Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File:                     S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier:          g81jHrZ7R2el+srUN3Lk1jHEnE8LqooAINnnoYYggSE=
Subject key identifier:   80:4B:39:9D:3F:08:87:48:C8:FC:30:3C:95:F4:F3:32:59:11:91:92
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer:       /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial:       01A113731A14879BBEDC4A249F97D087C539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number:          1ABD
Signing time:             Tue 06 Oct 2026 23:01:12 +0000
Manifest this update:     Tue 06 Oct 2026 23:01:12 +0000
Manifest next update:     Wed 07 Oct 2026 23:01:12 +0000
Files and hashes:         1: KWcbx273ZHAayKfn1OKexVZlWvQ.roa (hash: PaeeJ1l/Ji5ydWz0jBTUhtGKXbVfabdrj21ewU0oRmo=)
                          2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: d0SpYK3/ycLDKwAlDyGTtOb+JIlm4IAjy3gjtROSodo=)
                          3: cN9-QkcDeRmmddqpx80fjE4LD7s.roa (hash: O0DZXiBII2s8che4/ZMrj0hj9juscGV08AllWCCgxdM=)
                          4: p8O4ZN9Xeldr_QvYtZL9RkkK6rk.roa (hash: KcqVP0b3/1a1YhXbBJeqeSikqnykQvFC4LFHO5+2KLo=)
                          5: yCZntdcD-FiyyzALoPRod_Tynro.roa (hash: A7enThxiUzB12fnWIKjiXX2k7pCD4DTrx01Es4L2jQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:13:73:1a:14:87:9b:be:dc:4a:24:9f:97:d0:87:c5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
        Validity
            Not Before: Oct  6 23:01:12 2026 GMT
            Not After : Oct  7 23:01:12 2026 GMT
        Subject: CN=804b399d3f088748c8fc303c95f4f33259119192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:3e:81:8f:25:87:ca:2a:16:31:aa:8b:2e:11:
                    0f:0b:3d:08:b3:da:47:83:82:37:7a:bc:d2:2d:9b:
                    b6:5b:f7:e6:7a:41:76:aa:bf:85:10:49:27:51:3b:
                    f0:a0:92:6f:35:6d:f3:8b:91:d4:e5:9e:ed:9d:dd:
                    cd:b3:80:cd:bd:6a:e4:16:e8:31:1c:af:65:5b:4c:
                    5b:55:91:9d:ef:c1:b2:f0:61:76:05:4d:30:26:22:
                    22:21:69:dc:9c:04:89:1d:ac:30:b1:7c:54:7a:cb:
                    62:33:20:42:92:2a:f2:7e:11:37:51:ac:87:0b:c1:
                    a6:cf:81:57:86:9c:77:97:f7:8c:81:ad:ad:cb:92:
                    9d:18:1c:2b:ab:56:52:bc:e6:64:fd:10:c6:e4:d0:
                    bf:5d:e6:97:27:6d:86:63:47:96:47:a9:72:f2:ba:
                    5b:fd:a1:78:cd:d9:e9:0e:5b:98:4b:37:30:d1:92:
                    bc:d1:c8:2e:fe:60:41:d1:1d:a4:99:a1:d6:5d:a6:
                    64:71:f0:0b:82:4d:4c:2d:b2:fc:23:3c:b2:5e:94:
                    7c:76:21:ac:10:20:c3:1e:80:5a:fe:5f:b8:64:a5:
                    07:b0:83:b3:54:d8:98:94:51:6a:6e:34:ad:6a:1a:
                    71:ee:7d:a8:06:a3:a3:35:79:cc:ce:61:28:ab:3e:
                    d6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4B:39:9D:3F:08:87:48:C8:FC:30:3C:95:F4:F3:32:59:11:91:92
            X509v3 Authority Key Identifier:
                keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:4d:fa:f4:f8:38:a2:1a:19:a0:f5:aa:f2:47:53:25:04:b0:
         e3:09:b0:1c:5c:9b:4f:28:8a:2a:d7:1d:a6:d2:4d:f2:a7:35:
         51:eb:cf:df:3c:53:94:1c:c7:6f:ba:7a:3c:3d:ba:11:95:62:
         0d:4f:a0:1d:3b:3c:1b:20:78:79:16:0e:3e:61:73:e2:fa:0e:
         4c:9d:ce:da:52:6e:ad:2c:a7:f0:1d:06:8b:c8:68:88:f2:80:
         eb:86:85:2b:8d:50:3b:8e:c5:9d:3d:1d:60:5b:6d:d5:d8:9f:
         a8:f6:42:16:c6:19:af:7a:c4:3e:18:35:fe:56:f0:43:7d:7b:
         7f:08:e4:48:59:7f:b6:b7:35:46:87:78:16:ad:f5:75:f2:11:
         b4:f7:ee:3f:d1:c0:97:57:f0:25:ea:37:bc:0e:e3:4f:32:ac:
         f8:44:fb:ed:3c:8e:ab:56:ce:2e:84:f7:00:06:e2:fe:5c:b1:
         55:26:59:b0:82:87:4d:22:a6:32:d8:09:e9:dc:2d:c9:d8:79:
         3e:54:cc:3d:d8:fe:81:93:6f:d3:a3:ae:d5:8e:67:43:55:4a:
         a0:15:a3:29:d1:7a:a3:64:a1:ad:ea:f6:fa:70:66:32:f2:a7:
         d5:c3:03:63:ba:a0:60:66:cc:a9:ff:20:f0:b3:0a:ec:1a:cd:
         2e:da:24:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 00:42:41 2026 by rpki-client