Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
File:                     hTYUYRmwRFOQguMmzKkDIAuNSxo.mft (raw, json)
Hash identifier:          Vramt3xoD1n7omjitG/Jb0oFMC4YaXIx6KMWlM83LHk=
Subject key identifier:   BD:72:5D:57:0A:3F:81:E0:DD:CB:BC:62:09:46:2E:53:6C:6E:D7:AA
Authority key identifier: 85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A
Certificate issuer:       /CN=8536146119b044539082e326cca903200b8d4b1a
Certificate serial:       01A12FC5F02F7D7BFD04B536E88DC2E97069
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
Manifest number:          13E8
Signing time:             Mon 12 Oct 2026 11:01:03 +0000
Manifest this update:     Mon 12 Oct 2026 11:01:03 +0000
Manifest next update:     Tue 13 Oct 2026 11:01:03 +0000
Files and hashes:         1: 4IwzD6JWssSfDrS7OsowJYf8F3g.roa (hash: 3STzPQwFjgmuSyiPKC+VcXtn9kHY3QHNznY54Mamy30=)
                          2: Oq4z14N71pgiI9-KE_h-CCRcT20.roa (hash: hy7yGUYkeyO3aDyOj5aTJ3uxwm3TBHALM9Mgfy3Wu3M=)
                          3: SgMOoWz5gJhb0nyT-ZKsGgLzAOg.roa (hash: zgTRF9Sx7egnoTtrUbB6SPfcPU50038KU3DAntDwjks=)
                          4: hTYUYRmwRFOQguMmzKkDIAuNSxo.crl (hash: IbnAzQ4+n0vdmYlh/mA+V87oldol/4yyVaVdWKkcdVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 08:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2f:c5:f0:2f:7d:7b:fd:04:b5:36:e8:8d:c2:e9:70:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8536146119b044539082e326cca903200b8d4b1a
        Validity
            Not Before: Oct 12 11:01:03 2026 GMT
            Not After : Oct 13 11:01:03 2026 GMT
        Subject: CN=bd725d570a3f81e0ddcbbc6209462e536c6ed7aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:07:71:f4:65:8c:37:09:48:84:a6:3a:a1:2b:
                    d7:13:3a:2c:e8:c9:bc:5d:88:b0:89:f0:08:73:a7:
                    b9:15:29:0e:6e:be:e0:b4:12:6d:d4:47:3a:42:90:
                    9e:f1:9f:72:53:3f:17:28:9a:6f:d5:61:c1:9f:ba:
                    d8:03:d0:79:41:fc:e7:8a:2c:88:f4:b3:b1:df:b8:
                    93:12:1f:0f:92:f9:54:34:1b:40:f7:14:ed:37:2c:
                    ce:a8:1a:0f:c2:d2:4b:bc:aa:5a:fd:35:de:aa:6d:
                    76:58:3f:7b:bc:6f:79:93:7c:02:5c:08:b4:fd:b2:
                    33:fb:51:6d:10:43:43:9a:35:b0:61:f5:19:3a:f6:
                    3c:b3:bd:b1:62:b2:a8:e1:48:20:e2:a3:a2:60:ef:
                    f8:b3:7a:b3:64:fb:67:9d:1c:3c:d0:e0:a1:33:68:
                    0a:38:15:b9:ed:f8:ce:a7:9e:76:ca:87:31:23:e0:
                    35:e0:3d:7f:9c:9f:9d:66:a4:c1:e8:86:b9:3f:82:
                    10:72:76:ac:58:73:1a:23:04:78:07:cc:ee:d5:91:
                    5f:78:37:e7:26:f9:d5:42:64:67:0d:89:19:1b:98:
                    3f:1f:b0:8c:03:78:ce:4d:ed:67:e2:ee:18:48:8d:
                    05:a0:4a:58:e7:6f:2a:56:79:c6:80:a4:b4:3e:68:
                    46:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:72:5D:57:0A:3F:81:E0:DD:CB:BC:62:09:46:2E:53:6C:6E:D7:AA
            X509v3 Authority Key Identifier:
                keyid:85:36:14:61:19:B0:44:53:90:82:E3:26:CC:A9:03:20:0B:8D:4B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTYUYRmwRFOQguMmzKkDIAuNSxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d5f93-ac5a-41e3-80c3-0c67217cc96b/1/hTYUYRmwRFOQguMmzKkDIAuNSxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:bc:3e:43:2c:c9:e7:ad:26:01:5e:41:7d:91:c4:91:93:44:
         0c:30:01:6c:1f:94:c7:5a:ff:fa:73:04:37:21:88:36:bd:8b:
         85:87:00:36:c2:41:40:10:61:f4:93:bb:6e:6b:5a:10:a0:a5:
         36:16:c6:85:23:d8:f8:9c:b6:1f:55:bb:d4:e3:91:77:08:8e:
         bd:d7:5e:dd:bf:0c:ce:32:2a:89:0a:fe:4e:fc:00:f8:55:f8:
         a8:22:b4:fc:fa:0e:f5:02:32:3e:2b:4a:26:9f:c4:66:41:6c:
         39:0b:35:d0:f3:c6:52:ef:59:0e:bb:a8:66:04:98:a3:c6:fe:
         87:e2:53:0a:45:f5:ea:1e:e2:05:77:63:21:fc:45:af:88:ef:
         6f:54:9e:c0:1e:4d:dd:a4:72:9e:3c:db:ca:93:75:b6:8d:58:
         b7:2a:69:79:b7:35:57:42:18:2e:53:e7:f2:57:2e:fd:2a:0e:
         3b:de:55:b1:ff:17:8c:42:91:c5:2c:cd:be:66:36:9b:a6:09:
         0c:c1:de:b2:d6:b8:2f:3d:51:95:1e:a3:e8:67:c7:94:50:17:
         69:bd:ee:05:97:5f:98:c1:2c:e0:75:be:b5:7e:67:4f:7d:a0:
         a5:78:f0:fb:e3:b6:24:93:c1:8b:5a:d0:94:a5:a6:13:db:3c:
         f8:17:97:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 15:32:06 2026 by rpki-client