Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
File:                     menPNJG22eJ1TLU4hFwHPKUnhco.mft (raw, json)
Hash identifier:          wTspEqlWuEIvhtBzxic9uc+++moLZCa1mNa6ylupIKg=
Subject key identifier:   E9:7C:44:B4:50:1E:C0:2E:34:61:39:17:F5:62:27:12:4B:07:5D:EA
Authority key identifier: 99:E9:CF:34:91:B6:D9:E2:75:4C:B5:38:84:5C:07:3C:A5:27:85:CA
Certificate issuer:       /CN=99e9cf3491b6d9e2754cb538845c073ca52785ca
Certificate serial:       01A10DDE70505C834977442BDAEFFE7EEB71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
Manifest number:          0105
Signing time:             Mon 05 Oct 2026 21:00:43 +0000
Manifest this update:     Mon 05 Oct 2026 21:00:43 +0000
Manifest next update:     Tue 06 Oct 2026 21:00:43 +0000
Files and hashes:         1: menPNJG22eJ1TLU4hFwHPKUnhco.crl (hash: 7zYwL4XBcI5porJCenzKzHnC87YAKXQW3p42sa0dcv4=)
                          2: zj7l-XB4ir-Br4qiRjHhOvxnx2E.roa (hash: hJIkYZoYjwX+UQUpvmn9CWFY8wR0zPivjXLUKJl5hsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 21:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0d:de:70:50:5c:83:49:77:44:2b:da:ef:fe:7e:eb:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99e9cf3491b6d9e2754cb538845c073ca52785ca
        Validity
            Not Before: Oct  5 21:00:43 2026 GMT
            Not After : Oct  6 21:00:43 2026 GMT
        Subject: CN=e97c44b4501ec02e34613917f56227124b075dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:75:0e:39:7f:11:7a:35:67:cb:e7:3e:4c:ed:
                    99:89:a1:48:ca:4e:86:fe:3a:23:11:bd:f4:13:5e:
                    5f:44:78:1e:2a:90:a3:52:de:cd:59:a8:09:c0:94:
                    ed:6e:92:7e:8e:2f:f7:9e:62:24:d4:81:92:1e:8b:
                    d1:43:ae:e8:72:a8:f8:7c:f6:20:07:cb:2b:72:64:
                    69:5e:9a:07:96:06:c7:29:fb:35:08:8f:52:c9:8f:
                    23:49:36:1c:21:a5:98:1c:1c:d2:49:35:54:43:63:
                    1a:c4:07:d1:cb:50:4f:12:4d:0d:2d:36:31:cd:fa:
                    4d:9d:85:02:56:fc:16:7a:8b:23:9e:c8:b0:8c:be:
                    90:bb:fd:be:c5:96:ec:62:64:c9:2a:9a:55:c1:28:
                    50:47:02:38:28:60:c5:64:9e:f9:6f:2f:f5:44:1b:
                    fc:06:4c:5b:5e:80:7a:07:fd:1e:dd:d7:02:53:26:
                    e6:f4:56:10:ae:38:0a:4d:7d:97:e7:59:d7:ef:e1:
                    03:c4:60:b6:b7:65:15:9e:da:dc:8e:86:d4:97:0b:
                    ee:4b:4b:e1:26:c0:ed:3d:22:e2:cb:63:5c:4c:5a:
                    41:76:64:d1:64:be:1c:f1:ca:89:da:8e:29:93:3d:
                    01:2a:9f:a5:f3:2c:12:02:51:e3:61:69:10:3a:5f:
                    0b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:7C:44:B4:50:1E:C0:2E:34:61:39:17:F5:62:27:12:4B:07:5D:EA
            X509v3 Authority Key Identifier:
