Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.mft
File:                     _eV3-qI1cXrhNDjh1S6ktOPaVJg.mft (raw, json)
Hash identifier:          nbehqUvmD3beNl5kcv5i5P0NGOO3noErbjUdXXuT+eo=
Subject key identifier:   DB:15:79:64:7F:9C:97:A6:71:AF:08:87:76:31:E7:AF:28:3F:48:78
Authority key identifier: FD:E5:77:FA:A2:35:71:7A:E1:34:38:E1:D5:2E:A4:B4:E3:DA:54:98
Certificate issuer:       /CN=fde577faa235717ae13438e1d52ea4b4e3da5498
Certificate serial:       01A12B7B37135009EDA33B35F947534C9451
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.mft
Manifest number:          01BC
Signing time:             Sun 11 Oct 2026 15:00:57 +0000
Manifest this update:     Sun 11 Oct 2026 15:00:57 +0000
Manifest next update:     Mon 12 Oct 2026 15:00:57 +0000
Files and hashes:         1: 5AgZfb7qtshb6AxnYzgA65E3i4o.roa (hash: tuOl5ypd9y12iLvr3Zp8dfLyPEUJgNfrWjDKhrIfKlk=)
                          2: Q-B9indj73Lg6hsM9n7_RDKH62Y.roa (hash: vX34viLIqul0SZtYJw5VNRkDYaWbHGecJ2MEb+4xbng=)
                          3: _eV3-qI1cXrhNDjh1S6ktOPaVJg.crl (hash: ECpalkUbj4O7fwgjcRRqZIRKmctuHhguK+ZaHb11yeQ=)
                          4: ulKvZr85E6Ggsf5I5RjFVyylS5o.asa (hash: L9bsFn5suMrLvciGh+SS1o4AgkrgIGPNo0xRVc+I4GU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:7b:37:13:50:09:ed:a3:3b:35:f9:47:53:4c:94:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fde577faa235717ae13438e1d52ea4b4e3da5498
        Validity
            Not Before: Oct 11 15:00:57 2026 GMT
            Not After : Oct 12 15:00:57 2026 GMT
        Subject: CN=db1579647f9c97a671af08877631e7af283f4878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:49:53:63:dc:40:ba:51:95:d7:eb:80:29:d5:
                    c2:f9:fa:3e:f3:d7:1b:14:f2:2e:3e:13:73:d0:8b:
                    c2:8e:8b:e7:a4:1f:fb:d7:b4:b8:ce:72:13:cf:44:
                    9f:a4:22:63:7c:a4:ac:a1:cc:55:03:e8:5a:c5:21:
                    75:5e:8a:46:5e:0a:50:e5:f2:c6:17:9c:b8:a6:75:
                    d6:a3:56:d0:be:b7:46:1f:01:58:99:5e:6e:31:ca:
                    6f:72:02:dc:8e:41:ab:3a:01:c5:c7:34:c3:c3:5e:
                    10:6c:e1:55:84:a1:3b:a2:9c:6c:24:49:ad:41:90:
                    dc:12:6e:7c:da:d7:c7:04:7f:5e:b6:03:90:d2:42:
                    bb:cf:aa:a2:9a:ae:78:44:20:9b:6a:0c:ec:ea:f4:
                    95:f6:42:4f:3e:b7:92:0f:ff:63:7d:f7:37:b2:79:
                    cf:74:f1:7a:f0:15:e3:e1:4d:0b:b9:f9:ad:ae:e4:
                    ac:68:d3:61:8e:ab:79:a0:50:7f:e5:4f:5b:66:2e:
                    60:56:77:6d:58:10:d5:ae:cb:40:27:04:fd:2c:3d:
                    e6:41:ba:9d:9f:12:65:57:7f:58:8f:00:98:ad:90:
                    0b:c8:13:15:a6:3b:a6:f1:aa:92:30:65:9d:ac:ae:
                    91:0d:ae:d1:fa:bf:6b:42:10:d5:3a:a5:14:62:aa:
                    c2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:15:79:64:7F:9C:97:A6:71:AF:08:87:76:31:E7:AF:28:3F:48:78
            X509v3 Authority Key Identifier:
                keyid:FD:E5:77:FA:A2:35:71:7A:E1:34:38:E1:D5:2E:A4:B4:E3:DA:54:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:77:1e:ed:e8:7b:9f:12:ca:93:c2:89:68:8c:08:a6:b0:04:
         60:a2:ce:ca:a7:9d:95:76:b0:41:0a:cd:a3:c4:fb:06:2b:0f:
         d3:f8:c8:88:b8:83:a9:4a:45:4b:a7:55:e8:5d:b4:82:fc:8d:
         dd:a4:9b:ae:fa:79:e2:0a:8f:a2:51:d6:bd:d9:d0:63:fe:cf:
         c6:3d:fe:3d:8a:ba:74:63:81:5b:57:30:14:96:a1:1c:24:3d:
         02:c5:af:97:47:97:39:ac:e0:12:ed:5d:bf:7f:ad:95:2d:df:
         59:ad:4e:6e:ab:b6:bb:a1:5c:be:25:72:35:1a:c8:6c:56:32:
         7a:4c:21:9e:62:c4:08:f7:d6:dc:18:90:eb:87:7d:aa:61:27:
         5a:55:29:57:0c:e3:10:cd:9b:80:e2:03:42:ac:fd:4f:68:d1:
         b9:34:3e:20:81:9c:38:1e:db:0d:6f:fd:7e:b3:8c:9d:fb:f4:
         6d:52:32:ff:6d:70:26:e0:52:78:98:e4:a3:c6:ac:22:3b:f6:
         1d:0c:98:88:2c:75:60:f5:df:7a:52:9e:55:17:71:ca:35:b7:
         a1:e5:6a:a3:85:a8:1b:82:78:84:df:b4:22:e0:6c:d8:be:66:
         d9:25:f2:b9:92:85:db:fe:b6:0a:e6:44:8a:7b:dd:9d:e8:71:
         1b:35:6e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 16:57:07 2026 by rpki-client