Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
File:                     7qR10Itvi3jtEbDKTRNt6zi8mRs.mft (raw, json)
Hash identifier:          7rHOyJsuN4P18wkP9lKIeitmWQtngjksecTZw8QnxdQ=
Subject key identifier:   27:29:3B:AE:BC:59:0D:F0:60:9F:1C:D0:C9:EB:5B:12:C7:4B:F9:B9
Authority key identifier: EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B
Certificate issuer:       /CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
Certificate serial:       01A147CE1A413E156E368D9DFFDEAF6D0911
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
Manifest number:          1AAC
Signing time:             Sat 17 Oct 2026 03:00:51 +0000
Manifest this update:     Sat 17 Oct 2026 03:00:51 +0000
Manifest next update:     Sun 18 Oct 2026 03:00:51 +0000
Files and hashes:         1: 7qR10Itvi3jtEbDKTRNt6zi8mRs.crl (hash: CW0Xewx/zfgMNjSr89areMT9oXiRCpwNuPUG6JdXJ0U=)
                          2: Uzq6jnjiBmJhQ77sdYIGU3rtoW8.roa (hash: TaYrbh565HuhRP+MsEApRFlphctYPIuvYOeurCpD+fA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 00:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:47:ce:1a:41:3e:15:6e:36:8d:9d:ff:de:af:6d:09:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eea475d08b6f8b78ed11b0ca4d136deb38bc991b
        Validity
            Not Before: Oct 17 03:00:51 2026 GMT
            Not After : Oct 18 03:00:51 2026 GMT
        Subject: CN=27293baebc590df0609f1cd0c9eb5b12c74bf9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:2f:65:81:26:6f:9b:0e:d5:a6:cc:16:ff:
                    f5:e3:53:e7:46:50:23:d4:5c:b8:10:63:ff:9d:10:
                    59:f7:d9:5c:a0:4a:56:7d:e2:1d:8f:12:fc:da:2d:
                    a6:95:1d:1a:84:99:c0:92:ae:a6:c1:8b:fe:4b:01:
                    ff:47:07:68:90:e6:fa:66:99:23:14:1f:59:85:fe:
                    f8:7d:19:a8:f3:15:0c:82:6a:16:e4:ed:78:b5:cd:
                    62:bd:9c:da:65:07:ea:56:ab:8d:8c:5e:c3:1f:9a:
                    b6:ed:34:1b:fb:e3:3c:27:5f:ca:11:77:97:78:c7:
                    12:58:71:b4:3f:ab:1c:31:d8:57:b9:51:58:fa:aa:
                    83:52:56:c6:22:8d:66:78:c5:ab:a0:55:da:8e:06:
                    ac:ef:f6:e0:0a:41:8f:12:97:cb:20:43:e3:63:93:
                    c6:fc:be:c3:4e:60:f1:97:2c:8b:d6:06:e3:95:1a:
                    e3:82:11:f9:a6:21:47:03:1b:5b:e8:24:2e:33:7b:
                    c5:83:31:55:18:1f:22:43:d3:c4:12:bd:5f:60:b5:
                    16:03:49:5e:ec:6b:64:12:d6:b6:ec:3b:46:b2:6b:
                    2f:e0:0f:57:e1:59:80:81:3a:8c:9f:8e:44:b2:5d:
                    78:69:63:a2:48:d7:72:d2:ce:6b:fc:93:80:53:19:
                    16:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:29:3B:AE:BC:59:0D:F0:60:9F:1C:D0:C9:EB:5B:12:C7:4B:F9:B9
            X509v3 Authority Key Identifier:
                keyid:EE:A4:75:D0:8B:6F:8B:78:ED:11:B0:CA:4D:13:6D:EB:38:BC:99:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7qR10Itvi3jtEbDKTRNt6zi8mRs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/3ccaff-71f2-4982-b534-36e39fed7bed/1/7qR10Itvi3jtEbDKTRNt6zi8mRs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:e5:e2:e1:34:47:eb:e0:19:cb:29:1e:86:46:7b:f4:05:1f:
         8a:4d:17:4d:fe:11:b4:68:e9:3d:30:ed:8c:5c:9c:3b:06:19:
         b0:1b:51:ac:b3:85:13:4d:d0:56:39:08:4f:84:13:a3:f7:9c:
         f7:9d:82:c4:1f:29:4c:ec:2a:09:07:5e:fb:3f:a1:b9:c2:ae:
         10:b7:07:49:26:43:ba:02:d4:31:a6:bd:0b:d4:ff:91:e0:cf:
         93:fb:2a:7d:9b:ad:ef:1b:49:aa:db:b0:06:04:c9:33:3e:b7:
         02:2e:58:8b:ab:4f:84:ae:7a:f2:5b:66:da:b6:7d:b7:74:6b:
         31:a1:06:82:32:d1:a0:be:27:5d:12:59:e7:5a:2a:c5:a9:67:
         8f:eb:a9:b8:56:86:cb:47:c4:9f:32:7e:05:86:03:9e:e3:1e:
         76:6a:56:7d:7c:60:ef:b7:3f:65:ee:50:20:7d:4b:8c:24:2d:
         49:52:63:85:ff:2e:5f:ad:a1:6d:4d:97:d0:9f:83:b3:fd:00:
         2a:0b:19:d3:87:42:cf:d5:41:3c:27:9d:ab:b8:2e:96:d2:f9:
         94:d4:f8:f9:f0:b6:b7:c7:fa:f1:15:4a:f4:d1:64:e7:aa:5d:
         e7:39:9b:fa:e2:c9:2f:32:b8:17:2c:97:fb:9a:95:ab:3b:fd:
         5a:19:d1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 08:47:17 2026 by rpki-client