Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
File:                     dAThbzM9iWUMZhOsbJXTSNxLeVA.mft (raw, json)
Hash identifier:          EAUyQSSYvuWr6xosoSMUMn5au2k4uGDHd6ws2Bxujug=
Subject key identifier:   5B:97:2A:26:B8:99:A1:67:52:D1:3F:B7:36:7E:9E:11:B3:BF:DB:FA
Authority key identifier: 74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50
Certificate issuer:       /CN=7404e16f333d89650c6613ac6c95d348dc4b7950
Certificate serial:       01A0FFB53845036F75C4D6029B9A290901A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
Manifest number:          060E
Signing time:             Sat 03 Oct 2026 03:01:01 +0000
Manifest this update:     Sat 03 Oct 2026 03:01:01 +0000
Manifest next update:     Sun 04 Oct 2026 03:01:01 +0000
Files and hashes:         1: aON68VTwskogSIwfK0by-nZp_Rg.roa (hash: dkh8/Wbv+HTgUBFM4ZbuS+fZuVAjLH6qIB6RVSRMT9M=)
                          2: dAThbzM9iWUMZhOsbJXTSNxLeVA.crl (hash: ko+lEl8DikA3x5QM7xYoSGljtnhHt+VZu9dZY7EwmDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ff:b5:38:45:03:6f:75:c4:d6:02:9b:9a:29:09:01:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7404e16f333d89650c6613ac6c95d348dc4b7950
        Validity
            Not Before: Oct  3 03:01:01 2026 GMT
            Not After : Oct  4 03:01:01 2026 GMT
        Subject: CN=5b972a26b899a16752d13fb7367e9e11b3bfdbfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:37:2a:87:8f:9f:83:c9:fd:a1:40:dc:a3:af:
                    5c:95:74:d8:5a:ed:22:71:aa:3f:ec:e1:79:7c:2e:
                    46:f2:12:e6:56:7d:cf:f8:31:89:7f:e6:0d:9b:57:
                    46:25:7e:83:03:47:b5:a2:0d:89:8d:90:d9:79:9b:
                    84:d5:64:16:50:82:9b:5f:cf:04:63:28:e8:0b:18:
                    6a:04:96:84:83:94:e0:c5:c6:7b:99:d0:f1:6f:57:
                    68:66:ee:8a:53:a8:35:a0:01:98:6f:91:16:17:17:
                    fc:bc:a8:50:19:74:dd:05:30:60:c6:f8:96:6e:f0:
                    88:1a:77:6e:14:86:a6:05:1b:11:e7:9a:3f:f8:be:
                    b2:f8:21:8b:be:89:56:6e:c6:af:d8:9a:59:42:15:
                    fc:8a:1b:4b:ca:d9:68:8a:0c:ab:2f:2a:db:f0:39:
                    ba:0e:76:e1:3a:0d:15:3a:83:d8:20:1c:63:f5:5a:
                    32:23:04:cc:8b:1f:48:b9:d0:f5:ac:4c:e3:99:76:
                    c3:f6:df:34:96:cc:38:1d:67:10:26:fd:db:c1:c7:
                    43:01:e8:21:2b:cc:c1:c4:a0:f8:bc:fb:52:53:f2:
                    e9:d4:29:f4:5a:d0:76:b8:e2:72:b1:e1:a3:c3:ed:
                    2f:99:ad:ef:f7:ce:ff:82:f3:ff:89:91:f6:f2:13:
                    56:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:97:2A:26:B8:99:A1:67:52:D1:3F:B7:36:7E:9E:11:B3:BF:DB:FA
            X509v3 Authority Key Identifier:
                keyid:74:04:E1:6F:33:3D:89:65:0C:66:13:AC:6C:95:D3:48:DC:4B:79:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dAThbzM9iWUMZhOsbJXTSNxLeVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1532c6-a2f5-48e6-b037-18c5ebef27a8/1/dAThbzM9iWUMZhOsbJXTSNxLeVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:47:84:a9:5a:84:1b:e2:6c:0c:69:8c:27:8b:3e:d5:07:fa:
         4e:d5:30:86:36:03:e4:6d:76:3b:65:9f:f5:73:f9:85:17:27:
         59:35:81:cb:81:92:e2:f6:7f:43:07:19:91:f2:27:04:6e:ac:
         0b:fa:2d:d5:ef:12:82:35:58:47:7a:ea:29:c3:a9:1b:6c:ca:
         40:33:3c:b1:a8:6b:19:7e:50:8f:4e:4d:f8:56:79:92:09:31:
         7c:6c:41:aa:c7:f9:9b:23:15:75:15:62:7d:50:d4:51:9f:2b:
         53:94:12:16:3e:c6:a7:f6:5a:b4:d8:89:9d:50:f1:87:c2:c0:
         78:4c:b5:0e:e6:be:11:5c:c5:c5:1b:59:86:15:8f:67:4d:47:
         28:7e:c9:d3:f8:05:ab:89:30:4a:ee:d2:2f:7e:4d:d1:5d:9e:
         9d:da:ab:13:9b:41:37:45:a3:90:28:ac:31:96:e4:6b:2b:f1:
         45:52:0a:5d:f0:89:56:2f:d4:df:23:fd:1e:2d:78:c7:fe:7b:
         f7:0b:57:0c:a8:72:53:ad:2a:11:1d:2f:15:1e:b7:05:d4:9a:
         33:90:67:e4:0c:e7:76:87:23:c7:07:59:ad:1a:25:7f:9e:b4:
         54:28:35:6b:03:41:07:8a:68:e3:d9:88:7d:9a:3c:3d:bf:c7:
         92:2d:3b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:12:00 2026 by rpki-client