Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
File:                     mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft (raw, json)
Hash identifier:          b7qbqhjN6/LQfYzfXfIRq/w0x50rkzmDSmFVTOuqb4I=
Subject key identifier:   C2:2F:09:C8:11:91:64:EE:2D:18:C3:1F:03:44:4A:B9:63:49:D5:0D
Authority key identifier: 99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6
Certificate issuer:       /CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
Certificate serial:       01A0F30D1A7ABB28E3F5261AECF56D058855
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
Manifest number:          176C
Signing time:             Wed 30 Sep 2026 16:01:57 +0000
Manifest this update:     Wed 30 Sep 2026 16:01:57 +0000
Manifest next update:     Thu 01 Oct 2026 16:01:57 +0000
Files and hashes:         1: D1heTXn7CKy5zLZ_HwZK9LTU77c.roa (hash: 8+cYEf9ivILDKmKrQsHq9USPOFeHqeF4AHnuJu39UqI=)
                          2: SpSWWIAX_co-S7OGVe4xxOaTumQ.roa (hash: eWFs5jFFJQvUBfi8O0eZY0oTE1BIWFbt9F0ZJ8qa89c=)
                          3: fI9PBxiiMOsKCtnOXwqzP5WZ3iw.roa (hash: y1cXN1mGBdJu2MTeUqDUwC/XHDAJM3lueicXGuEYI3I=)
                          4: lBg3_ekP2XBYVM3th5LmKxYKUuE.roa (hash: DDkeLmqGCMtQYRPOsdUTG5xK68Edb+Mfg+tAtB+HqA8=)
                          5: mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl (hash: Hb2NBVLi/wpUJwoyE8Pa1jWOlM8wumgFXJhB0MpXq2w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f3:0d:1a:7a:bb:28:e3:f5:26:1a:ec:f5:6d:05:88:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9917f777e71ac34122edb35edd60cf14d75b9ef6
        Validity
            Not Before: Sep 30 16:01:57 2026 GMT
            Not After : Oct  1 16:01:57 2026 GMT
        Subject: CN=c22f09c8119164ee2d18c31f03444ab96349d50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a0:f6:25:49:e1:40:3b:d2:b1:ad:fe:a5:7a:
                    19:05:f0:ad:ba:f6:2a:1c:1e:de:7d:38:2d:78:6f:
                    df:5d:86:36:7f:ef:15:cb:90:95:a0:d1:41:cb:02:
                    8a:63:41:54:08:5e:76:b4:e9:9d:5a:58:97:5d:07:
                    88:02:c3:a1:e0:0b:d5:e9:80:d4:cc:e0:4a:c5:00:
                    49:b5:72:79:08:28:3e:c1:55:01:76:f2:8b:a2:7d:
                    7d:2f:60:35:dc:da:de:42:4e:c6:ca:f2:c3:c8:ec:
                    59:59:1f:f6:21:85:8b:ec:07:a2:cf:2c:0e:9d:c2:
                    c4:00:d7:d4:4b:83:e3:5c:dd:25:ab:22:6e:87:a4:
                    e7:1b:19:c8:7e:98:5c:34:e0:94:d2:e6:6d:e5:62:
                    69:05:81:bc:16:11:34:37:39:8f:ae:e9:2a:d5:5f:
                    ea:3b:b1:f6:ee:49:59:bf:a8:69:20:19:fe:a2:27:
                    2e:82:bd:27:57:97:04:09:33:f0:17:ee:eb:d1:21:
                    9e:52:f6:c6:5f:ff:81:8b:76:40:70:a2:94:e2:dd:
                    fb:ff:05:d7:1f:56:5c:7b:b8:52:57:38:11:8c:57:
                    7b:c4:3d:4f:d1:ca:ca:ca:0d:76:d9:26:d2:f0:94:
                    3e:43:ff:6e:24:ce:64:4b:f5:71:d0:4d:b1:af:65:
                    85:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:2F:09:C8:11:91:64:EE:2D:18:C3:1F:03:44:4A:B9:63:49:D5:0D
            X509v3 Authority Key Identifier:
                keyid:99:17:F7:77:E7:1A:C3:41:22:ED:B3:5E:DD:60:CF:14:D7:5B:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRf3d-caw0Ei7bNe3WDPFNdbnvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/be8d59-7704-45f8-b399-a88f574152b6/1/mRf3d-caw0Ei7bNe3WDPFNdbnvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:11:71:7b:46:ba:df:3f:a8:83:67:60:10:7c:c7:12:26:62:
         73:84:98:70:11:5b:40:6c:02:26:61:46:b8:f0:67:7e:e3:1c:
         54:d5:64:5b:57:1b:38:90:63:fe:1b:59:57:64:bf:9b:77:e7:
         9b:68:59:b1:2d:2d:83:5d:2a:3f:35:b9:b2:f0:f7:2c:b3:b2:
         cc:90:28:b9:95:ff:f4:4d:58:79:42:5c:68:13:71:85:22:ca:
         27:ed:85:71:e0:34:4f:29:53:67:da:50:a3:62:2d:55:b9:34:
         df:ab:82:57:cf:5b:9d:0d:eb:01:96:29:3a:ba:e9:70:cf:f7:
         bb:d7:27:ef:b4:b0:65:4a:68:68:fa:91:e8:0f:df:4a:b5:16:
         16:e3:9b:1a:b2:90:d0:9e:ee:d7:87:47:ac:09:5d:d0:db:62:
         14:42:3d:54:0f:e7:13:b1:7f:92:d3:15:83:0b:05:dd:e1:11:
         c4:41:fa:90:cb:9b:88:bc:94:9d:c1:a4:17:fb:8b:b6:07:90:
         11:48:ef:70:6d:44:3b:49:1d:49:18:d3:ba:15:fd:af:6f:18:
         86:94:07:49:d7:71:c6:74:df:a9:ba:df:60:19:5a:29:1d:ac:
         54:9a:56:6b:3f:e2:f3:71:c8:1a:93:f6:21:1f:ae:a0:28:95:
         66:b2:e5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:57:26 2026 by rpki-client