Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft
File:                     RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft (raw, json)
Hash identifier:          92qyiny6b6ONula+J3bYsk2zlpYcHOolaAi+mTVmbxo=
Subject key identifier:   40:04:A5:13:1A:36:44:D5:4B:D9:EF:14:49:7E:BB:62:07:EA:CC:F1
Authority key identifier: 46:AB:16:05:A6:0F:A8:9C:C1:99:CF:D8:CF:EB:7C:C8:5C:AB:37:26
Certificate issuer:       /CN=46ab1605a60fa89cc199cfd8cfeb7cc85cab3726
Certificate serial:       01A1220A8D21206B27329E10AE294977B852
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft
Manifest number:          02CE
Signing time:             Fri 09 Oct 2026 19:01:18 +0000
Manifest this update:     Fri 09 Oct 2026 19:01:18 +0000
Manifest next update:     Sat 10 Oct 2026 19:01:18 +0000
Files and hashes:         1: BHHGcSt-xcyqmuqZZJUvi7Il74E.roa (hash: 1xQtvXwKdGqA3UbB0BtNu6enZHNYo0wQaicN5K3pYMc=)
                          2: RqsWBaYPqJzBmc_Yz-t8yFyrNyY.crl (hash: lKfzwJSdqXkv5ombs+cWLKN2l8LLWGSim0sKJq3tfnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 Oct 2026 19:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:22:0a:8d:21:20:6b:27:32:9e:10:ae:29:49:77:b8:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46ab1605a60fa89cc199cfd8cfeb7cc85cab3726
        Validity
            Not Before: Oct  9 19:01:18 2026 GMT
            Not After : Oct 10 19:01:18 2026 GMT
        Subject: CN=4004a5131a3644d54bd9ef14497ebb6207eaccf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b5:e6:a9:99:f8:c2:86:c1:b0:db:f8:c0:ed:
                    a2:d8:bb:38:2e:53:82:f8:93:1e:c3:2c:db:30:e2:
                    16:59:b6:6b:c9:ea:de:ad:a7:26:4c:28:3e:23:f9:
                    86:8e:15:4c:ef:ac:78:31:7b:6c:bb:1f:f9:65:e3:
                    5c:0f:08:e0:12:da:f5:78:2b:11:9b:d5:6d:c7:b5:
                    44:79:af:43:4d:17:7f:a2:b2:64:19:fd:7f:9a:ab:
                    7d:a3:ee:12:63:ec:7c:f2:31:b2:0b:ac:d1:fe:19:
                    c4:b6:fd:7a:7e:d3:dd:f1:88:5e:8f:bb:50:7b:7f:
                    fe:7f:5d:bd:6e:39:31:2e:a4:2d:81:04:3c:b3:2f:
                    e7:62:65:39:78:4f:3d:99:b1:2c:61:8f:5d:ac:6b:
                    be:bd:e9:d8:98:e3:7d:3d:1e:89:5d:d6:66:28:38:
                    80:f4:94:ac:12:da:90:97:49:f9:f1:d4:f9:ad:74:
                    ec:bf:78:30:11:f9:b1:a3:be:34:83:74:25:e8:18:
                    d8:57:99:cb:0f:61:df:68:89:ad:7e:54:43:07:7e:
                    f6:c2:ef:29:c9:f6:76:7c:5d:de:e0:f8:c7:7d:d5:
                    8f:c7:df:1e:fa:a0:48:20:f3:83:d3:8b:a9:09:6e:
                    7d:ee:14:af:05:a1:89:46:a0:ce:c4:13:7d:28:90:
                    3a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:04:A5:13:1A:36:44:D5:4B:D9:EF:14:49:7E:BB:62:07:EA:CC:F1
            X509v3 Authority Key Identifier:
                keyid:46:AB:16:05:A6:0F:A8:9C:C1:99:CF:D8:CF:EB:7C:C8:5C:AB:37:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ad606a-4098-41bb-8eba-6afbb1f8f00a/1/RqsWBaYPqJzBmc_Yz-t8yFyrNyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:dd:f9:27:36:68:e7:3b:27:40:1e:5b:78:7a:cd:68:55:dd:
         1e:31:3c:b2:0b:e6:28:65:c2:21:a6:64:d8:ff:16:3c:ce:fb:
         87:4f:7a:d2:05:ec:77:1a:ef:06:22:a3:a6:f0:2c:b8:2d:64:
         4f:c1:6a:17:bc:e8:8d:21:40:a8:7d:16:58:5a:1e:1a:c4:3c:
         a9:7f:74:96:75:82:4d:b2:0a:57:f6:c5:4c:6c:2e:dd:d1:93:
         b9:5b:8e:20:6a:e7:74:e2:4f:33:5a:d3:7a:d9:a2:f5:be:61:
         58:ba:cd:b1:30:83:14:12:73:ca:11:b4:ac:21:c2:aa:0b:e1:
         d2:03:88:93:d5:ce:50:23:74:6e:92:8e:6c:6a:c2:97:a1:99:
         e3:36:3a:15:bf:76:13:b0:28:40:d7:53:6d:6b:5c:da:3b:e1:
         ea:78:2f:e0:e2:3f:e4:50:8e:fe:40:5a:35:fe:2e:4c:4c:86:
         24:59:2d:f4:ed:d1:02:8c:28:0b:81:4a:b6:0a:24:0e:f2:c0:
         cd:e1:bd:d1:70:1d:d7:23:29:35:93:fc:bd:71:51:db:6a:26:
         45:32:f6:02:df:33:2c:45:38:3e:5c:15:4e:a8:ce:f1:98:b4:
         a2:23:9f:17:51:a6:f8:8b:e0:49:63:55:0d:51:f9:88:35:0c:
         2d:3d:14:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:18:47 2026 by rpki-client