Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
File:                     aYLwUTKpmJUH6_bumJUYdTuizbU.mft (raw, json)
Hash identifier:          cM8NrGalWL6G43Zzs8KyIC+QxC6JMNmx5cYY3cOkkEw=
Subject key identifier:   3D:CF:BB:90:C2:03:0A:C4:27:DF:96:1C:C7:79:10:97:CA:99:DD:A4
Authority key identifier: 69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5
Certificate issuer:       /CN=6982f05132a9989507ebf6ee989518753ba2cdb5
Certificate serial:       01A11C75D5D499491F7ADFF76881D0D2F7F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
Manifest number:          0F45
Signing time:             Thu 08 Oct 2026 17:00:46 +0000
Manifest this update:     Thu 08 Oct 2026 17:00:46 +0000
Manifest next update:     Fri 09 Oct 2026 17:00:46 +0000
Files and hashes:         1: SDv1pmvtKKy8j5zdxmiuQfAHvKA.roa (hash: la1FbIJeldqJDtutGbiRvWT587OJLuf+NXuNKZUoghY=)
                          2: aYLwUTKpmJUH6_bumJUYdTuizbU.crl (hash: GCRFvw/3oZc/cCiAlKx9CHylJaLpW8/XbilXaBfR4Dk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 17:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1c:75:d5:d4:99:49:1f:7a:df:f7:68:81:d0:d2:f7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6982f05132a9989507ebf6ee989518753ba2cdb5
        Validity
            Not Before: Oct  8 17:00:46 2026 GMT
            Not After : Oct  9 17:00:46 2026 GMT
        Subject: CN=3dcfbb90c2030ac427df961cc7791097ca99dda4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:14:06:92:5b:62:82:38:41:40:72:cf:c2:
                    44:ea:a6:9c:34:a5:0a:a3:9d:07:4f:30:e4:f7:a2:
                    e4:0a:d4:56:f7:95:08:10:9e:d0:a2:3d:f2:a5:44:
                    57:de:86:5f:f9:f8:df:2e:91:b9:c7:94:60:99:8c:
                    7c:e5:fe:b2:64:44:f4:d6:0c:56:3c:09:fa:30:a0:
                    f5:16:30:9e:33:bd:1f:14:cf:60:00:f0:c3:49:81:
                    5b:3c:49:89:c6:08:9d:6f:89:4b:fb:9f:4a:a8:20:
                    1a:26:fd:2a:47:25:fd:df:03:10:bc:82:c0:a2:58:
                    92:9d:9f:09:12:1a:29:f3:af:c3:a5:4d:57:3f:70:
                    8a:eb:e2:35:7a:8a:58:77:d2:2e:aa:d2:c8:b0:95:
                    21:2f:70:bf:51:95:2d:ef:7a:c8:9c:87:f4:d5:fe:
                    69:20:e3:7f:4b:0f:09:c3:d1:3d:32:5e:f7:56:61:
                    79:58:97:cd:90:11:25:fb:c5:e1:76:eb:d2:08:51:
                    ee:61:9f:4a:a2:89:35:86:58:6e:0c:9f:4a:ec:ff:
                    6c:9b:28:cd:28:4a:9d:43:c4:06:8b:f4:cd:e9:73:
                    fb:c6:02:39:0d:75:06:39:5e:60:10:f4:64:93:5f:
                    fb:23:8d:37:29:51:9f:03:bc:86:a0:20:a6:e4:8a:
                    3f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CF:BB:90:C2:03:0A:C4:27:DF:96:1C:C7:79:10:97:CA:99:DD:A4
            X509v3 Authority Key Identifier:
