Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File:                     Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier:          GAtN/0oR7/GML+uV3NA6gdIU4jzLO0IVjARwvRv1MAc=
Subject key identifier:   7B:6F:64:79:48:A9:13:50:0E:7A:61:CF:AF:B3:F8:E4:C1:86:07:12
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer:       /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial:       01A0CD1155F3A603CCF37257ECD7685737C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number:          1A6D
Signing time:             Wed 23 Sep 2026 07:01:00 +0000
Manifest this update:     Wed 23 Sep 2026 07:01:00 +0000
Manifest next update:     Thu 24 Sep 2026 07:01:00 +0000
Files and hashes:         1: C7qqIpTwYf7YNOtV5OPXaeMTQAI.roa (hash: KjPNPOXZwVjnuKWDEKGdvD1QS5oO9ubnZY9SVeLWd9M=)
                          2: LQ8BLEzCZY3QowxDFOGsxJ9uOAU.roa (hash: k5Vr4nHqfxcqa1n3ZsAMJk6uHu5H4HSOAsJXgQNi+cQ=)
                          3: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: qPlcX8DUKapx3yuKY9tuKwVyOaFffVj4LpTIBfHQaxw=)
                          4: eu9ae3eLYSM_cPxuWpcvPn92OU8.roa (hash: HOeGxAKohjtOD7Ke0LKRStGG+xTv10n59udd9QSjFEw=)
                          5: v52ZTcdolNoppoOrn38Ym0qTh6M.roa (hash: qxbDlAOHfwm8HgM041yuk5h+Fnz9xMLxo2BwLuu0zHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 07:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:11:55:f3:a6:03:cc:f3:72:57:ec:d7:68:57:37:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
        Validity
            Not Before: Sep 23 07:01:00 2026 GMT
            Not After : Sep 24 07:01:00 2026 GMT
        Subject: CN=7b6f647948a913500e7a61cfafb3f8e4c1860712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:cc:fd:d2:03:90:67:db:57:e4:1c:76:d6:
                    bb:35:11:14:ab:fb:24:69:89:4a:92:6f:e0:7a:5a:
                    2f:ec:d5:52:18:60:35:d0:67:f8:8b:59:35:7f:a5:
                    6f:4a:e3:21:28:b8:1c:60:4d:d1:2c:fd:9a:3c:0f:
                    70:d7:59:04:a8:07:08:1c:72:5b:cc:d7:4a:27:98:
                    a0:af:93:3a:a8:5f:5c:86:aa:1c:74:ed:a7:b1:fb:
                    2b:9d:5e:de:6e:3b:d0:4e:45:0e:2d:1c:f0:16:4d:
                    89:20:e7:5b:3a:cc:91:3a:ac:69:4c:5a:3a:2e:63:
                    99:67:a0:8d:23:53:be:3a:2c:71:2c:1a:6f:45:ba:
                    b6:8a:27:75:60:5f:2c:62:0d:ce:4b:74:cf:09:27:
                    e1:02:a5:a5:25:ef:21:fa:5e:9a:6a:9d:fe:57:ef:
                    b5:67:df:85:de:4f:9e:4f:5f:e9:6e:e7:dc:e9:62:
                    29:57:39:f4:05:8c:39:b5:67:56:c8:53:f0:16:ba:
                    16:51:22:80:68:13:55:ad:2b:4d:f9:18:a7:d1:50:
                    62:7e:f8:0d:b6:81:a4:f0:15:88:a9:8d:70:51:f8:
                    29:7b:49:32:45:fd:f3:2d:d5:2f:78:71:d5:aa:e4:
                    57:b2:f1:89:7c:10:62:9a:06:b6:f2:a2:93:35:a8:
                    41:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6F:64:79:48:A9:13:50:0E:7A:61:CF:AF:B3:F8:E4:C1:86:07:12
            X509v3 Authority Key Identifier:
                keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:e3:85:d8:cf:11:46:2a:82:6f:62:a2:50:a5:c0:41:c4:dc:
         4d:1d:5c:ce:22:47:78:50:b1:3b:30:54:72:84:a4:0c:8b:52:
         f6:89:57:81:cf:b8:47:0e:92:47:2b:37:e0:cc:6e:6c:73:6b:
         4e:34:43:3b:bf:ff:e7:71:2a:d3:bb:44:7a:f9:c0:96:65:34:
         a0:b3:13:6d:bf:5c:fe:e5:97:c9:07:d6:b6:1a:8d:01:3c:90:
         5c:d5:54:be:da:ea:76:57:65:89:58:7a:fa:38:ab:3f:f1:f0:
         c9:09:fc:e9:7e:f9:14:cb:56:00:0e:10:26:8e:7d:41:e9:05:
         12:f0:06:77:81:c0:a4:cc:9a:38:b8:d4:89:05:79:d3:76:d2:
         c5:15:f0:64:7f:40:8b:18:fd:ed:39:f2:c2:25:0d:a8:21:2a:
         6d:42:2b:7b:79:a0:6d:e0:ac:ef:bf:5f:93:7a:73:a6:92:44:
         22:a3:4b:3b:5d:8d:5a:b0:ad:71:9b:03:2d:1b:eb:30:91:f5:
         df:60:50:26:a9:c1:6f:af:48:7d:bf:25:02:d4:78:62:6b:93:
         21:a5:ed:4b:63:f8:72:f3:19:c3:66:5d:90:29:a9:20:e0:4e:
         06:1a:1c:54:ad:66:4e:23:18:9b:97:5c:3c:38:e0:ae:5d:8a:
         92:5d:74:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:35:00 2026 by rpki-client