Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
File:                     R2bG2a0hzUEYoESCZNb7NdVfFMA.mft (raw, json)
Hash identifier:          b6vGKCAGbDvkcprtCtGHQoVk5hDnhGBZOPBYXhGIXQI=
Subject key identifier:   5B:E3:99:6A:2D:E4:DE:84:C8:A3:AF:E5:F6:35:8C:1A:63:E1:2D:F1
Authority key identifier: 47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0
Certificate issuer:       /CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
Certificate serial:       01A11296FCECE43212424A946BB51D475AF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
Manifest number:          1A96
Signing time:             Tue 06 Oct 2026 19:00:47 +0000
Manifest this update:     Tue 06 Oct 2026 19:00:47 +0000
Manifest next update:     Wed 07 Oct 2026 19:00:47 +0000
Files and hashes:         1: 8ackz0fBmxFoZ7n0UkyKUhyAWGI.roa (hash: dReBdXhq4rkthqNMyzhKqYiwm9PHmiXuhBuVK2nJI6A=)
                          2: HuqUSWno2Gq8ydDwJRx6QWJXGos.roa (hash: q4XX35euMg6p42HeT4nudKvSOjx2VhLuyQAvC+XXuNE=)
                          3: R2bG2a0hzUEYoESCZNb7NdVfFMA.crl (hash: xvdZS5O+wVLmfccV1fFjjn/EqGt+ixEoY/qRz+z18uM=)
                          4: VU_E5_vbKeph2ERkjiSVilUQng0.roa (hash: lXGCTM2iz6lR/iwrSeN1Dq111KxdOiG5eDm3IhwXCfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 19:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:12:96:fc:ec:e4:32:12:42:4a:94:6b:b5:1d:47:5a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4766c6d9ad21cd4118a0448264d6fb35d55f14c0
        Validity
            Not Before: Oct  6 19:00:47 2026 GMT
            Not After : Oct  7 19:00:47 2026 GMT
        Subject: CN=5be3996a2de4de84c8a3afe5f6358c1a63e12df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:c7:f2:5b:3d:51:f6:18:26:c0:af:2c:c5:
                    a6:8d:db:d1:96:d0:80:c7:d4:6b:ca:56:32:2a:ec:
                    dc:8d:50:b4:e1:fb:b8:de:91:f6:53:04:58:d1:a9:
                    ba:ad:a9:3e:ad:a0:62:f3:98:35:fd:70:1f:d7:c6:
                    53:94:10:03:b2:11:18:79:3a:cd:57:85:da:91:7c:
                    48:ab:ad:3e:34:08:02:00:89:be:85:66:01:4c:d0:
                    e9:75:2b:16:a9:3f:d0:f3:ce:c7:89:9a:6c:f8:9a:
                    71:67:25:27:78:eb:36:a8:03:f0:a9:6c:0c:42:30:
                    70:dd:d0:1a:b2:4f:ab:6a:2e:aa:ae:19:ae:8a:8f:
                    a8:c1:34:06:7a:18:9e:f9:cc:79:d4:43:4c:4b:85:
                    cd:b4:ff:8e:27:cc:99:71:ee:9c:e0:03:98:e5:7c:
                    d1:29:42:81:7e:e5:af:ff:20:87:11:aa:39:37:a5:
                    e8:2c:c3:38:23:be:4c:69:40:20:f0:c6:a7:75:0a:
                    01:43:28:86:52:75:c5:80:3a:38:2c:78:ab:81:54:
                    38:78:63:95:fb:f8:33:67:0f:a6:21:f6:01:e2:e2:
                    98:80:34:3f:b5:d7:83:41:3c:8b:54:fd:7d:96:93:
                    b2:0c:05:d2:71:1c:3d:94:32:ca:72:5c:45:fd:8d:
                    8b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E3:99:6A:2D:E4:DE:84:C8:A3:AF:E5:F6:35:8C:1A:63:E1:2D:F1
            X509v3 Authority Key Identifier:
                keyid:47:66:C6:D9:AD:21:CD:41:18:A0:44:82:64:D6:FB:35:D5:5F:14:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R2bG2a0hzUEYoESCZNb7NdVfFMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/41dc75-1f32-4edd-a94c-f5ec403fdacf/1/R2bG2a0hzUEYoESCZNb7NdVfFMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ed:62:d6:55:07:c5:9b:d4:bf:26:6b:9a:74:e9:5f:87:5e:
         5b:9d:3c:7e:7a:df:b5:4e:89:aa:59:0b:b7:d0:f4:5f:98:a8:
         a1:47:1a:d2:70:90:23:9d:b6:bc:45:41:f8:c9:56:36:b9:06:
         e8:88:86:55:df:3d:8a:3b:53:75:bd:d3:6b:08:49:70:69:f5:
         71:be:0a:2b:0d:81:86:c8:41:f1:ce:14:62:57:ba:b0:da:b6:
         c1:9e:c5:ab:4f:16:8d:4f:67:34:48:66:54:66:e6:e4:af:53:
         0f:3f:e7:07:4a:30:ee:65:92:6c:73:9f:14:fc:8c:ea:db:c1:
         eb:56:5b:0a:2e:e3:ec:18:cb:dc:10:2d:c0:e9:e8:8d:25:04:
         b0:42:52:07:3a:04:7f:74:35:45:26:12:ba:2b:62:e6:2c:76:
         1b:86:1f:80:f7:59:17:a4:fb:2a:8d:e7:6c:0c:ab:b0:8e:dc:
         77:50:6f:ea:9c:ff:d1:49:26:d1:ad:0d:e9:4e:b8:f9:e1:38:
         dd:ca:b1:30:b1:af:60:4d:34:85:d6:58:c7:05:6e:31:87:b1:
         a2:5a:2e:68:e8:ce:95:ae:95:1b:13:9d:80:20:b9:51:05:52:
         37:2b:a2:7c:7c:15:25:89:d8:c4:c2:bb:80:59:30:9d:98:bb:
         84:a4:16:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 01:02:04 2026 by rpki-client