Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
File:                     C27I7Y_JP3IzT3qXSka8J9EQKSM.mft (raw, json)
Hash identifier:          pZ8ODJYXrMai2GQXmU07I4+O+LElcIDrb4F0RkNaLDM=
Subject key identifier:   1F:D8:BE:1A:63:C5:97:1E:EF:BD:A0:EE:5E:31:DF:49:9F:E4:56:82
Authority key identifier: 0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23
Certificate issuer:       /CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
Certificate serial:       01A1377F74A4650A3632D36B4CA17F001FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
Manifest number:          033F
Signing time:             Tue 13 Oct 2026 23:01:02 +0000
Manifest this update:     Tue 13 Oct 2026 23:01:02 +0000
Manifest next update:     Wed 14 Oct 2026 23:01:02 +0000
Files and hashes:         1: C27I7Y_JP3IzT3qXSka8J9EQKSM.crl (hash: mMOwUgZl7EXnVqaiCkn+zKJ/ZugWVn6zG8HQ7DbDktE=)
                          2: TA3RHAyRhbZeooIsQWMB-18Medo.roa (hash: hbd2prwUOdAITht5l5Qygma9hqYfUIqWnfb9zdLXopA=)
                          3: a4w1OCrmTjTq1xXgFMF7hIHPfxw.asa (hash: D+pL1VBjgTGvw1aRBbIgd1AS87Lk8R9yQobPy565ppg=)
                          4: b84BPERKuOU7XfEOPsJAZAHPSDU.roa (hash: O1yboufDOcbfnri6uWC9z7NwLPBbQ/YoUC4nJjBq2XA=)
                          5: lXV32X79w4UTFHhLN_yUCd-Dpt8.asa (hash: ePLhNqdI3ZuZTZSWnit7eTonIRBYqpL6u07KsloVVUQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 20:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:37:7f:74:a4:65:0a:36:32:d3:6b:4c:a1:7f:00:1f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b6ec8ed8fc93f72334f7a974a46bc27d1102923
        Validity
            Not Before: Oct 13 23:01:02 2026 GMT
            Not After : Oct 14 23:01:02 2026 GMT
        Subject: CN=1fd8be1a63c5971eefbda0ee5e31df499fe45682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:c1:c2:42:5a:1e:23:aa:41:7d:eb:4f:1f:
                    03:62:94:93:fa:3d:ac:db:cd:f4:82:69:ef:60:4e:
                    fe:c6:5c:21:1e:ea:e7:b3:44:da:71:66:ad:d5:77:
                    9e:04:9d:f6:e7:b4:4e:bb:6a:3e:7f:da:01:39:5a:
                    ab:99:d6:39:57:6e:56:e4:6e:30:ad:c7:26:b1:c2:
                    ff:90:49:55:e3:9d:e1:cf:94:97:da:9d:ad:45:ab:
                    b6:ac:4a:72:e7:50:e9:87:6c:88:8b:15:05:81:70:
                    a7:d7:0b:55:9c:50:d8:c7:d0:75:09:97:42:29:64:
                    e7:87:9e:e5:93:72:19:fe:fa:19:f9:85:26:6c:50:
                    aa:a9:05:cb:de:d9:d3:f8:9c:17:5d:b1:8f:5d:8e:
                    aa:d3:70:2c:f5:07:a2:e5:83:c2:10:a6:8f:bc:f1:
                    f4:89:9c:b2:ef:fd:44:92:39:70:b3:6a:d5:2a:0f:
                    9f:ca:90:8c:ba:e9:2b:40:4b:4a:30:fe:ca:57:42:
                    34:cf:a1:f0:c7:fc:8a:e4:21:4f:f6:78:aa:1f:16:
                    b2:34:a6:2b:3f:dd:33:86:89:d4:1e:21:50:48:9e:
                    5a:82:44:66:93:7f:58:9b:e3:77:82:57:5d:28:a1:
                    1d:83:79:63:63:e7:ab:68:ad:3f:4f:07:5e:1c:38:
                    f1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D8:BE:1A:63:C5:97:1E:EF:BD:A0:EE:5E:31:DF:49:9F:E4:56:82
            X509v3 Authority Key Identifier:
                keyid:0B:6E:C8:ED:8F:C9:3F:72:33:4F:7A:97:4A:46:BC:27:D1:10:29:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C27I7Y_JP3IzT3qXSka8J9EQKSM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/304762-6733-4c73-8523-047775129148/1/C27I7Y_JP3IzT3qXSka8J9EQKSM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:81:0c:2b:40:e7:07:d6:d0:4b:fb:31:6c:68:1f:2e:71:65:
         57:26:10:82:07:c5:c0:9f:7a:eb:20:d0:af:57:48:9c:fc:67:
         3c:a3:c8:a7:7f:5a:98:ff:7d:a8:c0:88:4b:85:2e:c9:49:0d:
         14:c8:7f:a0:aa:8b:5a:39:2d:cd:6e:64:6f:c0:71:21:35:91:
         df:5a:ed:e9:3d:c4:80:92:c0:0a:3f:d6:af:06:23:ba:0d:4d:
         c1:fe:3b:e3:07:c3:a7:57:fb:72:d8:52:a7:b9:66:f8:70:8f:
         1e:be:9f:87:8f:43:f6:bf:5c:14:e4:27:80:5a:6e:c3:03:46:
         49:74:3e:74:5f:85:4e:33:e0:b0:9f:ce:63:06:95:39:39:43:
         32:f9:5b:61:2b:bb:26:48:11:94:af:1d:4b:81:fd:ca:42:e9:
         1b:23:8e:e5:c6:bb:e4:84:4d:ee:7a:47:bc:10:b6:b7:7b:c4:
         7b:0b:35:0b:f4:f5:89:9d:20:b2:3d:72:3d:20:09:a3:2e:48:
         53:e5:5d:59:2a:ba:43:d0:b9:64:aa:34:15:9c:01:7a:75:b1:
         e1:1e:e0:1e:80:fe:ec:8c:74:e7:26:ab:1b:9f:a6:5e:14:42:
         62:14:ce:ad:5c:ad:e9:6c:b8:db:58:2f:66:e2:a8:34:41:da:
         27:b7:e4:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:25:42 2026 by rpki-client