Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
File:                     oeX8Y1oad1V0t3muqczWUkzE0Pk.mft (raw, json)
Hash identifier:          +3jqH6qKMS3V8rhbbmubJSH0YxBSmz2UyqV0DMwOIrk=
Subject key identifier:   E7:4E:85:D4:60:C1:D5:6B:00:B8:8A:E7:D9:05:BB:E4:52:BF:86:17
Authority key identifier: A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9
Certificate issuer:       /CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
Certificate serial:       01A10436D19A53B093D9755CADF5308C9B6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
Manifest number:          0403
Signing time:             Sun 04 Oct 2026 00:01:03 +0000
Manifest this update:     Sun 04 Oct 2026 00:01:03 +0000
Manifest next update:     Mon 05 Oct 2026 00:01:03 +0000
Files and hashes:         1: h0OnQS_LDhHmHtdq9MOUPdDXqMY.roa (hash: fvbR4O3MuxsJi7oWYqjm2ohLFx0/5Mha06ohU0AwT/A=)
                          2: hM3q0tm1hGdyTy4Pq63zsy3D7-Q.roa (hash: LpyLjFrIDk+LFAUQPWPNyV38HQSScxJQeF0sXMSFCqU=)
                          3: oeX8Y1oad1V0t3muqczWUkzE0Pk.crl (hash: ailGm02SkQ7zKaMF2rV/DPsb5Bkn18ZQ+Emn4DWFUlI=)
                          4: zY55egblxOayG_XFLEDuLnn2KzY.roa (hash: 3VtoSxzQ+1ALd4QWfODnz+BMqwgszTlt4xRR53OtSeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 20:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:04:36:d1:9a:53:b0:93:d9:75:5c:ad:f5:30:8c:9b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
        Validity
            Not Before: Oct  4 00:01:03 2026 GMT
            Not After : Oct  5 00:01:03 2026 GMT
        Subject: CN=e74e85d460c1d56b00b88ae7d905bbe452bf8617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:38:47:ae:22:14:ae:80:37:7d:9a:f3:fe:55:
                    28:6c:93:2a:75:ac:90:8e:eb:50:4d:8e:40:27:46:
                    d7:9d:a5:85:a5:dd:3d:3f:3e:37:6a:fd:0b:c1:c6:
                    b9:1e:0f:a2:94:22:0b:7a:5b:5a:4e:9f:f7:17:17:
                    a3:8a:2e:12:10:06:9c:4e:b5:ae:57:a8:a8:44:eb:
                    5f:ea:ac:c7:d3:1d:08:47:b2:bf:f1:91:92:8c:73:
                    69:95:8f:a9:92:4c:b7:5d:ec:8d:ee:a4:55:e9:a6:
                    b6:d9:63:fd:f7:83:e8:05:02:3b:2c:53:61:3b:b8:
                    6b:77:4a:13:4c:af:14:22:ee:df:d8:0d:8c:4d:2a:
                    6b:8e:6a:db:f0:f6:51:0b:9b:6a:6a:06:36:4a:3a:
                    57:64:67:60:7b:c8:10:a5:10:1d:e9:4a:67:10:ae:
                    bc:b0:81:92:02:6d:2d:5a:f0:a6:ae:ba:fb:fd:5a:
                    9b:01:bb:c6:e4:36:3f:1a:98:91:77:d0:3b:b8:dc:
                    fd:98:b3:3e:94:1f:df:d1:66:50:ee:b7:a1:d0:41:
                    c1:40:83:b7:0c:e1:fd:83:ca:a0:74:66:c8:0d:4c:
                    5f:48:ba:a4:17:84:72:1c:2e:fd:d3:77:d1:41:00:
                    44:04:9f:90:b9:2f:9f:7e:94:c4:ae:fc:cd:54:07:
                    e1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4E:85:D4:60:C1:D5:6B:00:B8:8A:E7:D9:05:BB:E4:52:BF:86:17
            X509v3 Authority Key Identifier:
                keyid:A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:bb:ca:1b:bb:70:49:6d:75:88:c9:57:8a:c8:67:08:df:fb:
         80:7e:dc:95:94:c5:9d:77:87:a5:e3:68:91:6a:30:33:b2:73:
         f0:6c:3c:91:41:58:72:0e:25:82:91:b8:16:57:31:5e:5c:7a:
         c9:6c:bf:07:53:f1:97:9c:26:1c:2f:66:90:c7:ef:49:ca:22:
         09:aa:d5:ab:29:fa:33:15:3d:83:a9:46:fb:40:5a:6b:f9:3b:
         82:16:28:89:36:43:8d:1b:fe:37:d8:c6:d7:e8:16:b8:d3:41:
         dd:8e:38:d0:3c:6b:d8:99:58:8d:14:9e:81:99:0b:77:e3:df:
         3c:38:8c:6a:f7:5c:22:51:3b:45:32:8c:9a:06:d3:de:92:eb:
         66:d8:49:56:d7:3b:2e:22:5a:03:b3:08:5e:53:d2:66:29:39:
         30:ea:b6:24:c6:15:6d:91:b0:a6:44:73:f8:87:b4:e6:ad:99:
         41:e8:37:38:27:67:9a:69:fd:99:08:47:9a:0a:5f:fd:55:68:
         ca:26:cb:bc:93:f1:e6:e0:92:d0:07:b7:32:d7:11:93:24:82:
         84:96:9b:46:c3:f7:9f:94:44:55:2d:e3:78:ee:f4:eb:1f:a7:
         66:4d:5b:89:56:e3:e0:85:07:7c:be:93:4c:e1:8c:03:63:73:
         07:ba:8b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 06:38:26 2026 by rpki-client