                keyid:99:E9:CF:34:91:B6:D9:E2:75:4C:B5:38:84:5C:07:3C:A5:27:85:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/menPNJG22eJ1TLU4hFwHPKUnhco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4f4b20-5136-420b-b516-b6d64a003d9e/1/menPNJG22eJ1TLU4hFwHPKUnhco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d8:c0:86:e4:c9:e4:99:6c:59:df:d5:4b:48:b2:44:0e:5f:
         52:d0:d8:1a:6d:bc:98:a8:3d:b0:85:5c:27:cf:8f:d6:b9:a9:
         26:cc:97:12:fa:9d:56:32:9a:cd:08:6b:4d:40:1c:4c:0a:cf:
         04:7b:66:a4:d8:e3:fd:4a:8a:53:f5:94:0a:c8:84:6d:98:2e:
         07:36:0b:a1:46:3b:d7:7c:0e:c2:76:ca:86:38:be:4a:3a:de:
         37:99:02:41:9e:4f:3e:36:c5:b8:61:9c:12:3d:2f:61:25:73:
         e2:b9:02:0b:c1:6e:0a:c7:31:40:96:8e:c4:c2:66:ca:3f:38:
         2c:05:99:b0:05:8f:1d:3c:27:ae:14:66:b9:82:89:98:5f:09:
         e0:e1:99:8a:65:64:00:74:f2:00:20:d8:dd:3b:09:71:cc:51:
         c0:62:5c:86:75:20:f1:d7:69:f0:ec:16:a1:7d:84:e3:cc:94:
         c6:08:7c:49:6d:ee:f0:5c:00:2a:60:68:7c:6b:15:ac:50:64:
         92:39:06:99:25:5e:1f:f2:50:93:87:ce:30:78:a2:a1:d4:a7:
         08:53:c6:b7:26:0a:59:bd:78:00:8a:d8:09:f4:ef:8f:1b:36:
         85:0b:8c:41:62:0d:75:80:a1:77:95:38:28:5a:70:8d:78:98:
         27:bf:a3:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEN3nBQXINJd0Qr2u/+futxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZTljZjM0OTFiNmQ5ZTI3NTRjYjUzODg0NWMwNzNjYTUy
Nzg1Y2EwHhcNMjYxMDA1MjEwMDQzWhcNMjYxMDA2MjEwMDQzWjAzMTEwLwYDVQQD
EyhlOTdjNDRiNDUwMWVjMDJlMzQ2MTM5MTdmNTYyMjcxMjRiMDc1ZGVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nUOOX8RejVny+c+TO2ZiaFIyk6G
/jojEb30E15fRHgeKpCjUt7NWagJwJTtbpJ+ji/3nmIk1IGSHovRQ67ocqj4fPYg
B8srcmRpXpoHlgbHKfs1CI9SyY8jSTYcIaWYHBzSSTVUQ2MaxAfRy1BPEk0NLTYx
zfpNnYUCVvwWeosjnsiwjL6Qu/2+xZbsYmTJKppVwShQRwI4KGDFZJ75by/1RBv8
BkxbXoB6B/0e3dcCUybm9FYQrjgKTX2X51nX7+EDxGC2t2UVntrcjobUlwvuS0vh
JsDtPSLiy2NcTFpBdmTRZL4c8cqJ2o4pkz0BKp+l8ywSAlHjYWkQOl8LtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOl8RLRQHsAuNGE5F/ViJxJLB13qMB8GA1UdIwQY
MBaAFJnpzzSRttnidUy1OIRcBzylJ4XKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVuUE5KRzIyZUoxVExVNGhGd0hQS1VuaGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80ZjRiMjAtNTEzNi00MjBiLWI1MTYt
YjZkNjRhMDAzZDllLzEvbWVuUE5KRzIyZUoxVExVNGhGd0hQS1VuaGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80ZjRiMjAtNTEzNi00MjBiLWI1MTYtYjZkNjRhMDAzZDll
LzEvbWVuUE5KRzIyZUoxVExVNGhGd0hQS1VuaGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdjAhuTJ
5JlsWd/VS0iyRA5fUtDYGm28mKg9sIVcJ8+P1rmpJsyXEvqdVjKazQhrTUAcTArP
BHtmpNjj/UqKU/WUCsiEbZguBzYLoUY713wOwnbKhji+SjreN5kCQZ5PPjbFuGGc
Ej0vYSVz4rkCC8FuCscxQJaOxMJmyj84LAWZsAWPHTwnrhRmuYKJmF8J4OGZimVk
AHTyACDY3TsJccxRwGJchnUg8ddp8OwWoX2E48yUxgh8SW3u8FwAKmBofGsVrFBk
kjkGmSVeH/JQk4fOMHiiodSnCFPGtyYKWb14AIrYCfTvjxs2hQuMQWINdYChd5U4
KFpwjXiYJ7+j4A==
-----END CERTIFICATE-----
Generated at Tue Oct 6 06:52:36 2026 by rpki-client