Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
File:                     0GLPgHpWt3Gl9CzBia8tYx61quw.mft (raw, json)
Hash identifier:          eiTjfgc+YvIXBq+j4hG/Pe7BCATG6bokxy2dThGvO6E=
Subject key identifier:   D2:1C:B1:F8:B4:82:52:79:FB:8C:D2:A0:3F:18:C6:FC:6E:31:E7:0A
Authority key identifier: D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC
Certificate issuer:       /CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
Certificate serial:       01A125E71EE3F544E3269C0BEC2491D74E72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
Manifest number:          066A
Signing time:             Sat 10 Oct 2026 13:01:05 +0000
Manifest this update:     Sat 10 Oct 2026 13:01:05 +0000
Manifest next update:     Sun 11 Oct 2026 13:01:05 +0000
Files and hashes:         1: 0GLPgHpWt3Gl9CzBia8tYx61quw.crl (hash: 9aEOGjIadf73w3y+WXFDiNWxIePxSslU0eP886M2ejc=)
                          2: Zs-xR6bz0aDcX2FXhq0rr62PmYs.roa (hash: FHW9PNrXaAk17yVaUaDRlPcw+vmMTTkc0xlRD3/qYHw=)
                          3: piJSswQfIqs3HoYsozf8wWJQu_Y.roa (hash: 1ovHBWqaD1eU80Df7k4Dvy2LhX6Hg1bDFw1LN2vMbtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:25:e7:1e:e3:f5:44:e3:26:9c:0b:ec:24:91:d7:4e:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d062cf807a56b771a5f42cc189af2d631eb5aaec
        Validity
            Not Before: Oct 10 13:01:05 2026 GMT
            Not After : Oct 11 13:01:05 2026 GMT
        Subject: CN=d21cb1f8b4825279fb8cd2a03f18c6fc6e31e70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c5:2f:4a:c7:7c:8b:3c:39:a4:5e:81:d3:a6:
                    a1:fe:43:23:68:9e:cd:b6:6a:08:e7:b0:3e:f0:87:
                    cb:ec:c9:83:2f:0a:b2:f8:55:4b:7e:3e:d2:1c:ef:
                    2a:59:38:54:38:2e:38:ee:15:fb:06:9a:f7:8e:cf:
                    08:da:12:cb:d7:7b:15:4c:23:22:8f:ef:2c:7c:aa:
                    69:99:9f:ba:d9:45:6d:47:22:d6:42:95:8d:ff:4e:
                    93:2a:4c:d1:7a:dd:30:e4:e5:35:6b:7c:7c:d8:7e:
                    94:25:9f:90:a1:9d:a1:3e:22:be:58:05:45:7d:30:
                    a5:23:4c:58:e7:2c:83:53:84:49:b4:4d:de:f0:43:
                    91:bd:f7:7f:09:03:8d:91:87:1b:8b:69:6d:f5:9b:
                    ce:f6:e8:e2:63:2b:04:38:d3:28:1a:1b:85:b8:f0:
                    28:21:e9:6b:b5:64:4e:06:4f:14:dc:7e:6c:c2:59:
                    a2:27:bc:8e:ff:b1:02:6c:91:c5:a9:fe:90:26:85:
                    c3:f3:e6:a3:f0:56:bd:75:df:d8:94:00:55:20:c4:
                    e6:40:1a:53:06:72:88:ff:3c:f4:32:c6:95:e7:45:
                    18:79:e6:b3:e4:cf:c0:40:40:ef:a5:f0:23:8a:aa:
                    0d:5d:fe:88:65:6c:87:b8:3f:ea:5a:19:79:b8:c1:
                    05:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1C:B1:F8:B4:82:52:79:FB:8C:D2:A0:3F:18:C6:FC:6E:31:E7:0A
            X509v3 Authority Key Identifier:
                keyid:D0:62:CF:80:7A:56:B7:71:A5:F4:2C:C1:89:AF:2D:63:1E:B5:AA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GLPgHpWt3Gl9CzBia8tYx61quw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/886ed6-f613-4a0e-8c0d-1dd5faa06b0a/1/0GLPgHpWt3Gl9CzBia8tYx61quw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b0:f4:0b:da:43:40:11:bb:4f:70:59:b2:24:5c:38:1b:e4:
         7f:82:1b:6b:9a:c8:77:e8:b3:58:9b:89:4c:7f:4a:38:c5:e2:
         ec:7b:1c:67:f4:db:19:13:57:c2:d2:09:be:0f:c9:da:61:73:
         a5:03:22:1f:6c:b5:05:1f:42:46:b6:bc:a5:6b:f2:45:89:a3:
         50:23:89:e0:b2:77:1b:8c:3a:dc:4a:4d:29:4f:96:90:0f:ab:
         fb:79:ad:c4:c5:53:d3:f4:e5:be:aa:5b:e4:5d:30:67:8b:b7:
         02:95:50:00:cc:65:e8:30:e1:c2:c6:55:6d:e7:e7:53:1c:83:
         8e:60:7d:04:3d:9b:f3:49:99:14:bb:9d:2b:8f:39:90:a6:1b:
         a4:fa:07:c3:b2:a3:fd:0d:0e:5b:1c:ab:10:d8:db:13:f5:61:
         06:fb:81:b7:80:be:18:78:f0:a7:aa:0e:81:e2:81:5d:e8:4e:
         e1:43:c0:a5:fb:62:2d:7f:00:c5:a8:71:4c:61:0e:99:1d:d8:
         73:3e:f4:1b:06:1b:66:03:dc:c9:ae:2a:ff:7e:07:3d:03:f7:
         d4:4e:27:84:f4:b3:87:29:47:45:83:e4:18:20:c1:d3:d6:32:
         7a:39:51:d9:2f:64:52:07:10:dd:d3:56:35:2e:96:87:b9:d5:
         cd:c8:3a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:28:33 2026 by rpki-client