Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
File:                     4awDIrPqtlcuzioKxavxZKW7_yA.mft (raw, json)
Hash identifier:          qFjKapN71R4ov7vDy+OdHcMuemsbHTgiD8WZzGBFRKk=
Subject key identifier:   C9:8F:66:EA:A7:56:E2:43:E7:85:24:EF:46:AA:53:E0:83:CB:69:67
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Certificate issuer:       /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial:       01A10090E1E5F0B8289AE2842BB328F9E0AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
Manifest number:          1A90
Signing time:             Sat 03 Oct 2026 07:00:57 +0000
Manifest this update:     Sat 03 Oct 2026 07:00:57 +0000
Manifest next update:     Sun 04 Oct 2026 07:00:57 +0000
Files and hashes:         1: 4awDIrPqtlcuzioKxavxZKW7_yA.crl (hash: nFdYgy3IGu/+OzJbEMM6bj8h/pwLhS/twCJokxnoKws=)
                          2: Wi5MJkqvObCqrjZBlo0JDmeXkfI.roa (hash: 99QCRcjIbmAy7NXYDozY/LitcvyDVNBk3XTYfLTEqtM=)
                          3: X4Jj1-4HqPQyHoz2uvlpMoAV66I.roa (hash: U8BCAKAOabJXvpxRbVFDeRvoLuUy39ScZ8CQFXOkfKo=)
                          4: bRn03FRlSzZThZNkviNVTHKQJGs.roa (hash: xEDx54ik3RAUzg+a27rbqvQuS4hz986uk0RMqkm7R+M=)
                          5: el7Foe7CpoESR0E_lBDRq_2Ohz8.roa (hash: /kLAJJz2VIOJRlWwXrYI0vRC2jlyRUsDvBRbglDgwCs=)
                          6: mccsr8m8ho2_mF3Ywy_9oaBImlk.roa (hash: 8fr0OzT5KHo+mYjffMlKzkDxAz4/c/4/JdZVWTqaEVk=)
                          7: pY-w966p6TcVCR_ceh3iqo8tBvM.roa (hash: 9v8cY+ONlAQ5plK0CUQaAsntXexrpXKvoAQArC1anGo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:00:90:e1:e5:f0:b8:28:9a:e2:84:2b:b3:28:f9:e0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
        Validity
            Not Before: Oct  3 07:00:57 2026 GMT
            Not After : Oct  4 07:00:57 2026 GMT
        Subject: CN=c98f66eaa756e243e78524ef46aa53e083cb6967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:eb:44:7d:f3:a6:c4:fb:e2:fc:b1:0c:bc:e0:
                    5c:a8:33:96:26:eb:c0:f7:f6:45:da:50:f8:31:19:
                    37:ff:ac:55:76:a6:31:14:2d:56:40:39:61:3e:b6:
                    73:3b:e7:3d:f2:bf:e2:46:c7:f0:4d:23:6a:05:d5:
                    33:0f:c8:47:a1:c6:45:40:c5:80:1e:4a:8e:6c:93:
                    48:d8:f4:e7:f4:39:b7:6f:fb:0e:17:78:d4:6d:9f:
                    c6:81:ba:28:96:2c:d3:7e:62:1d:92:26:6f:04:9a:
                    f4:99:68:14:16:e7:28:e4:99:b3:63:85:cd:81:4e:
                    31:84:78:2c:c3:fe:21:8d:12:a9:7d:b9:ad:27:2f:
                    75:b5:3f:b0:1a:93:06:3b:ef:2c:a3:2a:33:e0:22:
                    75:39:e2:28:c2:43:38:7d:df:0d:f0:a1:a3:90:f3:
                    4a:1d:1f:77:89:62:10:7e:6a:7c:30:be:a0:35:02:
                    2c:74:ba:fa:01:25:7a:32:8e:98:5c:25:5d:1d:44:
                    7c:45:51:3f:6d:0e:80:0c:fb:b4:e8:29:bf:9c:f7:
                    1c:f3:7c:18:84:c8:5d:12:77:ad:a6:66:45:12:7f:
                    53:98:d2:46:49:09:a0:c3:c3:5b:6a:1c:6b:f6:6e:
                    db:69:b4:8f:75:a9:87:7a:26:2f:9c:4c:2f:84:44:
                    19:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:8F:66:EA:A7:56:E2:43:E7:85:24:EF:46:AA:53:E0:83:CB:69:67
            X509v3 Authority Key Identifier:
                keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:64:06:80:a9:8d:f3:91:3b:a1:fd:d0:30:34:62:ed:83:3c:
         21:eb:f3:ef:7a:20:15:bb:2a:8c:30:fd:3a:9d:12:1f:a8:25:
         ab:5d:70:0f:fd:6e:f6:22:e3:ca:68:ac:a6:78:81:c9:d3:ac:
         1b:2e:32:0f:6d:4a:ca:69:e4:b4:b5:b4:85:c9:40:0e:fa:4f:
         6a:9b:d1:ea:49:1f:cd:00:5e:f9:2e:36:ce:c0:e3:cb:bd:9c:
         da:79:9b:2c:02:79:a0:a4:6c:34:10:60:bf:63:50:bd:55:4f:
         29:de:5a:a4:3a:42:d0:2e:09:dc:36:e4:09:f6:30:f5:5f:b6:
         d9:b9:44:1a:0c:74:96:18:1d:84:92:70:0d:27:87:27:79:57:
         e2:70:5c:3e:07:08:40:ac:ec:33:5c:3d:33:39:98:86:b7:4a:
         b7:20:2e:69:b2:e9:64:6b:3b:f2:3c:c3:24:7f:6e:26:2c:7b:
         06:cc:5a:64:55:6d:21:92:e0:a0:be:0a:7f:7e:83:0c:fd:fe:
         4c:3f:78:e6:8f:94:50:1c:45:33:6e:dc:70:d3:51:3c:e3:45:
         97:63:85:fc:d3:83:45:b1:41:98:78:1a:e0:00:22:6b:c1:bf:
         f9:a2:b7:50:c7:c9:7d:90:71:1b:32:3b:85:16:36:d0:8b:9c:
         a8:b0:14:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 12:52:07 2026 by rpki-client