Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
File:                     abfzv44Ke1kKD_qhycCsWAoLEZ4.mft (raw, json)
Hash identifier:          Xk18HJeep1qvjXBVd4mLKcoyRBMTRvNWkbbZF7snOZw=
Subject key identifier:   32:93:EB:51:2D:94:B9:5A:E6:6E:9C:96:F5:B5:04:81:98:73:10:B5
Authority key identifier: 69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E
Certificate issuer:       /CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e
Certificate serial:       01A0EAAE63EC025FEDA2F37CF24A7B719E24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
Manifest number:          03A4
Signing time:             Tue 29 Sep 2026 01:01:32 +0000
Manifest this update:     Tue 29 Sep 2026 01:01:32 +0000
Manifest next update:     Wed 30 Sep 2026 01:01:32 +0000
Files and hashes:         1: ZckkoNHt2DvjlU2WvYDlIclH-DI.roa (hash: xy5JGKAo4mAfLH66AX9gOwR/ragqzfbDNJ5R5SMZh1s=)
                          2: abfzv44Ke1kKD_qhycCsWAoLEZ4.crl (hash: Z3s16lT0Olq7nWzIZwVVqVbIXNebVL80vcvlQsemBXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:ae:63:ec:02:5f:ed:a2:f3:7c:f2:4a:7b:71:9e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69b7f3bf8e0a7b590a0ffaa1c9c0ac580a0b119e
        Validity
            Not Before: Sep 29 01:01:32 2026 GMT
            Not After : Sep 30 01:01:32 2026 GMT
        Subject: CN=3293eb512d94b95ae66e9c96f5b50481987310b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7e:ad:61:05:d2:9f:97:fb:57:62:16:cd:25:
                    e7:fd:0b:b2:ed:22:b4:d9:ad:25:08:44:7e:5a:da:
                    91:a2:0f:cc:66:54:10:4f:91:9a:26:0c:38:e6:b5:
                    f6:0b:61:7d:68:b3:b3:21:ea:5c:4b:b2:68:0c:69:
                    6c:c4:43:d9:2d:7f:13:3c:e8:73:e0:b0:1a:0f:a5:
                    ee:26:b8:c8:cb:5e:dc:ef:11:45:1b:86:bc:14:f1:
                    35:4b:c0:4e:fa:0e:d2:b3:dd:15:09:2a:fc:8e:8d:
                    ba:73:06:4a:c8:ce:99:3c:a5:ca:96:74:3f:16:ae:
                    67:2c:45:53:58:2a:5a:53:01:5d:11:cd:bc:89:84:
                    c9:13:96:5a:d0:f6:a3:31:4c:bd:15:c1:cb:e7:a6:
                    72:63:b2:79:c1:09:6f:9b:d9:d9:c3:3b:01:12:15:
                    46:52:f7:fc:82:b1:91:f9:cd:53:ba:a1:88:be:94:
                    00:0f:4f:83:09:bf:20:9e:58:e6:4c:a7:59:8c:e1:
                    ab:a9:a0:12:cd:ae:cb:5f:25:b5:e3:1b:2c:bc:50:
                    bf:7f:b0:69:13:7d:3f:c1:37:38:4f:d6:83:93:ee:
                    95:a4:f1:e8:86:36:1c:f6:ea:93:e3:5f:03:94:99:
                    2d:ab:9b:27:67:41:35:f8:f9:b2:74:2f:19:84:19:
                    ab:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:93:EB:51:2D:94:B9:5A:E6:6E:9C:96:F5:B5:04:81:98:73:10:B5
            X509v3 Authority Key Identifier:
                keyid:69:B7:F3:BF:8E:0A:7B:59:0A:0F:FA:A1:C9:C0:AC:58:0A:0B:11:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abfzv44Ke1kKD_qhycCsWAoLEZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/16d85f-85b5-42e3-ad9f-eec05f49ac86/1/abfzv44Ke1kKD_qhycCsWAoLEZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:6a:6a:72:bc:51:44:69:8e:53:f8:4b:b9:59:a3:53:6f:fe:
         a4:ec:ef:e0:19:e3:9a:2f:34:65:36:66:61:17:1c:e0:5b:3b:
         01:c0:09:19:35:1d:29:9a:5a:88:ba:bc:04:32:96:46:7e:ed:
         cd:1c:36:72:a2:59:79:1a:bb:68:1b:25:17:83:2a:66:11:27:
         bb:84:50:df:ad:b6:28:1d:cc:aa:43:aa:fc:3a:92:af:2b:ec:
         75:1d:21:7b:5c:1a:0a:ee:d4:5d:87:7f:89:e3:0d:6a:a8:89:
         0e:6d:ad:52:16:70:6e:36:96:ae:3b:53:95:03:3e:db:16:00:
         f3:9b:b4:7c:7d:89:3d:6e:12:e2:9d:6f:96:39:56:7e:9e:4a:
         10:4b:79:79:fb:14:bb:7a:c8:21:53:a4:5d:9c:57:0b:4f:e1:
         a0:96:24:98:1b:4f:47:4f:65:eb:73:0c:7a:37:fd:75:83:24:
         2a:17:3d:54:99:80:f7:90:e7:6d:ac:cc:e0:b3:30:09:5f:84:
         cf:cd:15:06:ff:9a:60:8d:3f:07:f6:e2:da:a3:72:b3:b5:69:
         f6:35:52:07:82:21:0b:22:2d:40:46:20:50:36:45:74:71:0c:
         7a:7a:78:0f:df:ff:11:f2:b1:51:81:cd:69:70:d6:26:e7:2b:
         b0:58:62:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:33:24 2026 by rpki-client