Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
File:                     ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft (raw, json)
Hash identifier:          vRQoLGZPTyzDNiQOURgfMSdEzaBgmJ9NZfHpYc0fx7w=
Subject key identifier:   B4:F8:E8:23:0A:5E:22:AD:FC:EA:2F:25:F2:94:E5:AB:09:C0:9E:19
Authority key identifier: B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
Certificate issuer:       /CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Certificate serial:       01A0FD59D015E8D69DF27740FC159500A373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
Manifest number:          1A81
Signing time:             Fri 02 Oct 2026 16:01:56 +0000
Manifest this update:     Fri 02 Oct 2026 16:01:56 +0000
Manifest next update:     Sat 03 Oct 2026 16:01:56 +0000
Files and hashes:         1: cR-Inx2FPQAFHMTBAFcIV-g96qI.roa (hash: /WX3k+99dSoxI5A3FmHr7z1BH//wZrnLXz4X48FtN/8=)
                          2: ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl (hash: ln9PGm/YJZyEvL4MS9xmVW9DDxBngTFxGvNOyydMSaY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 16:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fd:59:d0:15:e8:d6:9d:f2:77:40:fc:15:95:00:a3:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
        Validity
            Not Before: Oct  2 16:01:56 2026 GMT
            Not After : Oct  3 16:01:56 2026 GMT
        Subject: CN=b4f8e8230a5e22adfcea2f25f294e5ab09c09e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:d0:43:ad:1f:fd:13:50:79:b9:44:bf:29:
                    ae:34:8b:38:40:9e:3d:85:7b:94:38:11:71:66:97:
                    bd:d5:57:d1:7c:71:08:9f:d3:02:0d:4a:01:06:07:
                    38:2b:f4:1d:00:e1:a9:7d:d3:1c:d6:af:66:60:02:
                    bf:4f:75:75:c9:02:61:3c:e1:5c:72:b7:db:79:cc:
                    b0:a0:4f:d8:14:43:08:1f:9f:bf:60:3f:ff:9e:1b:
                    6e:1f:2c:b3:55:ca:24:28:e0:a2:a2:cc:13:69:c2:
                    16:a0:1a:54:e0:c3:a0:d0:39:51:2b:5b:5a:d9:04:
                    bd:03:4c:80:3f:82:fe:bb:36:28:db:f0:c8:50:de:
                    9c:01:4e:92:82:db:f9:75:7d:60:75:eb:92:44:32:
                    f2:35:aa:00:68:42:06:a4:b5:85:48:e3:b8:8f:0d:
                    2d:f1:bc:f1:9d:f6:8c:65:b3:7d:09:de:bb:1f:b6:
                    b2:14:2b:3b:60:43:6a:76:08:e8:02:fc:15:f0:f9:
                    d5:76:03:34:58:78:f0:83:c2:dc:25:a9:01:f4:89:
                    97:7b:69:c4:3d:36:2f:6c:8b:1a:9d:b8:02:f9:c7:
                    e1:ba:2a:8e:f9:ad:e4:4c:b6:33:70:92:4b:79:45:
                    58:26:3a:70:21:55:36:e5:97:ba:bf:79:39:26:4f:
                    b0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F8:E8:23:0A:5E:22:AD:FC:EA:2F:25:F2:94:E5:AB:09:C0:9E:19
            X509v3 Authority Key Identifier:
                keyid:B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a6:6b:dd:c6:f3:85:62:19:65:d7:74:7b:f3:43:63:19:a5:
         b6:cf:0d:60:c6:0b:88:d1:23:e7:11:07:10:ec:c1:42:52:ca:
         bd:89:82:0b:59:e3:92:79:73:2a:52:89:f4:8c:1f:14:8b:c9:
         35:ce:ff:67:78:29:e1:66:b9:8f:29:30:6c:ce:30:85:6f:b6:
         51:c1:8f:29:c0:e7:72:fc:38:86:e0:c3:9b:9d:db:23:13:17:
         db:f3:b3:56:a6:56:2c:26:2c:31:04:c4:f9:d2:7c:8a:16:91:
         e8:4e:05:42:40:b1:8e:1d:08:63:16:92:c8:2c:ce:76:e9:1b:
         ca:f9:29:d4:89:bf:b2:6a:fb:98:64:64:5e:a9:03:32:22:fa:
         79:95:7e:3d:d2:d7:9e:6a:1f:e9:3a:40:7e:76:af:8c:5d:4a:
         91:7d:a8:30:7c:1c:61:f8:5e:c1:2b:40:ae:11:62:c3:9c:f5:
         70:e3:58:87:32:71:ea:fa:93:99:15:0b:7e:ae:0c:2a:05:df:
         9f:40:18:00:95:9a:84:3d:ec:8a:4a:b5:1c:31:77:54:0b:0b:
         5b:bd:9b:3c:1e:84:3c:7f:68:13:ee:52:86:84:7e:23:58:29:
         bf:53:07:4d:1a:75:5b:dc:8c:0e:1f:9a:63:cb:2b:64:4e:21:
         af:e2:9d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:03:12 2026 by rpki-client