Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
File:                     w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft (raw, json)
Hash identifier:          FVpeXlL61Ch+Gzo4+D++ddm0VT6WlUL6VxVTNqOkyKw=
Subject key identifier:   12:C1:A1:12:4D:71:7A:CB:43:E7:5D:A9:BD:80:C1:A8:2B:E7:BB:16
Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF
Certificate issuer:       /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
Certificate serial:       01A10F283588FFDA2A5A0148E32785613A5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
Manifest number:          1A97
Signing time:             Tue 06 Oct 2026 03:00:55 +0000
Manifest this update:     Tue 06 Oct 2026 03:00:55 +0000
Manifest next update:     Wed 07 Oct 2026 03:00:55 +0000
Files and hashes:         1: 77h1Q6qUz5qlMm7h_AznswYtOZ0.roa (hash: sRXxLopp6/463zgP26zWNJzhuSr+AeItnoxYVZGJazU=)
                          2: HN1urgNHkidDzjrtQwQt8embI9M.roa (hash: EeB/nRcF8dH+A2iZTqxjbaTiyibP5r0zfqmmI1yddPU=)
                          3: w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl (hash: CJ1z35R7QgBHr1sKsV4cpDIYR60JlrLwVnbgVvCBePA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 23:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:28:35:88:ff:da:2a:5a:01:48:e3:27:85:61:3a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf
        Validity
            Not Before: Oct  6 03:00:55 2026 GMT
            Not After : Oct  7 03:00:55 2026 GMT
        Subject: CN=12c1a1124d717acb43e75da9bd80c1a82be7bb16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f1:2e:27:7e:a1:18:0e:c1:67:44:88:75:13:
                    ff:2f:d2:e2:6d:9c:32:a5:f4:10:62:35:a6:8a:99:
                    20:38:22:f5:12:5c:d1:20:99:1b:bb:dc:36:5d:1e:
                    c2:79:a3:51:c4:6c:9d:5f:5d:dd:e1:50:92:a7:7f:
                    59:df:4b:5f:61:b3:1c:e4:c3:27:4f:4c:62:8d:49:
                    17:ac:51:ca:1e:34:9b:f4:2c:98:3e:44:e8:5b:b8:
                    69:c8:1b:2b:79:22:33:a3:97:0e:30:bf:13:fb:25:
                    d0:e7:c4:ab:23:62:1c:5d:92:f8:35:60:ec:8a:38:
                    77:6b:a6:20:c1:94:5f:99:42:f4:10:9b:2c:16:3d:
                    76:b0:e2:31:fd:a1:bf:15:b0:b4:52:d4:79:88:36:
                    c6:84:ac:7c:f5:75:0a:95:7d:48:2d:67:c9:cc:2c:
                    cc:d6:25:03:d7:ea:be:6c:57:55:03:42:ba:aa:bf:
                    50:15:aa:54:f8:7f:a2:8e:7e:33:f0:47:13:73:65:
                    a1:01:53:b0:69:ce:a9:cd:0d:52:5a:79:11:f8:43:
                    bf:e4:85:15:bb:06:df:e0:49:f1:fd:7b:44:15:b8:
                    be:4f:13:a2:c7:aa:50:e7:42:7b:a4:4e:a7:85:af:
                    21:bc:f0:5b:80:24:c4:5a:ae:4b:5e:c2:ff:8c:bf:
                    6c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:C1:A1:12:4D:71:7A:CB:43:E7:5D:A9:BD:80:C1:A8:2B:E7:BB:16
            X509v3 Authority Key Identifier:
                keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b1:d2:db:12:11:b9:e7:53:f1:0f:c8:f6:98:c0:24:e7:27:
         5b:51:d0:94:45:e3:c9:c8:69:0b:89:4a:97:a8:e9:a9:d6:c0:
         b6:60:21:e3:f0:ee:38:a3:28:25:5f:c1:21:6a:3b:20:1d:be:
         42:33:6c:22:a8:32:b3:98:69:39:2f:24:6a:9f:11:42:a7:51:
         2e:cb:ad:51:33:e6:52:6d:3f:f2:e5:91:c5:a3:5c:53:46:0b:
         54:98:17:b4:c6:e0:4c:af:3a:ea:24:38:f2:e0:c3:f8:38:da:
         51:a8:a0:1d:33:71:87:38:50:11:79:55:69:ca:ee:e6:91:27:
         7c:b4:9d:a8:6e:93:39:05:db:eb:79:5e:c3:34:d5:07:a9:59:
         d4:98:d9:c4:3a:0d:f4:ab:4e:f3:17:8f:82:c6:65:b1:fb:8e:
         44:8c:a6:b5:19:5f:00:c2:e2:a7:1b:2e:af:53:7a:d2:d9:12:
         6a:5b:5b:62:6e:7d:74:87:04:90:c9:82:7d:a8:4b:33:f6:ec:
         80:2a:fd:9c:96:b5:00:48:35:0f:a8:6a:44:00:24:79:fb:e4:
         5d:18:66:37:36:67:80:0b:df:db:30:b3:25:a1:36:82:e4:a4:
         90:74:0b:bf:83:17:fc:ad:3b:a8:bd:d5:8e:07:48:95:ee:e8:
         54:75:7f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 11:02:01 2026 by rpki-client