Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
File:                     S58x5zUqhwe5jG0nNI6LxJPRqa8.mft (raw, json)
Hash identifier:          8vlSrO67qOA3sLgQQT9GfjG2tcho9Svlf/IDo01NgzI=
Subject key identifier:   FF:F1:8B:C2:5A:83:95:3C:5F:B7:8E:29:E0:95:C2:61:D5:5C:81:B4
Authority key identifier: 4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF
Certificate issuer:       /CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
Certificate serial:       01A13B25358C30EF59439DFA8DF5E155CE2F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
Manifest number:          1AA4
Signing time:             Wed 14 Oct 2026 16:00:56 +0000
Manifest this update:     Wed 14 Oct 2026 16:00:56 +0000
Manifest next update:     Thu 15 Oct 2026 16:00:56 +0000
Files and hashes:         1: IMC5fjcQ_DWcsRbnT_lDAoFdkcM.roa (hash: A0aysdB2+Z1WaCKJ3yfflKSlHn0Wo7eICnmJ34jKbxA=)
                          2: S58x5zUqhwe5jG0nNI6LxJPRqa8.crl (hash: vsKJiIYBReT8pICu+XP3a9JgUCXL9s39SzUokFYxfEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 14:43:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3b:25:35:8c:30:ef:59:43:9d:fa:8d:f5:e1:55:ce:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b9f31e7352a8707b98c6d27348e8bc493d1a9af
        Validity
            Not Before: Oct 14 16:00:56 2026 GMT
            Not After : Oct 15 16:00:56 2026 GMT
        Subject: CN=fff18bc25a83953c5fb78e29e095c261d55c81b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:22:42:3f:69:73:29:2f:80:f0:86:e3:d4:
                    a9:47:08:b9:4e:b2:14:83:40:fc:0c:f1:5c:7f:4a:
                    c2:fa:af:50:f0:97:da:08:0b:55:1c:95:a2:b6:3c:
                    c4:7b:09:8a:6b:79:5e:ba:f6:61:37:8d:bf:f4:6d:
                    ac:04:58:61:70:f9:fc:9d:a6:c8:5a:8a:5d:9d:f0:
                    15:03:ea:d2:ff:f4:4a:eb:1b:db:cf:db:f6:cb:34:
                    24:38:c7:c2:c8:07:12:2a:5c:f3:72:67:7e:82:69:
                    27:db:64:b7:2f:d8:0b:33:b4:66:c8:ee:31:08:4d:
                    f5:41:28:4f:54:5f:82:54:d5:0e:00:5f:c5:3b:6d:
                    b8:6a:23:76:3d:9c:ae:8b:99:37:bd:e9:50:b6:a7:
                    da:3b:54:bd:9f:ce:01:b6:68:f3:85:cc:c6:40:d0:
                    3e:fd:a9:9c:8c:dd:14:6a:ab:b2:a1:3f:17:11:3d:
                    3c:1c:cb:6c:dc:63:18:42:de:f9:19:8a:a2:8d:30:
                    95:9f:ad:05:b3:63:fc:3e:80:61:78:c3:09:6f:77:
                    08:a5:2d:a1:25:e2:7d:55:42:92:15:b7:9e:bb:91:
                    af:72:f3:d7:11:b5:2a:16:fa:e1:8a:ae:55:7a:18:
                    3e:41:94:26:41:8b:e3:95:54:f7:7f:07:e6:a0:58:
                    05:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F1:8B:C2:5A:83:95:3C:5F:B7:8E:29:E0:95:C2:61:D5:5C:81:B4
            X509v3 Authority Key Identifier:
                keyid:4B:9F:31:E7:35:2A:87:07:B9:8C:6D:27:34:8E:8B:C4:93:D1:A9:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S58x5zUqhwe5jG0nNI6LxJPRqa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/85fd31-fe91-4389-ab67-3651e40f1436/1/S58x5zUqhwe5jG0nNI6LxJPRqa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f0:69:53:c9:d8:81:98:30:0e:17:1d:a4:93:55:73:76:11:
         a2:09:a5:8e:b7:d4:9d:16:32:94:22:3c:26:63:18:5d:7a:b6:
         e2:92:aa:db:fd:0c:7a:9e:7d:0f:34:0e:2a:df:6d:d1:90:cf:
         e4:25:80:8a:30:9e:2a:18:c7:49:26:54:a7:31:0a:a4:7d:b1:
         a7:99:22:6f:cf:69:84:a1:14:b7:8c:81:e9:5e:47:01:91:d5:
         5d:38:2d:37:e0:5d:5e:5b:44:ad:0c:40:8e:af:a2:db:5e:98:
         3f:21:3f:05:21:04:d6:c3:d7:ac:d8:41:5d:3e:a8:53:69:9e:
         1e:b2:f1:80:e8:52:f8:27:7c:9d:66:dd:cf:dd:67:73:9a:0c:
         d4:58:52:25:16:97:4e:ff:78:a3:03:75:db:86:a3:bc:42:d9:
         ec:f6:92:95:de:2a:98:b3:de:24:d8:05:01:3c:06:8f:64:58:
         cc:58:c1:04:cd:bb:a0:16:e2:41:f9:e1:ab:6a:32:13:4d:eb:
         17:5b:6c:81:d4:e9:10:0c:44:e9:1d:51:c9:9e:89:1f:11:0a:
         fc:7e:a8:b2:83:bd:2f:7e:90:7e:c6:5b:ff:dd:7c:3a:c1:68:
         7b:a2:60:f6:4c:ed:13:6c:5d:ea:c6:a4:d9:2f:86:e2:2c:08:
         6a:6e:00:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:40:42 2026 by rpki-client