Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File:                     bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier:          60WtM7xaoX6LXrxFrPlMC6bZ5eRcY7jcjvdyhYoCc/k=
Subject key identifier:   A9:F5:BE:11:1F:B2:EF:B0:0E:4E:76:59:F9:2D:E5:08:AC:29:5D:21
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer:       /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial:       01A14015C634E141FD4FD34F411D1265D3D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number:          0F26
Signing time:             Thu 15 Oct 2026 15:02:11 +0000
Manifest this update:     Thu 15 Oct 2026 15:02:11 +0000
Manifest next update:     Fri 16 Oct 2026 15:02:11 +0000
Files and hashes:         1: XUohtGZb3yVqVDccn7q7JYHvZfA.roa (hash: S4jZTcNJ/zA2EHs+0ZhX1cbm9+U3Kq3hAPlU7YdHNF0=)
                          2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: kfriIwZwRNOKSOngmB/zTZEasC6l2jAdQmyKtC0kde8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:15:c6:34:e1:41:fd:4f:d3:4f:41:1d:12:65:d3:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
        Validity
            Not Before: Oct 15 15:02:11 2026 GMT
            Not After : Oct 16 15:02:11 2026 GMT
        Subject: CN=a9f5be111fb2efb00e4e7659f92de508ac295d21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e9:a7:60:48:b8:02:2d:77:84:3a:09:fe:1c:
                    84:8a:7a:a4:47:e6:08:84:82:7a:80:cc:a1:60:04:
                    be:19:35:f0:68:c5:77:89:ad:cd:d7:3b:24:ce:01:
                    6c:39:38:ed:f0:87:5f:12:ed:5b:af:10:4a:03:89:
                    8a:9e:98:fa:49:56:54:8a:c7:c8:99:0b:06:38:6d:
                    16:9b:62:cd:36:8e:d7:c2:c6:24:3c:c5:7f:b4:e0:
                    53:7a:a8:c2:d4:c9:95:12:83:5b:83:40:f5:47:c6:
                    d9:05:65:1f:5d:26:67:6a:61:6c:e3:fa:08:6d:8f:
                    07:a3:57:be:10:00:84:eb:6e:6b:c2:dc:7f:78:28:
                    cf:76:05:7f:a6:62:b8:d1:7d:9a:16:62:32:f3:88:
                    84:d3:5e:10:5f:18:99:a3:21:5b:e8:ac:26:b3:01:
                    3b:d7:5b:94:77:6b:f8:3f:f9:da:fa:12:b9:c0:3c:
                    d6:73:88:28:85:21:0d:6f:bb:a6:83:70:82:ae:55:
                    fd:5d:b1:01:8f:06:74:95:72:01:b1:23:fa:f7:56:
                    56:11:0d:d9:fb:e2:b7:00:a0:1d:b8:09:80:80:a7:
                    96:02:c6:46:69:6a:82:bb:19:ff:52:80:e6:9d:41:
                    48:4e:7d:0e:95:3f:07:52:2c:ad:12:9f:03:a7:40:
                    b9:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F5:BE:11:1F:B2:EF:B0:0E:4E:76:59:F9:2D:E5:08:AC:29:5D:21
            X509v3 Authority Key Identifier:
                keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:51:2b:4c:04:c2:35:2c:94:d6:04:9a:11:f3:03:89:8d:6e:
         38:fe:68:b9:65:9e:83:75:cb:13:5b:14:94:e5:4f:23:55:16:
         cd:f5:71:14:35:33:b6:58:89:cf:93:e0:1b:41:b1:3e:d4:c0:
         d1:0d:d0:64:42:5e:20:9d:ee:88:71:e7:95:52:2e:08:09:ce:
         f8:b1:65:ec:24:43:22:67:20:3b:1a:ab:c3:f7:0b:98:30:3a:
         0a:53:52:28:f8:b7:f6:ba:77:c5:3b:72:19:77:87:9c:69:c2:
         cc:df:44:0c:0e:ac:e3:b2:55:cc:c1:9b:1a:05:1a:4f:cf:55:
         10:c9:37:9e:7c:72:e1:c8:a2:56:ed:75:17:f8:81:ba:30:56:
         d3:40:e7:d8:fc:03:a2:e2:b2:d9:0f:76:f9:30:d5:01:bc:e4:
         8a:22:a2:bb:14:2a:6b:f6:ac:95:68:56:d6:c0:fc:14:c2:b8:
         59:5d:13:ce:85:0e:9c:11:60:07:dc:7b:1d:20:dc:3f:8f:9f:
         37:5f:c1:ff:56:2f:c1:90:00:88:b8:6d:d6:67:12:f0:9c:ee:
         55:ec:fb:b0:7a:db:cc:f1:a3:fe:07:cf:87:c5:60:fc:67:3f:
         7d:42:39:c7:5b:e3:d6:e0:3c:b8:8e:5b:98:8f:75:17:b1:2a:
         f2:0f:b7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:21:21 2026 by rpki-client