Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
File:                     FumqrOUCeVhbXFpdjuhWEGhsJsA.mft (raw, json)
Hash identifier:          jRMwjnc86EGNjrMHSMxfEK5Apu76xJE+CWTMZJTiIFg=
Subject key identifier:   3D:A9:F2:B9:AB:6A:8A:FC:F7:69:D9:BC:57:D9:A7:C2:17:CE:63:6F
Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
Certificate issuer:       /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Certificate serial:       01A106CA21664A8C231D95B0E83EA8BFB9D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
Manifest number:          1A87
Signing time:             Sun 04 Oct 2026 12:01:12 +0000
Manifest this update:     Sun 04 Oct 2026 12:01:12 +0000
Manifest next update:     Mon 05 Oct 2026 12:01:12 +0000
Files and hashes:         1: 04V3xL-wvyvCRWgSYkpGUkjiE8s.roa (hash: FQS7L+Hj2zSXnBRorh0m7ldyBShNLVTNeylqQBQZHwo=)
                          2: FumqrOUCeVhbXFpdjuhWEGhsJsA.crl (hash: DYl58ukj+u1scMr6ZdvKvFY4SSgtp4bRSP5lHTtqS0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:ca:21:66:4a:8c:23:1d:95:b0:e8:3e:a8:bf:b9:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
        Validity
            Not Before: Oct  4 12:01:12 2026 GMT
            Not After : Oct  5 12:01:12 2026 GMT
        Subject: CN=3da9f2b9ab6a8afcf769d9bc57d9a7c217ce636f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:74:7b:cc:ee:59:c7:5d:da:51:b4:05:6b:32:
                    76:8b:0d:60:54:fa:4e:db:72:15:c0:2a:2a:32:1a:
                    be:a8:a8:d9:d8:78:87:71:50:b0:3d:fd:20:b0:43:
                    00:69:04:65:93:13:43:26:3b:f3:55:76:37:d6:4f:
                    f5:34:c2:d0:03:84:28:88:4e:38:0e:a8:8b:b7:62:
                    2d:12:9a:4e:c0:88:8c:30:61:f2:64:db:c6:c1:ee:
                    e7:a7:20:28:46:fa:0b:86:1e:59:f7:b7:7b:74:b6:
                    50:15:dd:bd:57:dc:78:ed:26:3a:63:7b:30:c6:ac:
                    d0:c7:0e:46:d4:f8:6d:72:b0:15:56:b3:26:71:b4:
                    30:07:0f:7e:e0:0d:23:a5:f2:89:65:3d:3d:e0:84:
                    3c:26:1d:5a:b5:42:1e:98:c7:fd:00:78:47:f1:44:
                    40:53:8c:df:e7:93:5d:15:41:0f:0c:f5:9a:12:d6:
                    15:b1:fc:42:ae:b7:1b:15:40:b1:a9:01:a6:ca:dc:
                    5e:b9:ae:96:78:fa:5b:53:12:ce:b9:f1:f7:62:64:
                    a1:76:08:e1:21:36:49:7c:ee:42:ef:04:ae:5d:29:
                    83:30:d3:e1:31:8a:c4:f1:03:2d:2c:63:a2:3d:69:
                    63:bd:33:5a:3a:04:b3:8d:79:50:2d:18:1e:08:37:
                    17:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A9:F2:B9:AB:6A:8A:FC:F7:69:D9:BC:57:D9:A7:C2:17:CE:63:6F
