Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/accc6e-e074-4d66-9f01-3b5280880280/1/_79H6X6YpXXpTp7KUIOUA9CGS0g.mft
File:                     _79H6X6YpXXpTp7KUIOUA9CGS0g.mft (raw, json)
Hash identifier:          52lwLAN+Cwb/7sHlAW+YfgSFAKO1u+9qtMxEVwQ6QrY=
Subject key identifier:   E3:11:F4:21:35:C4:1F:AE:A9:80:5B:43:CE:41:18:C6:BB:FE:2C:A6
Authority key identifier: FF:BF:47:E9:7E:98:A5:75:E9:4E:9E:CA:50:83:94:03:D0:86:4B:48
Certificate issuer:       /CN=ffbf47e97e98a575e94e9eca50839403d0864b48
Certificate serial:       01A1656B202971037E47DA926B11B06520F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_79H6X6YpXXpTp7KUIOUA9CGS0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/accc6e-e074-4d66-9f01-3b5280880280/1/_79H6X6YpXXpTp7KUIOUA9CGS0g.mft
Manifest number:          3E
Signing time:             Thu 22 Oct 2026 21:01:21 +0000
Manifest this update:     Thu 22 Oct 2026 21:01:21 +0000
Manifest next update:     Fri 23 Oct 2026 21:01:21 +0000
Files and hashes:         1: _79H6X6YpXXpTp7KUIOUA9CGS0g.crl (hash: IkKn/ZXMiTZLIastsSe2sgAn9jKm1Qye4PiXOZwKtNg=)
                          2: sJCGnJbbwiHipYYa4eapbAphVl4.roa (hash: gOVJfMzsb34BL7a4VlTBtuSjTnSrfj6wI4+jDmiiAJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/accc6e-e074-4d66-9f01-3b5280880280/1/_79H6X6YpXXpTp7KUIOUA9CGS0g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/accc6e-e074-4d66-9f01-3b5280880280/1/_79H6X6YpXXpTp7KUIOUA9CGS0g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_79H6X6YpXXpTp7KUIOUA9CGS0g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 21:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:65:6b:20:29:71:03:7e:47:da:92:6b:11:b0:65:20:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffbf47e97e98a575e94e9eca50839403d0864b48
        Validity
            Not Before: Oct 22 21:01:21 2026 GMT
            Not After : Oct 23 21:01:21 2026 GMT
        Subject: CN=e311f42135c41faea9805b43ce4118c6bbfe2ca6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bf:62:ff:3b:87:e6:ca:ee:28:b0:d6:8d:be:
                    5b:69:5a:fe:e1:3f:69:26:4e:19:bd:41:b5:5a:58:
                    8d:aa:e4:9d:a4:d6:52:f2:28:fa:41:cd:1d:6f:94:
                    7c:c1:0f:54:c1:e2:e8:c8:ec:79:5e:dc:3b:bd:ad:
                    2c:f5:0b:2a:b7:8b:4b:5e:d1:28:49:22:19:8e:56:
                    94:d2:17:a4:f4:a6:c0:1a:50:fe:3a:69:05:c3:e7:
                    a0:96:e3:4f:6c:bc:3c:94:25:e2:8a:aa:27:98:50:
                    b5:2d:3e:2a:48:03:72:34:99:17:06:33:55:4c:99:
                    14:28:67:5a:2b:cb:90:b3:25:d4:63:90:f5:6d:ae:
                    49:78:65:01:01:09:69:6a:aa:75:a2:fc:17:7e:b9:
                    72:a5:00:88:f5:d9:68:eb:1d:d3:9a:ba:67:4f:aa:
                    64:cb:d0:20:a9:fb:94:a9:b2:bf:2b:83:fe:ee:f0:
                    1a:97:d3:a0:24:db:d9:de:d8:51:ae:df:07:12:a9:
                    a3:b4:a4:82:f7:8f:03:23:d7:96:a4:02:2b:5b:90:
                    0b:30:40:ae:aa:05:ee:27:cb:57:94:a6:9f:dd:22:
                    d7:78:3b:22:94:16:fc:aa:c5:ef:d5:95:b7:b8:73:
                    b9:ad:0b:23:2d:11:3c:69:27:65:09:99:77:bb:c4:
                    6f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:11:F4:21:35:C4:1F:AE:A9:80:5B:43:CE:41:18:C6:BB:FE:2C:A6
            X509v3 Authority Key Identifier:
                keyid:FF:BF:47:E9:7E:98:A5:75:E9:4E:9E:CA:50:83:94:03:D0:86:4B:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_79H6X6YpXXpTp7KUIOUA9CGS0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/accc6e-e074-4d66-9f01-3b5280880280/1/_79H6X6YpXXpTp7KUIOUA9CGS0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/accc6e-e074-4d66-9f01-3b5280880280/1/_79H6X6YpXXpTp7KUIOUA9CGS0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d7:50:27:cd:98:9e:7e:29:a6:dc:df:22:80:ee:b7:98:6d:
         2a:56:4e:84:65:c3:ea:8e:e1:f0:84:dd:07:fd:1c:a1:2c:d3:
         6e:50:b3:d8:48:b9:a9:b6:9e:96:95:58:df:a3:03:86:d7:1b:
         ba:f6:e1:60:c3:8a:bb:aa:9c:bf:13:d4:d8:ee:e3:7c:79:05:
         e1:7f:03:d5:d8:48:09:50:10:72:00:78:a1:d9:fe:4d:2b:d6:
         fa:c1:7f:50:ee:27:07:cb:84:c5:03:07:a8:81:fe:50:4d:41:
         02:ed:c6:37:8e:89:eb:36:17:62:cc:f7:08:25:8e:cc:56:3a:
         ba:13:f2:f3:54:c8:bb:17:ab:b8:69:bb:69:3b:64:3a:92:7b:
         ac:5b:e2:53:80:c0:34:a8:f1:bd:41:ee:6b:01:8f:bc:7b:68:
         f2:cf:cf:75:29:8e:1d:eb:05:37:5f:0d:fd:cf:36:46:e4:af:
         88:0d:f7:d7:14:8a:5d:01:26:f4:a2:af:b1:d8:8b:4e:5d:dd:
         ec:19:1b:76:24:1c:36:ca:54:78:e5:b6:b9:1a:84:bc:e0:00:
         ce:68:97:4f:5a:5e:d3:a9:43:d9:2e:5c:f0:ba:07:4d:1d:0d:
         ef:18:32:55:79:ed:f1:83:58:21:5c:78:bc:4a:58:82:18:df:
         d1:fa:7d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:11:57 2026 by rpki-client