Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
File:                     m6lLwUk3uws2MjdDVaRGckEEqYE.mft (raw, json)
Hash identifier:          j/L98jf0qCJB447396Y/vxPxRv3PMgsU9vst6HtsFOY=
Subject key identifier:   25:85:E8:81:EB:0D:72:FE:BE:74:62:44:75:EE:21:C6:10:B1:B5:8E
Authority key identifier: 9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81
Certificate issuer:       /CN=9ba94bc14937bb0b3632374355a446724104a981
Certificate serial:       01A1DC14D226FE79AD391E558A2A28E4B243
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
Manifest number:          1AE2
Signing time:             Sat 14 Nov 2026 22:01:54 +0000
Manifest this update:     Sat 14 Nov 2026 22:01:54 +0000
Manifest next update:     Sun 15 Nov 2026 22:01:54 +0000
Files and hashes:         1: Am-KOohcL2MqtHNdtJvWFx7LN0g.roa (hash: LCrtT5oylKVJNkSk1MoZh1tTPAUpbotUkU/vpFTgXwg=)
                          2: TaUt_QbnT12Cj0MJDAhR-kF-PEw.roa (hash: zEveZ5gOVczcVTnDPyLcGk6kCF01sibDnDEggCPZLVo=)
                          3: bwrK1tRV4AWpwHJl-68qI5x7fgA.roa (hash: QlUI1QZ7/IbZJuu9R1SnsQfMUaEeLYrpJvRYfGmpwoE=)
                          4: kHcfHQ_Q7qYFE1i5oI94BxcWKSs.roa (hash: IqrgWq3K1h3GQVzAuQLHwLlEf6MEibclzogL4CwmRgw=)
                          5: m6lLwUk3uws2MjdDVaRGckEEqYE.crl (hash: 1uLuRR5mZRS681jfAh4xjLbqUZQYnvQ/b40RrRSbnh8=)
                          6: m84CLuxw2FJsW0scm8tH7sBc9EA.roa (hash: a/eeahQ9DT0uKrtOLoBbEBv5z8d0GRvVUXTkKq6/j6c=)
                          7: zaMHea7sFzJLhecvORSvMX9hIVc.roa (hash: bJl+nhnvuUdcLs/tcqbGutj6qSb94yLtvZWixaa+/uI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:14:d2:26:fe:79:ad:39:1e:55:8a:2a:28:e4:b2:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ba94bc14937bb0b3632374355a446724104a981
        Validity
            Not Before: Nov 14 22:01:54 2026 GMT
            Not After : Nov 15 22:01:54 2026 GMT
        Subject: CN=2585e881eb0d72febe74624475ee21c610b1b58e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fe:d2:d5:e5:fc:65:f7:38:8a:12:84:37:d4:
                    7d:90:d2:e9:98:be:bf:aa:05:e7:57:4d:dd:ec:a0:
                    9c:a0:36:6b:fb:71:28:a8:3b:41:74:6f:6b:34:2b:
                    99:90:61:c6:2e:40:1e:a5:e6:32:2a:32:fd:a3:e6:
                    a0:6d:e5:ed:b2:ea:3d:a8:5a:ad:8b:d6:d7:27:9e:
                    77:70:77:cf:14:b9:58:43:50:95:82:8a:72:7f:3b:
                    c7:40:a8:8e:52:d2:0b:58:d9:30:de:a3:27:1d:ca:
                    5f:d5:4d:2a:45:e7:04:72:59:e6:99:bd:83:ea:3e:
                    90:b9:27:fa:ab:70:2d:df:8f:62:2b:4b:d9:83:ae:
                    2b:dd:d1:9f:04:91:66:3d:e0:45:bb:12:f6:f9:09:
                    33:bf:66:ed:7c:fb:3f:f5:89:d9:e8:e5:c2:fc:67:
                    f1:cc:44:0b:f3:c0:00:96:1f:71:55:94:95:49:e3:
                    e1:23:78:fb:9d:cf:51:13:6e:f1:42:58:26:be:50:
                    4b:d5:e2:30:f5:97:8d:15:cf:93:c1:f6:00:a1:dd:
                    29:69:48:33:6b:81:ab:22:31:8d:3a:2d:9e:bb:b8:
                    66:be:9a:e5:cf:76:f1:f0:fb:6a:0f:dd:02:31:f0:
                    9b:50:98:fe:85:6a:ab:cb:54:81:31:de:c8:b0:f3:
                    8d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:85:E8:81:EB:0D:72:FE:BE:74:62:44:75:EE:21:C6:10:B1:B5:8E
            X509v3 Authority Key Identifier:
                keyid:9B:A9:4B:C1:49:37:BB:0B:36:32:37:43:55:A4:46:72:41:04:A9:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m6lLwUk3uws2MjdDVaRGckEEqYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cc7843-d136-4ffb-8b99-836c312ac8c2/1/m6lLwUk3uws2MjdDVaRGckEEqYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:3a:d7:49:b0:f7:c4:20:ae:af:0e:b9:5f:1f:3a:95:88:fb:
         d5:a8:0b:f9:e2:15:62:5d:1b:5c:ba:ff:32:02:ef:7f:3f:ad:
         a8:29:4c:c8:06:33:ee:a0:28:bc:9a:f4:98:e4:e5:6e:b6:2e:
         8e:9e:6e:a9:53:b0:ca:c9:7a:55:f7:a6:eb:90:ce:38:5f:2e:
         11:08:44:80:07:a5:86:89:08:5c:4f:68:47:25:89:4a:28:83:
         96:4a:af:16:a5:68:e6:91:df:99:ad:d8:ce:d9:a0:81:ad:80:
         ad:8f:fc:ed:91:24:ba:98:96:2d:e8:76:31:16:4a:a4:e6:8b:
         ac:bd:17:d1:05:8a:24:c3:57:f2:ca:eb:16:c7:76:65:4e:e0:
         da:d8:3a:41:9d:8e:14:59:65:79:47:a6:30:52:53:13:eb:89:
         ef:64:0b:90:39:3f:1a:a5:2e:73:1a:c7:33:57:20:0d:fa:9c:
         64:ca:bf:76:44:3a:7e:0c:01:48:06:63:40:b6:ac:2c:23:a6:
         9b:11:07:ca:42:5c:e3:49:d0:b5:12:64:15:5f:1c:ba:94:a6:
         40:9e:c6:6c:c0:40:96:29:23:8a:e4:80:3e:f8:0f:b6:98:0c:
         ef:cf:e3:2d:fb:1c:2c:ac:46:04:cc:51:a6:b0:bf:df:8f:a2:
         18:dd:b3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 08:02:41 2026 by rpki-client