Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
File:                     SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft (raw, json)
Hash identifier:          axd3QVdwUgN0M+3Q4Mf8qGIrvVafwuQ+o3G8WS4oMZ4=
Subject key identifier:   E5:FE:10:70:88:0D:A7:D7:3A:A5:6E:4E:D5:E4:D1:78:4D:92:E8:FC
Authority key identifier: 49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65
Certificate issuer:       /CN=4940cf778dd9817657cd8d4feedd423d46d1a965
Certificate serial:       01A10136503619D5D013BC3608A9553CEA56
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
Manifest number:          1438
Signing time:             Sat 03 Oct 2026 10:01:38 +0000
Manifest this update:     Sat 03 Oct 2026 10:01:38 +0000
Manifest next update:     Sun 04 Oct 2026 10:01:38 +0000
Files and hashes:         1: G2qFSj-zHSZn_cR0UfWs4GFJbTA.roa (hash: LmGaxovGZ/u+AYW4AE5opwjlV2xNZIKAOEsB5GmrX1g=)
                          2: SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl (hash: rEKTpyyf9NBdTrfOjRRRk6UemLb4SKY6MyP5I/M1tCk=)
                          3: T1xFBI_FXFj5vusDJo-pUeK0x0I.roa (hash: +8wuXinY8Xk3FyPY/iHD7k7tBAC8V4xrKKtAxVLmilA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 10:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:01:36:50:36:19:d5:d0:13:bc:36:08:a9:55:3c:ea:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4940cf778dd9817657cd8d4feedd423d46d1a965
        Validity
            Not Before: Oct  3 10:01:38 2026 GMT
            Not After : Oct  4 10:01:38 2026 GMT
        Subject: CN=e5fe1070880da7d73aa56e4ed5e4d1784d92e8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b6:d6:4a:41:62:bf:49:35:d8:86:a0:74:75:
                    61:8b:fc:be:bf:eb:ea:2a:4b:a5:cb:d6:a6:05:f5:
                    1e:cd:15:ca:07:7b:77:44:75:5c:80:20:c6:80:1e:
                    7c:10:11:6d:71:4c:15:21:d1:fa:d9:7b:60:01:fa:
                    4a:7b:49:9d:39:3e:39:e9:a3:24:2d:0f:cf:4e:ee:
                    35:c1:dc:3d:54:62:ec:d8:33:ef:1e:3d:35:da:21:
                    43:30:e1:b4:87:c8:0e:d9:7e:fb:68:88:4a:03:25:
                    9b:bc:37:08:5e:2b:6a:8c:74:35:4f:01:30:8d:40:
                    4d:04:b8:a1:29:05:96:f1:12:02:da:4a:12:07:7c:
                    6a:aa:e4:67:7f:cf:13:03:1f:af:9b:fc:ff:b5:40:
                    dc:59:e9:b6:a3:51:f5:10:bc:87:0b:e1:76:35:66:
                    a4:b9:6a:0a:20:40:3f:e3:b2:01:e0:1b:12:57:28:
                    79:62:e0:e4:fa:94:d4:af:76:b3:53:35:07:e2:6d:
                    ab:89:d1:63:cf:9f:ba:5c:7b:02:fb:44:c2:05:ac:
                    eb:2f:36:ba:12:b4:fd:c3:7e:e2:aa:03:48:67:56:
                    b3:0c:b2:b6:c9:23:59:53:ec:b3:5c:a1:9f:22:cc:
                    82:19:6a:2f:01:fc:41:8f:1c:49:bc:3c:1d:5d:a4:
                    ec:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FE:10:70:88:0D:A7:D7:3A:A5:6E:4E:D5:E4:D1:78:4D:92:E8:FC
            X509v3 Authority Key Identifier:
                keyid:49:40:CF:77:8D:D9:81:76:57:CD:8D:4F:EE:DD:42:3D:46:D1:A9:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SUDPd43ZgXZXzY1P7t1CPUbRqWU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b025bc-bc73-4d3c-a430-00394b610a34/1/SUDPd43ZgXZXzY1P7t1CPUbRqWU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b9:f5:a3:77:d1:dc:7a:d0:e4:1a:17:0f:00:a1:9c:4f:6d:
         be:ee:02:cf:52:40:7f:c6:00:bb:5d:3e:0a:31:e8:e5:12:f4:
         b1:43:65:73:33:83:d8:40:31:8a:58:54:fa:0a:87:61:4b:31:
         6c:7a:24:44:63:84:4e:fd:89:e5:40:68:07:35:bf:47:6b:51:
         a6:fa:b4:7c:91:b9:db:c4:51:b9:dd:4f:ba:9b:0b:09:5f:e4:
         09:cf:51:2f:28:37:04:e6:2f:e6:04:92:2c:21:28:12:38:47:
         3d:ec:10:bf:ea:f4:79:a6:ec:7b:9a:0d:e8:28:39:54:13:53:
         9e:05:b8:72:67:bc:9c:ea:c9:ca:6e:77:c7:db:bc:cc:54:df:
         bc:f6:c8:9e:a1:64:47:0f:84:fc:7d:32:03:bf:92:af:0e:61:
         93:ab:de:82:c5:b2:e3:20:94:c3:d5:ac:49:b5:60:9c:46:d5:
         8e:22:a5:c4:12:7e:e2:de:4d:17:77:ec:fd:11:9b:e3:a0:8f:
         ee:6f:6b:14:b7:13:6c:bb:4f:05:a9:5b:bd:60:b1:98:59:e7:
         50:dc:ad:e8:4f:49:7d:97:f9:c9:90:5a:68:1e:33:66:15:eb:
         ec:bc:b0:8c:c9:82:00:a1:45:f7:d3:e9:52:c7:51:b0:75:b5:
         90:20:86:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:50:56 2026 by rpki-client