Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
File:                     d27ATX5nmIYhbQe8cijbUo88hv0.mft (raw, json)
Hash identifier:          y5j/ndWGDB8mNIiSmeB6ri9hH5aBFQIsHZkPTA4HMyg=
Subject key identifier:   A3:E6:1E:07:8B:8C:13:9D:1F:5D:D0:8B:61:38:60:FA:EF:DB:61:1E
Authority key identifier: 77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD
Certificate issuer:       /CN=776ec04d7e679886216d07bc7228db528f3c86fd
Certificate serial:       01A101362B4FBE4FC778F31B6895FF3EDF0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
Manifest number:          01B5
Signing time:             Sat 03 Oct 2026 10:01:29 +0000
Manifest this update:     Sat 03 Oct 2026 10:01:29 +0000
Manifest next update:     Sun 04 Oct 2026 10:01:29 +0000
Files and hashes:         1: Gesfsa1mPZDnaCG5I-S24-ylDHM.roa (hash: 2IV3q7ceTfOxNOfoF+NvFTTxBpL0Fe+G/gUYs6fQZiU=)
                          2: d27ATX5nmIYhbQe8cijbUo88hv0.crl (hash: xvXmY3ZGmARiAwDXh3P5BR2ZdMhv9PHajgRjtUgKc38=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 10:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:01:36:2b:4f:be:4f:c7:78:f3:1b:68:95:ff:3e:df:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776ec04d7e679886216d07bc7228db528f3c86fd
        Validity
            Not Before: Oct  3 10:01:29 2026 GMT
            Not After : Oct  4 10:01:29 2026 GMT
        Subject: CN=a3e61e078b8c139d1f5dd08b613860faefdb611e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fc:ee:56:7c:a3:77:26:c4:d2:81:42:0e:b8:
                    9e:f1:09:3c:2b:c8:f1:02:2e:c6:8f:63:1a:bf:ca:
                    c4:15:1d:bb:5a:9c:94:de:fe:2c:3d:25:ae:c3:6f:
                    77:6d:ec:84:81:79:08:ac:8b:be:e4:c4:87:75:f2:
                    c3:53:06:73:4f:5e:94:c0:33:46:86:8f:f1:b9:0f:
                    7a:26:b2:3a:44:07:82:8d:d7:ef:56:a2:6e:42:9e:
                    6b:ea:68:17:8f:74:98:eb:7a:cf:49:6c:70:66:df:
                    0e:d3:0b:71:f6:e6:cd:46:af:60:0d:bf:ba:de:54:
                    a2:be:05:cd:05:94:8f:db:7a:bc:6f:a6:05:72:20:
                    b8:ca:14:ca:00:54:58:aa:57:b6:4e:ba:a6:1c:ae:
                    14:0c:d4:80:c5:ea:4e:7a:4a:f0:b5:12:43:d5:80:
                    df:03:a6:0e:9f:17:f3:10:9e:c4:3d:45:c2:ae:3f:
                    52:68:56:92:26:79:df:4a:3f:cd:00:35:6d:d5:24:
                    c1:3e:9f:1f:4b:34:75:98:6d:14:5b:a9:39:b4:de:
                    67:97:b8:91:7c:19:85:27:6f:d3:dd:fa:db:18:a1:
                    d6:4f:c5:82:16:75:05:7c:e1:2b:b1:88:3a:77:bf:
                    e2:1a:62:8f:8f:be:6b:d6:a6:03:67:f6:02:e6:a1:
                    86:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E6:1E:07:8B:8C:13:9D:1F:5D:D0:8B:61:38:60:FA:EF:DB:61:1E
            X509v3 Authority Key Identifier:
                keyid:77:6E:C0:4D:7E:67:98:86:21:6D:07:BC:72:28:DB:52:8F:3C:86:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d27ATX5nmIYhbQe8cijbUo88hv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2f8282-6c54-4018-93b1-493af1cbbe0c/1/d27ATX5nmIYhbQe8cijbUo88hv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:36:5c:b0:46:cb:05:de:b9:54:6f:3c:5b:97:74:26:a2:43:
         9f:8f:3a:ec:f5:ec:4e:70:37:f4:6b:fa:c8:2a:53:e4:50:24:
         6c:56:6e:b1:1c:ef:a5:3a:c0:1d:c9:ff:5a:dc:f2:9a:f8:0b:
         f1:88:f5:fa:f9:89:15:79:25:26:af:df:42:19:55:0d:1c:a9:
         b1:5c:eb:91:0a:f3:ac:09:7c:c8:ae:57:34:a6:a4:da:17:17:
         02:c0:83:22:d1:29:3d:d7:f9:4b:43:c7:61:5f:89:08:d2:8b:
         fe:01:1c:4b:e5:9c:2e:38:3e:09:3c:9c:95:88:da:bd:7f:4d:
         87:98:44:2c:68:9a:67:27:a8:63:27:0d:a7:5a:9d:e5:ae:95:
         e0:f6:a8:18:33:40:d2:93:45:cf:3c:24:f5:ce:fb:6f:e3:2b:
         e6:f0:ae:50:07:9a:22:b0:e9:82:a0:a4:cc:71:e1:c3:fb:a6:
         42:dc:20:4e:dd:bd:f6:0d:a8:dd:99:1e:95:14:ae:29:bd:e2:
         bb:85:f8:4d:81:f3:64:a4:d9:75:0a:2d:6f:4b:23:b4:82:a3:
         b5:35:94:59:02:32:f0:b5:16:2e:34:dc:68:61:22:f6:e0:fa:
         10:6c:ed:6f:35:1f:85:95:5e:45:16:c1:2d:79:1b:82:33:bd:
         a1:64:79:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 19:36:40 2026 by rpki-client