Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/R268J5_JTlvEDyWBnoEzncKZoW8.mft
File:                     R268J5_JTlvEDyWBnoEzncKZoW8.mft (raw, json)
Hash identifier:          g62rNdSmxuKtYrEltGBgpLUmDwnUBQhLXWdq0+31f3g=
Subject key identifier:   6A:AF:F6:B2:D4:F9:B6:91:5E:82:B4:A9:62:42:8C:79:D6:A0:99:F9
Authority key identifier: 47:6E:BC:27:9F:C9:4E:5B:C4:0F:25:81:9E:81:33:9D:C2:99:A1:6F
Certificate issuer:       /CN=476ebc279fc94e5bc40f25819e81339dc299a16f
Certificate serial:       01A111BB5BE062071AA2FB3771A134F3912A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R268J5_JTlvEDyWBnoEzncKZoW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/R268J5_JTlvEDyWBnoEzncKZoW8.mft
Manifest number:          83
Signing time:             Tue 06 Oct 2026 15:00:53 +0000
Manifest this update:     Tue 06 Oct 2026 15:00:53 +0000
Manifest next update:     Wed 07 Oct 2026 15:00:53 +0000
Files and hashes:         1: CRn13FuDaI6rAxqYgUiIz_JOwUk.roa (hash: Gf7HUxn7ULBogsXM0Li+Og9PUfDZVpVYEZOMLo2oGVU=)
                          2: R268J5_JTlvEDyWBnoEzncKZoW8.crl (hash: S9Thpo2HJyYgIF3N2LSBzLIvfa7kJSA4UAJzBJWq2Dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/R268J5_JTlvEDyWBnoEzncKZoW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/R268J5_JTlvEDyWBnoEzncKZoW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R268J5_JTlvEDyWBnoEzncKZoW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 13:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:11:bb:5b:e0:62:07:1a:a2:fb:37:71:a1:34:f3:91:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=476ebc279fc94e5bc40f25819e81339dc299a16f
        Validity
            Not Before: Oct  6 15:00:53 2026 GMT
            Not After : Oct  7 15:00:53 2026 GMT
        Subject: CN=6aaff6b2d4f9b6915e82b4a962428c79d6a099f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:20:92:6c:46:11:54:46:5d:ef:4a:10:c4:47:
                    d3:f9:79:f1:27:8f:e1:c5:b5:8e:48:03:6b:19:84:
                    a0:fa:2a:10:f4:f3:bc:ef:74:5c:8f:3d:f7:6c:57:
                    91:06:9e:ac:9b:b2:25:0a:91:8b:54:89:cd:cb:1b:
                    23:e4:1c:7c:3b:65:c3:f3:99:aa:49:f9:c7:5b:f2:
                    a9:2f:b0:16:aa:d2:5d:0e:cf:1d:ec:38:a4:7e:94:
                    42:56:38:46:0a:20:18:83:46:54:9e:5b:0e:28:60:
                    cd:06:d4:0a:ab:12:29:37:47:a1:14:d7:30:54:cf:
                    52:00:d6:92:85:42:39:da:8e:4f:f3:9f:f8:a8:3c:
                    7c:8e:3e:06:a7:75:6c:43:f1:19:d3:c8:0c:18:23:
                    39:1d:00:69:0c:26:c0:69:fe:c5:b6:06:b9:ae:f7:
                    bb:0e:2c:e1:18:6a:0f:f4:4f:88:51:30:d3:99:41:
                    4f:0f:f1:0d:21:58:1b:48:a7:0e:22:75:90:95:f6:
                    c1:28:a6:d7:b8:9a:b5:42:ae:c6:0c:7c:39:f3:f0:
                    26:ac:65:9e:41:1c:34:1c:bb:55:b4:f4:5c:b0:65:
                    cb:fa:e5:41:b6:76:4b:24:3a:4c:c7:e4:d4:0c:ee:
                    cb:25:3f:68:b6:1b:69:65:93:ae:49:f0:91:86:ce:
                    6e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AF:F6:B2:D4:F9:B6:91:5E:82:B4:A9:62:42:8C:79:D6:A0:99:F9
            X509v3 Authority Key Identifier:
                keyid:47:6E:BC:27:9F:C9:4E:5B:C4:0F:25:81:9E:81:33:9D:C2:99:A1:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R268J5_JTlvEDyWBnoEzncKZoW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/R268J5_JTlvEDyWBnoEzncKZoW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/85b982-f87e-46ad-b709-3a6883381bb3/1/R268J5_JTlvEDyWBnoEzncKZoW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:1a:6e:ed:a4:31:58:13:5f:f0:7f:c1:b6:30:9d:4e:9c:68:
         74:16:27:a3:ad:3f:64:0a:7f:7d:e1:e6:49:dd:e8:a3:50:a2:
         0e:f7:42:1e:8e:ac:77:2c:0f:e9:6b:52:a5:e2:f9:c5:af:bb:
         5c:2e:6a:98:99:36:2d:81:6a:49:9c:d6:e2:c1:86:d1:c6:7d:
         17:31:7c:17:c3:00:98:53:04:a2:a0:30:2f:b0:94:e7:c9:d5:
         20:e5:dd:9f:72:4a:a2:ca:e8:2d:a1:2a:6d:9c:e4:e6:56:86:
         5e:8b:77:c8:a1:eb:3d:1b:38:e3:91:cc:7a:09:42:1c:da:3d:
         46:ae:e3:d4:67:23:78:e5:ac:4b:d3:ee:90:b0:f8:39:28:6c:
         75:86:18:9e:be:6a:de:42:0d:34:5a:18:a0:f0:fc:53:41:56:
         69:c8:32:e4:04:fa:11:23:f0:a8:39:13:6b:cc:07:91:49:d4:
         03:a5:e4:10:78:5f:b9:11:33:a5:65:bc:a6:bc:c6:82:f2:a4:
         37:cf:65:30:ca:b7:68:a5:66:4a:e6:6e:26:3f:9b:59:ea:d9:
         07:bc:f9:b6:b4:8b:fc:ef:60:f2:04:32:4e:c5:3c:aa:29:e2:
         4a:64:5d:1f:98:53:68:67:7d:8d:31:e3:dc:39:69:c0:f4:83:
         da:a6:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:24:56 2026 by rpki-client