Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File:                     89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier:          U1+qXfxeoVxFqSZ7W/3Llz84YzGjFoeJfrbWey+Ts30=
Subject key identifier:   57:2A:0F:0C:0D:6F:DB:E7:28:C9:EE:60:21:26:7C:9B:D0:8C:AF:98
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer:       /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial:       01A11D5124A47FA552E44766E413A8550521
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number:          1A97
Signing time:             Thu 08 Oct 2026 21:00:19 +0000
Manifest this update:     Thu 08 Oct 2026 21:00:19 +0000
Manifest next update:     Fri 09 Oct 2026 21:00:19 +0000
Files and hashes:         1: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: D1mmhHoXPxw9GRpIoRCCs4n0PCXPti6d/ilFbTP7plE=)
                          2: mhvprDFBImPl7iFEWW3FxFWOZ6g.roa (hash: YcvQtGrqc9rsfbkzmvXWNEdP5V2+qw1zO++Zl2+6+Eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1d:51:24:a4:7f:a5:52:e4:47:66:e4:13:a8:55:05:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
        Validity
            Not Before: Oct  8 21:00:19 2026 GMT
            Not After : Oct  9 21:00:19 2026 GMT
        Subject: CN=572a0f0c0d6fdbe728c9ee6021267c9bd08caf98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5f:13:49:ed:45:a3:09:85:d7:2d:13:5d:3b:
                    e8:a5:5f:57:45:cf:46:d9:54:d5:04:32:35:bc:66:
                    af:d0:ba:04:24:03:8b:e3:76:a1:11:c2:0e:38:49:
                    c6:2f:44:a0:f0:87:24:00:35:43:a7:de:24:71:36:
                    59:dd:79:f7:60:67:fe:2a:03:5f:07:cc:64:0a:ce:
                    93:bf:e9:79:96:8d:33:16:e4:d1:84:9d:d8:6b:1b:
                    d4:81:ba:1d:79:3a:4f:7a:bc:e4:0e:79:25:16:09:
                    bb:d5:40:3c:e1:a9:48:30:5b:1f:dd:52:ef:6f:68:
                    39:d8:8c:24:b7:0b:a7:79:b1:8c:03:c2:ae:89:a6:
                    fc:2a:1b:f5:56:b0:5e:13:3d:e9:b1:49:3c:35:ae:
                    03:86:4c:4a:81:ac:5c:ea:ff:e6:f2:d6:f7:9d:b4:
                    ff:75:11:a1:6c:6b:83:68:91:97:fc:d8:46:9c:96:
                    38:18:ab:d9:72:53:d0:c6:de:0b:61:f6:90:ce:4c:
                    46:7f:35:d1:de:36:fd:9d:76:d5:9d:93:c6:cd:89:
                    1a:79:19:f9:31:03:8f:b8:37:93:7e:97:23:c0:ae:
                    b7:c5:a6:9c:ee:76:84:4e:93:8f:94:e5:9e:8f:13:
                    65:cc:d5:1d:55:92:0b:53:fe:d8:e8:df:17:c0:c1:
                    52:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:2A:0F:0C:0D:6F:DB:E7:28:C9:EE:60:21:26:7C:9B:D0:8C:AF:98
            X509v3 Authority Key Identifier:
                keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:52:24:4c:56:31:0a:19:f7:0b:48:de:4b:a0:13:d0:6f:f2:
         81:a6:03:4a:64:e7:e0:e1:72:c6:5b:81:d6:81:45:2a:71:00:
         a4:23:e2:12:4f:26:b6:bf:f7:4d:c4:9b:23:e5:49:bb:35:2c:
         79:05:a8:96:91:7c:47:8a:23:34:6d:ed:c9:e7:29:d1:3e:40:
         7a:e6:72:05:59:4c:bf:7c:7b:f0:fe:de:e8:53:bd:4e:ea:2c:
         26:18:3a:5f:d4:c4:be:c3:9e:c7:b5:9e:d5:90:34:54:39:22:
         ab:2f:ef:7a:38:ef:66:7d:16:14:15:5c:da:a7:bf:09:0a:92:
         d1:85:19:e6:e8:94:3a:1d:50:5e:34:95:1a:49:c9:4e:cf:83:
         9d:6a:ca:98:34:08:af:0d:64:9e:dd:49:20:47:c8:d0:c2:d5:
         24:6a:56:e2:85:17:6f:af:66:59:3a:8c:6d:2b:64:2e:0a:b5:
         f3:4d:cb:95:82:80:e1:ef:49:ad:4c:5a:98:8e:20:04:b1:73:
         f1:d2:35:36:53:76:fe:41:fa:7f:c7:b0:a5:15:b0:de:fa:05:
         6b:87:0b:2d:6d:57:4d:60:2b:70:f1:c6:48:22:78:03:4b:7e:
         0f:f8:4f:2c:5b:78:c8:96:6d:e7:9e:9e:40:31:67:eb:1b:82:
         1f:cb:a5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:13:10 2026 by rpki-client