Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File:                     Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier:          x8MRUvSXP+nIdu5C9CuFLueu0mNPDN7D9y0nhOSNANI=
Subject key identifier:   41:C5:87:B8:0F:93:4F:A7:86:3A:17:F3:B2:CA:0F:77:4B:B4:88:A1
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer:       /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial:       01A0CEFF44EBF0FC56BE74124EE665A7B777
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number:          1A6E
Signing time:             Wed 23 Sep 2026 16:00:30 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:30 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:30 +0000
Files and hashes:         1: C7qqIpTwYf7YNOtV5OPXaeMTQAI.roa (hash: KjPNPOXZwVjnuKWDEKGdvD1QS5oO9ubnZY9SVeLWd9M=)
                          2: LQ8BLEzCZY3QowxDFOGsxJ9uOAU.roa (hash: k5Vr4nHqfxcqa1n3ZsAMJk6uHu5H4HSOAsJXgQNi+cQ=)
                          3: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: BBv1dTtEwkH3ffHROBYFg0chuc93MAfbQu/ypxsDd0o=)
                          4: eu9ae3eLYSM_cPxuWpcvPn92OU8.roa (hash: HOeGxAKohjtOD7Ke0LKRStGG+xTv10n59udd9QSjFEw=)
                          5: v52ZTcdolNoppoOrn38Ym0qTh6M.roa (hash: qxbDlAOHfwm8HgM041yuk5h+Fnz9xMLxo2BwLuu0zHI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 16:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:44:eb:f0:fc:56:be:74:12:4e:e6:65:a7:b7:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
        Validity
            Not Before: Sep 23 16:00:30 2026 GMT
            Not After : Sep 24 16:00:30 2026 GMT
        Subject: CN=41c587b80f934fa7863a17f3b2ca0f774bb488a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:8a:29:bd:b8:15:bf:79:35:8c:c4:f0:ed:
                    5d:82:2e:f1:bc:5e:23:0f:a4:8b:f9:2c:f5:40:aa:
                    d6:93:c5:ca:1a:8a:2d:18:99:a4:d5:9e:13:a1:71:
                    89:e7:8b:5f:23:33:df:3a:f1:f9:7c:b6:4a:ca:46:
                    2b:06:7a:c3:12:de:28:0e:c0:15:57:a0:93:08:35:
                    44:9e:ad:10:00:bc:9a:1c:e9:0d:2b:89:8d:89:2e:
                    fe:52:1c:8c:a9:7e:9e:49:25:da:cc:88:ac:40:7f:
                    af:1b:9d:23:b3:64:59:df:07:c2:4c:03:9b:20:63:
                    39:cf:31:15:87:24:4b:c3:00:b7:34:4d:fd:c1:9a:
                    7c:4b:9d:93:df:8f:b3:b1:04:da:b0:e5:00:7f:2b:
                    df:0b:fc:73:44:ea:ed:ca:d5:75:e0:b4:e2:a3:4f:
                    e2:c5:d8:3d:0c:bd:c4:fe:30:e9:6d:f3:ee:e4:ec:
                    2e:23:a4:dc:50:84:5b:d1:b0:ae:13:b2:ec:c1:37:
                    77:90:f1:dc:d3:e4:4c:92:b6:4f:2e:78:46:51:fa:
                    54:d6:32:3b:61:da:24:81:bc:55:d4:70:25:81:e4:
                    f6:9e:2d:75:e3:be:45:6c:e4:b2:ed:dc:ac:8a:c8:
                    b3:f0:d9:25:3b:98:55:06:b0:55:fe:ea:b2:e1:86:
                    89:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C5:87:B8:0F:93:4F:A7:86:3A:17:F3:B2:CA:0F:77:4B:B4:88:A1
            X509v3 Authority Key Identifier:
                keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:18:7a:40:eb:50:ac:69:13:c5:b2:1f:0c:dc:57:0c:03:24:
         ab:2c:47:67:8d:0c:06:23:3a:7b:99:21:7e:47:80:72:7f:73:
         49:c9:81:4f:5b:ec:58:27:88:8d:53:6b:74:77:ba:d3:68:0b:
         9d:23:90:e4:52:fa:7a:e0:27:9c:22:d7:a9:d6:9f:86:41:76:
         5a:b8:50:27:01:61:96:dc:1a:ea:e4:88:78:08:4a:9d:06:ca:
         7a:f3:57:7d:f9:0a:55:38:20:d4:65:04:1a:67:5a:07:d8:9c:
         3a:2d:82:57:de:11:f0:b8:5a:e8:b4:7d:8d:68:65:64:2b:26:
         e9:cb:9d:33:56:ff:f2:34:9e:32:c6:4b:c5:24:fd:1e:1a:4c:
         2c:41:20:ed:b0:c3:c0:85:96:22:78:84:06:97:8e:54:6f:08:
         2b:49:06:79:19:82:37:ab:45:a4:bb:35:d0:88:62:7a:79:92:
         fd:1d:c5:6c:2e:72:39:bb:00:bf:78:16:54:68:fa:e3:0b:a2:
         5d:3f:fd:f8:e2:bc:07:8f:d8:26:81:8a:24:63:be:e7:b6:9e:
         9c:20:d2:74:bf:b5:cc:e5:b0:2f:b8:a4:18:68:94:66:cb:c2:
         c5:59:b5:a3:38:b6:78:f3:df:ce:c6:d0:b0:b5:ba:71:98:58:
         25:42:0a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:29:24 2026 by rpki-client