Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
File:                     mAPED3e8iPryCfMdNh67q1yurEo.mft (raw, json)
Hash identifier:          L6Z/ppuBpzWxo72//yLR97hkYgq8lNmZd4KyOBW+SkA=
Subject key identifier:   BE:A8:4C:1F:14:68:F6:A9:7B:E5:3A:05:E3:46:4D:F8:28:66:2D:63
Authority key identifier: 98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A
Certificate issuer:       /CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
Certificate serial:       01A0FCB4A7F0D64DC59CAD02959F787DD1BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
Manifest number:          1A83
Signing time:             Fri 02 Oct 2026 13:01:32 +0000
Manifest this update:     Fri 02 Oct 2026 13:01:32 +0000
Manifest next update:     Sat 03 Oct 2026 13:01:32 +0000
Files and hashes:         1: 3Ahjdp__ozJo5M-VgaAWwmrVaPM.roa (hash: giC1iif4sPjQDIVLnsnSJ6c2IhGqS5e5kDwDkf1ROlk=)
                          2: HHj1qeApV1_9bNuvEkTW3j5vL90.roa (hash: KLPygpT87u/2yKmitGRFI+aNUJyyRivcM9M/ADLfY/8=)
                          3: fY8UJD_E50eB0yipwToYj85Cx8o.roa (hash: 3UwSH6mqK8pEzOO4NVg1cMjmkDGfg2/9djiPaM/siXw=)
                          4: mAPED3e8iPryCfMdNh67q1yurEo.crl (hash: ptxeoj3UA/hbuy1FuO9fWHydosSiHmn/gHAgqnWU/9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fc:b4:a7:f0:d6:4d:c5:9c:ad:02:95:9f:78:7d:d1:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9803c40f77bc88faf209f31d361ebbab5caeac4a
        Validity
            Not Before: Oct  2 13:01:32 2026 GMT
            Not After : Oct  3 13:01:32 2026 GMT
        Subject: CN=bea84c1f1468f6a97be53a05e3464df828662d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e8:55:b9:44:b6:6b:2c:ba:ae:e2:b9:e5:9d:
                    4d:4e:5e:30:f9:35:ef:61:9f:5c:c3:81:74:3e:89:
                    b2:aa:ad:ce:be:74:44:e5:0e:a0:d2:01:17:90:06:
                    f0:77:85:1f:10:d6:54:c0:2f:c5:cf:fa:24:91:fc:
                    2c:63:fe:61:c2:3f:69:6a:d8:5d:82:d2:0f:e7:1e:
                    ce:66:e0:85:58:7a:8b:84:7f:09:ec:fb:ec:ec:95:
                    ac:cd:c5:7a:86:9f:3c:21:df:04:38:42:6e:ee:91:
                    33:b3:9b:b7:23:9d:40:5c:e0:81:e6:72:eb:16:cf:
                    6c:6e:24:72:ac:db:0c:d7:44:eb:63:dd:12:fc:c0:
                    34:52:b4:8e:94:36:11:57:04:7b:fe:b6:54:9d:ec:
                    66:de:4b:50:2f:19:9b:c9:77:4b:59:3d:6e:76:89:
                    13:0a:82:cb:6c:00:8e:0e:ac:58:d9:ca:0a:bb:14:
                    1e:64:7e:05:8d:47:d4:bc:47:8e:86:68:67:fc:3f:
                    80:17:d8:86:84:20:d8:fb:7f:3b:50:e6:f6:be:c4:
                    88:6d:36:ce:4e:61:ad:13:88:53:2b:48:e9:40:f6:
                    ac:b0:53:60:26:75:9b:5c:33:9a:72:a9:d4:42:d6:
                    9f:78:05:bb:1e:1a:f2:cc:ab:da:1d:b5:c3:59:ed:
                    59:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A8:4C:1F:14:68:F6:A9:7B:E5:3A:05:E3:46:4D:F8:28:66:2D:63
            X509v3 Authority Key Identifier:
                keyid:98:03:C4:0F:77:BC:88:FA:F2:09:F3:1D:36:1E:BB:AB:5C:AE:AC:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mAPED3e8iPryCfMdNh67q1yurEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/bad4a0-3e9b-4764-8a24-f3a26f055f4e/1/mAPED3e8iPryCfMdNh67q1yurEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:46:67:7b:79:51:90:fe:c8:17:09:c7:6b:ad:28:77:6c:58:
         7c:ca:98:39:c1:c7:bc:83:e6:a8:23:15:ce:68:7c:91:7f:38:
         d3:c6:6a:4d:35:aa:d7:ed:3e:63:36:13:f0:93:66:86:3f:5e:
         23:88:c4:1a:05:47:12:37:27:05:1f:a1:a6:07:95:c6:2c:dd:
         b8:cb:ee:98:ed:28:fa:84:09:aa:92:b7:0c:2d:57:68:c1:0f:
         be:cd:14:42:8e:82:61:59:96:08:5c:a0:4a:2c:d8:fd:e6:50:
         fc:a7:6e:b8:1a:7e:f7:cc:f9:69:55:41:75:2f:1e:14:ee:d9:
         ee:e6:c1:7d:2c:6e:bb:57:f8:5a:7b:61:f1:b9:f1:9b:22:90:
         cd:ae:b5:1f:c7:e9:59:e0:22:a8:51:aa:dc:f9:2f:33:b8:de:
         4c:eb:8f:af:c2:7c:d0:a0:a7:0a:62:f5:42:54:f1:bf:02:42:
         5c:68:d5:0a:08:58:55:69:a3:e8:9a:39:42:ab:f4:ac:63:8f:
         72:18:5e:e4:b4:21:85:75:4e:58:8d:2c:ac:c8:bf:23:fa:ae:
         fd:b3:fc:5b:e4:e5:e2:43:74:4b:b0:c3:68:77:3f:fd:95:a4:
         0b:73:c4:ca:83:9e:41:b9:81:ac:b4:fd:9f:4a:45:d0:fe:7e:
         3d:a6:99:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:54:07 2026 by rpki-client