Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
File:                     xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft (raw, json)
Hash identifier:          Uc9iYMEY07RVCYvtumhK1lKvgjBVY1bOe+Eax+mPAnw=
Subject key identifier:   F4:BB:2C:FF:DE:6A:FE:86:B7:56:28:2B:F8:77:F7:44:F3:F7:C6:C3
Authority key identifier: C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42
Certificate issuer:       /CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
Certificate serial:       01A10CCB91FDAAD513DE301EDD6FEAF47941
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
Manifest number:          01D1
Signing time:             Mon 05 Oct 2026 16:00:30 +0000
Manifest this update:     Mon 05 Oct 2026 16:00:30 +0000
Manifest next update:     Tue 06 Oct 2026 16:00:30 +0000
Files and hashes:         1: YPZjGGUztC1i2ZNYvGgdAsuXTgo.asa (hash: K4CEQz/XSFN1g13QszcoyDmffxNfF6QeHPnFTt4rvN8=)
                          2: xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl (hash: V1R5Il8KocHACG6O3hnIQkbxVniwPsVVCI7dDr53TkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0c:cb:91:fd:aa:d5:13:de:30:1e:dd:6f:ea:f4:79:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
        Validity
            Not Before: Oct  5 16:00:30 2026 GMT
            Not After : Oct  6 16:00:30 2026 GMT
        Subject: CN=f4bb2cffde6afe86b756282bf877f744f3f7c6c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:2a:2a:70:c1:45:10:90:ea:89:24:79:dd:
                    f7:e1:8c:9f:fc:e0:38:b6:c9:4e:42:d8:29:6b:28:
                    3e:ff:14:fb:f1:b0:e2:43:0f:68:a1:a6:f6:0d:e1:
                    5c:c3:21:cc:a1:54:ca:04:6e:84:76:6c:30:0b:90:
                    a3:3e:01:35:55:86:93:8c:c0:7e:db:30:75:7a:e6:
                    36:18:46:16:51:ac:95:65:3b:23:24:5b:65:32:51:
                    90:fa:e5:ab:d2:60:2c:a0:40:47:da:da:ab:7f:d1:
                    ef:1c:fc:9d:11:c9:d9:2d:eb:0c:ab:66:68:85:a6:
                    6e:76:fd:5b:74:8d:96:c9:ee:5a:46:f8:ea:52:d1:
                    e0:b6:7b:4a:54:ff:39:c6:c3:6e:3d:b8:36:1c:25:
                    38:46:b1:d2:4c:02:cb:19:ce:87:13:2a:79:c6:94:
                    0b:b5:7a:cc:6e:73:fb:86:80:c3:08:64:d9:22:f2:
                    ce:75:b6:0f:c2:c4:5d:58:2d:e8:d0:cc:b6:e1:bf:
                    97:7b:ca:45:ab:12:39:dc:b3:b3:f8:ff:ac:05:34:
                    a0:33:27:60:8d:bd:56:c9:63:b2:52:ba:c6:73:e1:
                    35:80:6e:9f:dd:ee:3f:97:7f:4e:f7:b2:b0:35:21:
                    cb:18:13:b4:3d:c9:23:9c:5f:38:60:59:d2:e7:58:
                    33:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BB:2C:FF:DE:6A:FE:86:B7:56:28:2B:F8:77:F7:44:F3:F7:C6:C3
            X509v3 Authority Key Identifier:
                keyid:C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:98:37:3d:0b:36:b5:27:a3:80:40:3a:ed:16:64:37:b1:ea:
         52:42:e5:1f:54:97:95:f3:31:b3:b1:7a:ae:cb:03:17:a4:f5:
         7e:17:8a:e6:05:8b:e9:15:d0:ba:38:df:04:01:69:b1:0f:b7:
         ba:9c:8d:a2:17:96:c4:ce:5a:07:6e:7e:b0:83:2c:00:a6:7b:
         c6:10:3b:ad:11:e8:5a:ef:c7:11:ba:2e:68:a5:50:25:17:f8:
         fb:9e:a0:0c:b5:13:10:2e:98:e1:7a:bf:b3:9c:a9:b3:33:a4:
         be:5b:50:ab:d7:67:3b:e2:0f:70:19:b7:98:fe:14:77:c6:69:
         bb:ca:27:c8:8f:97:44:08:33:3a:7e:25:7a:0c:02:21:41:ce:
         17:f0:60:4f:06:cf:f1:dc:80:2e:17:02:c7:0c:29:65:47:50:
         28:d0:81:26:f2:8a:c4:4c:50:59:8a:23:57:43:df:aa:ef:5b:
         b9:b9:dd:0f:08:e9:2e:f5:5f:0f:53:ee:70:43:0f:4f:8f:dc:
         b9:73:55:09:43:08:eb:24:4f:f2:21:f4:3f:28:9e:63:92:04:
         b1:1d:5e:e3:a5:12:45:24:75:d7:7b:3c:7a:c4:5b:6c:a1:87:
         cc:07:39:7d:7f:34:02:d8:32:4d:9e:97:54:8f:8b:31:e8:2f:
         ae:a0:21:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 01:33:09 2026 by rpki-client