            X509v3 Authority Key Identifier:
                keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:c5:ce:27:7c:b1:19:02:46:6d:a3:6c:c0:ac:97:f6:bb:02:
         c1:92:fa:47:d7:fa:17:99:9b:a8:a1:5b:ac:dd:6d:46:99:88:
         17:c0:7b:36:ff:e8:2f:e8:42:3c:98:2c:1d:85:53:98:29:8a:
         de:31:e3:62:29:4b:32:68:3c:92:e0:2c:86:2c:e0:0a:38:29:
         b6:ff:66:dd:3e:b2:d3:14:89:95:ba:90:5a:dc:ab:8b:d4:84:
         f2:8f:51:3c:7c:7e:ab:c9:68:ba:1c:57:2a:0b:92:ca:1c:8c:
         51:8e:57:b7:6b:47:97:59:3c:9d:bc:37:dd:4e:80:e0:00:1b:
         51:93:5e:90:09:a8:98:9d:a5:14:7b:7e:01:66:b1:b1:34:d2:
         6b:8d:84:07:0e:df:c2:ae:3c:cb:1c:ea:3d:de:a8:ae:3e:75:
         f5:b3:48:90:36:04:c1:39:34:51:37:81:33:b8:cb:2d:33:95:
         8e:09:3c:65:1f:8f:52:c9:5a:bc:1c:98:e1:fe:e0:5f:98:dc:
         36:29:42:10:a9:41:4a:be:5f:dc:28:74:41:ef:a2:d8:0f:cc:
         a0:40:13:06:54:08:ec:1a:31:a1:e9:b8:82:bf:79:8e:6c:97:
         a8:75:6e:c2:58:43:2a:af:2d:4d:60:85:d6:c2:18:65:3c:76:
         d1:94:d1:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEGyiFmSowjHZWw6D6ov7nZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZTlhYWFjZTUwMjc5NTg1YjVjNWE1ZDhlZTg1NjEwNjg2
YzI2YzAwHhcNMjYxMDA0MTIwMTEyWhcNMjYxMDA1MTIwMTEyWjAzMTEwLwYDVQQD
EygzZGE5ZjJiOWFiNmE4YWZjZjc2OWQ5YmM1N2Q5YTdjMjE3Y2U2MzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXR7zO5Zx13aUbQFazJ2iw1gVPpO
23IVwCoqMhq+qKjZ2HiHcVCwPf0gsEMAaQRlkxNDJjvzVXY31k/1NMLQA4QoiE44
DqiLt2ItEppOwIiMMGHyZNvGwe7npyAoRvoLhh5Z97d7dLZQFd29V9x47SY6Y3sw
xqzQxw5G1PhtcrAVVrMmcbQwBw9+4A0jpfKJZT094IQ8Jh1atUIemMf9AHhH8URA
U4zf55NdFUEPDPWaEtYVsfxCrrcbFUCxqQGmytxeua6WePpbUxLOufH3YmShdgjh
ITZJfO5C7wSuXSmDMNPhMYrE8QMtLGOiPWljvTNaOgSzjXlQLRgeCDcXwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2p8rmraor892nZvFfZp8IXzmNvMB8GA1UdIwQY
MBaAFBbpqqzlAnlYW1xaXY7oVhBobCbAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMmRmMGUtN2JmZS00NGE5LWJmODYt
ZjllZjk3NDIwNzY0LzEvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9lMmRmMGUtN2JmZS00NGE5LWJmODYtZjllZjk3NDIwNzY0
LzEvRnVtcXJPVUNlVmhiWEZwZGp1aFdFR2hzSnNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMXOJ3yx
GQJGbaNswKyX9rsCwZL6R9f6F5mbqKFbrN1tRpmIF8B7Nv/oL+hCPJgsHYVTmCmK
3jHjYilLMmg8kuAshizgCjgptv9m3T6y0xSJlbqQWtyri9SE8o9RPHx+q8louhxX
KguSyhyMUY5Xt2tHl1k8nbw33U6A4AAbUZNekAmomJ2lFHt+AWaxsTTSa42EBw7f
wq48yxzqPd6orj519bNIkDYEwTk0UTeBM7jLLTOVjgk8ZR+PUslavByY4f7gX5jc
NilCEKlBSr5f3Ch0Qe+i2A/MoEATBlQI7Boxoem4gr95jmyXqHVuwlhDKq8tTWCF
1sIYZTx20ZTRfg==
-----END CERTIFICATE-----
Generated at Sun Oct 4 16:56:59 2026 by rpki-client