                keyid:69:82:F0:51:32:A9:98:95:07:EB:F6:EE:98:95:18:75:3B:A2:CD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYLwUTKpmJUH6_bumJUYdTuizbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/690409-019d-4812-930c-f926fabf7afa/1/aYLwUTKpmJUH6_bumJUYdTuizbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:9f:e2:62:0d:e0:17:36:35:b2:78:8a:2f:4d:0c:f2:8f:46:
         2d:cf:07:b8:bb:3c:ea:75:26:e6:ab:74:e1:31:cc:08:95:1b:
         e5:98:94:98:56:35:3d:6c:80:03:ec:c8:7f:45:d2:c7:a8:00:
         da:5a:10:48:91:57:ca:88:66:67:31:22:3b:d8:6f:c2:4b:6c:
         34:e4:2a:41:79:1c:05:bd:d1:e4:bf:d4:ed:43:55:13:f9:4c:
         aa:50:f5:37:60:bf:1d:3a:a5:65:2b:bb:90:50:04:69:0d:e4:
         69:d6:4a:31:69:d5:e7:ca:dd:78:73:9d:7b:e6:68:fe:d2:cd:
         f2:cb:f8:4f:42:95:80:17:92:7a:99:3f:2f:2e:b1:cb:2a:52:
         c6:91:3d:27:2d:26:17:07:46:02:99:c9:f1:19:90:df:3b:b0:
         c6:6a:9e:bb:09:02:2b:af:99:4f:8b:8e:5d:39:d2:7e:42:53:
         72:f4:9c:82:67:3c:a7:57:0e:2d:d6:db:85:d5:97:da:4e:25:
         c8:db:d5:cc:59:a3:01:01:b6:69:cb:3b:0c:16:6d:37:9b:a4:
         ca:c9:4d:fe:63:21:59:ee:a6:e0:d8:6f:ae:ba:80:39:37:d0:
         f1:16:a8:03:a1:60:de:72:22:57:d7:58:62:31:ea:5d:43:09:
         88:01:8b:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEcddXUmUkfet/3aIHQ0vf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ODJmMDUxMzJhOTk4OTUwN2ViZjZlZTk4OTUxODc1M2Jh
MmNkYjUwHhcNMjYxMDA4MTcwMDQ2WhcNMjYxMDA5MTcwMDQ2WjAzMTEwLwYDVQQD
EygzZGNmYmI5MGMyMDMwYWM0MjdkZjk2MWNjNzc5MTA5N2NhOTlkZGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwoUBpJbYoI4QUByz8JE6qacNKUK
o50HTzDk96LkCtRW95UIEJ7Qoj3ypURX3oZf+fjfLpG5x5RgmYx85f6yZET01gxW
PAn6MKD1FjCeM70fFM9gAPDDSYFbPEmJxgidb4lL+59KqCAaJv0qRyX93wMQvILA
oliSnZ8JEhop86/DpU1XP3CK6+I1eopYd9IuqtLIsJUhL3C/UZUt73rInIf01f5p
ION/Sw8Jw9E9Ml73VmF5WJfNkBEl+8XhduvSCFHuYZ9Kook1hlhuDJ9K7P9smyjN
KEqdQ8QGi/TN6XP7xgI5DXUGOV5gEPRkk1/7I403KVGfA7yGoCCm5Io/XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3Pu5DCAwrEJ9+WHMd5EJfKmd2kMB8GA1UdIwQY
MBaAFGmC8FEyqZiVB+v27piVGHU7os21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVlMd1VUS3BtSlVINl9idW1KVVlkVHVpemJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82OTA0MDktMDE5ZC00ODEyLTkzMGMt
ZjkyNmZhYmY3YWZhLzEvYVlMd1VUS3BtSlVINl9idW1KVVlkVHVpemJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi82OTA0MDktMDE5ZC00ODEyLTkzMGMtZjkyNmZhYmY3YWZh
LzEvYVlMd1VUS3BtSlVINl9idW1KVVlkVHVpemJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApJ/iYg3g
FzY1sniKL00M8o9GLc8HuLs86nUm5qt04THMCJUb5ZiUmFY1PWyAA+zIf0XSx6gA
2loQSJFXyohmZzEiO9hvwktsNOQqQXkcBb3R5L/U7UNVE/lMqlD1N2C/HTqlZSu7
kFAEaQ3kadZKMWnV58rdeHOde+Zo/tLN8sv4T0KVgBeSepk/Ly6xyypSxpE9Jy0m
FwdGApnJ8RmQ3zuwxmqeuwkCK6+ZT4uOXTnSfkJTcvScgmc8p1cOLdbbhdWX2k4l
yNvVzFmjAQG2acs7DBZtN5ukyslN/mMhWe6m4NhvrrqAOTfQ8RaoA6Fg3nIiV9dY
YjHqXUMJiAGLfw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 04:01:07 2026 by rpki-client