Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
File:                     E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft (raw, json)
Hash identifier:          gBuVrDkk3V31FLf4EwClnuAkxCJURRzqLsPQWef7Vew=
Subject key identifier:   A8:40:6D:65:3D:86:B5:2B:C1:E1:F7:F6:C2:C0:98:47:9B:A1:38:6E
Authority key identifier: 13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3
Certificate issuer:       /CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
Certificate serial:       01A17F61D67375B9850F3AD48C4D2A08B9EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
Manifest number:          1ACD
Signing time:             Tue 27 Oct 2026 22:01:20 +0000
Manifest this update:     Tue 27 Oct 2026 22:01:20 +0000
Manifest next update:     Wed 28 Oct 2026 22:01:20 +0000
Files and hashes:         1: 01aDFcgwpP0gaeNsCEBXvu9EqVo.roa (hash: X2qj0FduSAsiEFG0pH2Wl6RB6wezxtiHDycSdWfuHyg=)
                          2: 39rPTu5yX2a1zfysxgm6Jq1HK_o.roa (hash: 6BnKkYXbYywwMGgDtqlqpR6k8qdTXNyGen3SDvJqbAk=)
                          3: E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl (hash: EKvY9r6AHAkYbISn287A4mKsgA8XUYWiVxYto/p/vfU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:61:d6:73:75:b9:85:0f:3a:d4:8c:4d:2a:08:b9:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13d59fd683e3570d63895530ceb9f2c84fefe0a3
        Validity
            Not Before: Oct 27 22:01:20 2026 GMT
            Not After : Oct 28 22:01:20 2026 GMT
        Subject: CN=a8406d653d86b52bc1e1f7f6c2c098479ba1386e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e3:9d:20:a3:4a:c8:71:6d:83:c0:11:4b:8b:
                    4a:22:f5:ee:80:65:50:76:66:a9:2e:3d:04:75:87:
                    38:69:bc:a3:5b:22:86:9b:51:04:d8:d7:1f:2d:56:
                    14:72:71:ef:60:1e:37:4f:83:a2:26:af:45:01:f4:
                    8b:c0:2c:0c:c9:e9:c1:79:08:20:01:85:a2:ef:91:
                    b6:70:be:c0:cd:0a:16:d5:d5:43:ab:a1:65:86:2a:
                    f7:6a:e9:39:9c:b8:c7:29:46:12:f2:90:7c:75:75:
                    1c:10:40:fc:eb:6b:bd:90:d1:71:70:58:87:a2:e3:
                    ba:4e:d2:41:44:78:b0:e1:7b:d5:66:5c:17:5b:07:
                    57:04:ae:7f:58:fb:7a:c7:67:2c:d1:78:bd:39:16:
                    1a:a0:d1:ce:b7:6d:fc:e7:2d:56:a5:d6:c0:54:ad:
                    cb:45:60:9e:77:c2:34:e6:88:52:62:17:1e:47:32:
                    21:ef:80:19:59:d8:15:c0:74:62:2f:95:a2:2e:bb:
                    fe:dc:aa:90:24:6e:b5:34:01:b9:25:88:6e:55:09:
                    26:42:d4:a3:35:91:84:52:36:fa:66:9a:12:9e:57:
                    b4:01:87:56:18:d9:ca:61:ce:a9:00:4c:a2:0a:55:
                    8e:23:ca:f6:1b:4d:2c:c2:5f:40:b4:f3:b9:29:f5:
                    67:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:40:6D:65:3D:86:B5:2B:C1:E1:F7:F6:C2:C0:98:47:9B:A1:38:6E
            X509v3 Authority Key Identifier:
