash: P5WSjZAatXW4e932VPoLE3L5FfZqn+ITmo75j62r6sw=)
                          2: oUGkPZTPkKHGPI9Jz6IXcq74MlY.roa (hash: kW23YRINjjPil+PnE7QgBUdKf6Li2ZuNouz/Gf0yezE=)
                          3: q5YOOrxuiSWXoPgrKO2ByRV2Pag.roa (hash: MIH8GtLHKwDBxta0prsle3vWb5PxVdZjd+6vSDHesjk=)
                          4: zhvANJOvIZUMm3XZ4zAx_z-cOFc.roa (hash: ra8TIJdqXnbc9kZExeXfpCuOK6FblyvfQ8K4O5SfJHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 05:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:2f:3a:fd:1f:87:b2:73:37:45:fa:4c:31:47:84:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39f1a6e84c0277efcb56d942b0eb5e456471129
        Validity
            Not Before: Oct 10 05:00:37 2026 GMT
            Not After : Oct 11 05:00:37 2026 GMT
        Subject: CN=6659e6260ef6eaf1f0ae5bf68e54d29e0ed8d4bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:16:64:bb:14:40:02:a4:f3:59:36:63:61:50:
                    2d:ff:0d:de:77:6b:54:03:a4:c1:a4:d5:7b:89:42:
                    50:c2:c0:6f:2c:eb:c2:bc:89:e1:ad:94:4d:4c:af:
                    67:43:d3:8d:30:33:ff:03:d9:fa:ac:9e:99:af:af:
                    d3:63:47:96:76:ee:fe:6d:ad:d3:b7:68:43:64:ab:
                    57:1a:fa:ff:93:25:52:93:cc:f7:af:8b:e6:ef:88:
                    80:50:11:54:8b:8e:d3:5d:c9:a9:35:44:36:f3:4a:
                    90:95:b2:85:db:97:40:9c:71:8d:c4:17:f4:f4:d8:
                    26:61:f5:f0:79:b9:fa:0c:9a:b8:f7:df:fc:84:3c:
                    67:f8:95:71:98:06:91:bc:58:f4:bf:5b:7b:8a:d9:
                    39:92:94:2e:97:cb:d2:20:f3:bb:14:69:ee:57:20:
                    a7:6c:ff:ac:f1:af:af:ba:35:6a:f6:d5:2e:fd:cb:
                    68:35:c0:9d:34:02:15:71:74:5b:67:76:19:75:ec:
                    2a:67:d1:6b:03:ea:ad:fe:be:5a:78:f4:f8:e9:c6:
                    79:0a:58:3e:4e:76:03:b5:5b:c3:45:78:47:5b:5b:
                    9f:77:fa:db:fe:68:92:3a:a7:d0:f3:75:a2:cc:34:
                    1f:8c:9c:99:53:82:1e:f5:97:ba:37:1c:f3:19:29:
                    db:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:59:E6:26:0E:F6:EA:F1:F0:AE:5B:F6:8E:54:D2:9E:0E:D8:D4:BD
            X509v3 Authority Key Identifier:
                keyid:E3:9F:1A:6E:84:C0:27:7E:FC:B5:6D:94:2B:0E:B5:E4:56:47:11:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/458aboTAJ378tW2UKw615FZHESk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/160a77-756d-441a-86c3-0e5392757f82/1/458aboTAJ378tW2UKw615FZHESk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:fb:f1:fa:a9:8d:76:47:11:4d:8e:40:9f:29:b9:25:aa:d0:
         d1:d0:37:d9:38:13:ea:5f:e7:29:54:cf:a1:10:54:98:ab:b7:
         b8:5d:05:94:7c:c9:4a:e3:57:f5:30:a8:65:fa:27:6f:16:4f:
         c6:05:35:73:10:9e:c4:ad:1a:d0:12:d4:78:23:f7:18:9d:25:
         27:98:39:59:dd:60:27:8d:af:4c:4d:42:6f:a2:91:f9:90:ce:
         2a:69:c3:20:cc:e0:49:2d:e3:a7:da:fc:7e:e2:65:2b:dd:04:
         69:c8:a1:18:b2:91:73:bd:85:3a:ec:dc:e9:06:85:4c:06:5e:
         1e:b0:74:7f:db:8e:77:ef:e8:49:70:6f:ed:d1:dc:51:54:70:
         18:10:85:47:cf:41:d1:a6:b9:5c:6b:7b:28:bf:8e:a8:8e:dd:
         99:14:be:49:af:06:5e:d4:79:d2:2d:e1:98:74:ed:7a:08:1f:
         66:04:54:2b:d4:ba:f5:a4:31:4e:93:32:dc:fd:55:95:f5:63:
         38:47:9f:e6:b5:81:42:f0:9c:0a:ac:3a:74:d9:03:4f:64:3c:
         b1:fc:36:0c:14:80:49:3e:8f:84:96:1d:05:4b:22:1e:6e:a7:
         c4:97:dc:0f:2d:1d:a5:1d:76:aa:e4:ba:f6:97:b3:e2:e7:c0:
         6e:19:d0:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:48:39 2026 by rpki-client