Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
File:                     ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json)
Hash identifier:          NRVEfAgdZIbjnfzs57OtFo8V+feVkb9ONi1qP8EOMNY=
Subject key identifier:   45:8A:D6:8A:9A:5C:BB:85:3F:90:0A:32:20:DF:47:4C:56:16:48:35
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Certificate issuer:       /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial:       01A1DE026C9F67C3ED778CCC740ED8082DF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
Manifest number:          0985
Signing time:             Sun 15 Nov 2026 07:01:03 +0000
Manifest this update:     Sun 15 Nov 2026 07:01:03 +0000
Manifest next update:     Mon 16 Nov 2026 07:01:03 +0000
Files and hashes:         1: DXojyG6Fa76_70LTpGedxCQc75s.roa (hash: HWxVU0ho3JUfdYcZ/ilbHWOHlNIlCGDgzL/80lsIOt4=)
                          2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: V30qn1mrcgVfzv4RDDl6MnAq8/QZVSxeSPv5Bae9XvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:02:6c:9f:67:c3:ed:77:8c:cc:74:0e:d8:08:2d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
        Validity
            Not Before: Nov 15 07:01:03 2026 GMT
            Not After : Nov 16 07:01:03 2026 GMT
        Subject: CN=458ad68a9a5cbb853f900a3220df474c56164835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:f8:a6:13:2c:78:d2:96:e6:e0:3e:cf:33:
                    f2:27:c9:42:da:e8:76:0a:11:8f:d7:09:be:d3:77:
                    b1:32:cd:fb:0d:12:fe:d1:e9:61:b7:7f:ce:21:dd:
                    8c:fd:7a:8f:ad:6d:4a:d6:36:06:8f:2e:ff:8f:c0:
                    86:4b:69:62:90:3b:5c:35:8e:b9:29:9e:3e:4d:8c:
                    59:33:b4:51:d6:c9:01:dd:78:53:8f:46:cd:db:05:
                    75:54:9a:ab:59:00:73:c0:84:5f:cd:fe:33:0e:a3:
                    93:5c:8b:93:9a:e3:76:3f:4a:2b:c0:6f:18:52:71:
                    f8:8c:d5:cf:bf:2a:78:2b:30:1d:83:ca:61:e8:42:
                    6a:05:2e:2b:95:cd:66:57:a6:85:ff:9b:a9:3f:ad:
                    5f:29:e6:3a:75:df:9f:92:30:cd:52:f3:6d:50:b7:
                    b8:6c:aa:78:ec:e8:2e:dc:e7:b8:f9:af:d1:d9:b6:
                    c3:eb:4a:5f:5f:38:02:91:36:f6:4a:1d:15:77:55:
                    aa:c0:85:98:74:8d:f4:62:a7:46:e6:f9:ed:e9:bb:
                    b1:4e:f0:89:d8:2d:25:17:16:35:5b:db:41:c2:25:
                    92:15:de:64:de:66:9c:4e:2a:cb:16:38:d5:ff:0f:
                    f8:e5:82:76:02:47:81:c4:14:96:3c:19:a1:3b:df:
                    4f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8A:D6:8A:9A:5C:BB:85:3F:90:0A:32:20:DF:47:4C:56:16:48:35
            X509v3 Authority Key Identifier:
                keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:24:ee:4d:54:cc:44:15:b5:ee:b4:3c:30:b0:d9:a5:fe:a3:
         5c:c8:5f:31:bb:4a:43:fd:29:4c:d3:2e:fc:1e:cd:42:78:d2:
         c8:69:30:c2:b2:4c:f9:16:77:b1:8e:d8:48:4a:10:9d:55:e6:
         66:ba:dd:eb:97:83:59:4b:64:22:84:33:40:aa:7b:e4:fe:b7:
         11:70:16:0e:5e:dc:3b:40:12:07:e2:fe:e1:d3:29:a2:62:fa:
         88:a5:b6:15:48:45:a0:5b:c5:26:fc:98:a6:fe:c4:20:23:0b:
         3c:c5:d0:6e:95:66:14:93:86:9a:0f:6d:15:e3:4f:ef:31:85:
         16:6d:4a:15:ad:23:d9:3f:45:6a:8d:db:4b:c8:d6:c3:aa:ce:
         75:c8:fb:6a:50:8b:3f:a8:bc:db:c2:ee:ed:1a:6a:b9:9f:82:
         ba:53:ae:b4:f1:ad:a6:87:9b:d6:8e:65:d0:f4:71:96:9b:66:
         12:7f:17:8c:c7:3e:b9:15:93:b8:5c:b1:1b:97:8d:fe:43:8f:
         7a:8d:3a:50:d2:72:45:86:60:5b:44:03:7f:4d:45:5d:ee:91:
         7f:ac:03:75:58:55:46:24:5e:4b:fa:f5:5d:e4:fb:da:7a:d5:
         1b:9a:bb:12:20:d1:7a:11:3b:40:0d:ee:e0:a8:35:8b:0c:02:
         f0:1f:5a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:50:36 2026 by rpki-client