                keyid:13:D5:9F:D6:83:E3:57:0D:63:89:55:30:CE:B9:F2:C8:4F:EF:E0:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/410eaf-f82d-47ff-9926-0b1b30895602/1/E9Wf1oPjVw1jiVUwzrnyyE_v4KM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:70:f0:99:9c:73:2d:c4:7a:10:2c:ca:82:af:fa:fa:4f:7a:
         83:0c:3f:97:c0:e3:dc:19:5c:9a:a4:5e:ed:c8:e7:80:8d:66:
         8b:9d:cf:ae:49:84:6d:ab:df:11:3d:61:55:78:9e:29:af:cb:
         13:3d:b5:13:33:c1:e9:fd:32:77:0a:31:9c:39:3b:e4:00:9e:
         ef:6f:9c:78:17:9f:44:19:f7:76:08:c3:57:c8:09:9b:00:7e:
         2a:5a:fa:d0:64:e9:f4:69:ba:48:76:78:8c:63:fe:62:f0:7f:
         34:bc:1c:ba:54:8b:d1:25:77:e2:91:08:d8:89:df:80:ce:81:
         72:5f:85:2d:71:63:59:ba:22:17:be:21:a6:2f:d6:dd:67:fc:
         3d:53:2f:3b:97:67:10:8b:c3:9d:aa:30:3f:2c:a3:7c:e5:4e:
         61:bb:cd:b3:55:ec:8c:65:8b:e9:21:44:fa:03:25:54:7f:53:
         e5:1c:e2:26:02:d6:32:4c:ef:5e:b9:e1:05:e4:75:39:0c:40:
         b8:03:53:37:b3:f7:bf:4e:fd:8e:da:1b:41:2c:83:05:03:fb:
         72:98:c0:4c:6e:0a:6e:85:52:99:9c:dc:63:a3:e1:b2:44:74:
         7b:1c:a7:d5:f4:a9:38:19:0c:32:e5:f4:08:40:03:77:ee:16:
         50:e1:d7:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/YdZzdbmFDzrUjE0qCLnrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZDU5ZmQ2ODNlMzU3MGQ2Mzg5NTUzMGNlYjlmMmM4NGZl
ZmUwYTMwHhcNMjYxMDI3MjIwMTIwWhcNMjYxMDI4MjIwMTIwWjAzMTEwLwYDVQQD
EyhhODQwNmQ2NTNkODZiNTJiYzFlMWY3ZjZjMmMwOTg0NzliYTEzODZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuOdIKNKyHFtg8ARS4tKIvXugGVQ
dmapLj0EdYc4abyjWyKGm1EE2NcfLVYUcnHvYB43T4OiJq9FAfSLwCwMyenBeQgg
AYWi75G2cL7AzQoW1dVDq6Flhir3auk5nLjHKUYS8pB8dXUcEED862u9kNFxcFiH
ouO6TtJBRHiw4XvVZlwXWwdXBK5/WPt6x2cs0Xi9ORYaoNHOt2385y1WpdbAVK3L
RWCed8I05ohSYhceRzIh74AZWdgVwHRiL5WiLrv+3KqQJG61NAG5JYhuVQkmQtSj
NZGEUjb6ZpoSnle0AYdWGNnKYc6pAEyiClWOI8r2G00swl9AtPO5KfVnLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKhAbWU9hrUrweH39sLAmEeboThuMB8GA1UdIwQY
MBaAFBPVn9aD41cNY4lVMM658shP7+CjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlXZjFvUGpWdzFqaVZVd3pybnl5RV92NEtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi80MTBlYWYtZjgyZC00N2ZmLTk5MjYt
MGIxYjMwODk1NjAyLzEvRTlXZjFvUGpWdzFqaVZVd3pybnl5RV92NEtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi80MTBlYWYtZjgyZC00N2ZmLTk5MjYtMGIxYjMwODk1NjAy
LzEvRTlXZjFvUGpWdzFqaVZVd3pybnl5RV92NEtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHDwmZxz
LcR6ECzKgq/6+k96gww/l8Dj3BlcmqRe7cjngI1mi53PrkmEbavfET1hVXieKa/L
Ez21EzPB6f0ydwoxnDk75ACe72+ceBefRBn3dgjDV8gJmwB+Klr60GTp9Gm6SHZ4
jGP+YvB/NLwculSL0SV34pEI2InfgM6Bcl+FLXFjWboiF74hpi/W3Wf8PVMvO5dn
EIvDnaowPyyjfOVOYbvNs1XsjGWL6SFE+gMlVH9T5RziJgLWMkzvXrnhBeR1OQxA
uANTN7P3v079jtobQSyDBQP7cpjATG4KboVSmZzcY6PhskR0exyn1fSpOBkMMuX0
CEADd+4WUOHXwA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 03:55:47 2026 by rpki-client