Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
File:                     mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft (raw, json)
Hash identifier:          zUutOSPEcdlMku92wj7MAv68KTl3yGUhnBQdupm+WGE=
Subject key identifier:   AF:D2:D3:BC:BC:3D:7A:0B:3A:FD:EA:68:F4:13:FD:0C:ED:9A:F7:9C
Authority key identifier: 98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5
Certificate issuer:       /CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
Certificate serial:       01A17D739DB7B9EAF9B4A8E1A752576B36D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
Manifest number:          1A5A
Signing time:             Tue 27 Oct 2026 13:01:31 +0000
Manifest this update:     Tue 27 Oct 2026 13:01:31 +0000
Manifest next update:     Wed 28 Oct 2026 13:01:31 +0000
Files and hashes:         1: ii2y3_3OasAT5vVqpy7EkID9V2Q.roa (hash: eHIEjyO4o7PMmo5LxlNBD9RVF/znC0lnkJD1jokxFWo=)
                          2: mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl (hash: TO3Pj7rPnQ8xbtZPZwJxnQOUqsnhvO7PKUIMXB7S41w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:73:9d:b7:b9:ea:f9:b4:a8:e1:a7:52:57:6b:36:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982a541d5ac8ff7bb0408c7434ac1012eff73cb5
        Validity
            Not Before: Oct 27 13:01:31 2026 GMT
            Not After : Oct 28 13:01:31 2026 GMT
        Subject: CN=afd2d3bcbc3d7a0b3afdea68f413fd0ced9af79c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:21:93:ab:61:38:2c:35:bc:12:42:09:26:05:
                    72:b0:f8:af:ed:64:84:19:1c:9e:dd:fb:3d:e7:8b:
                    41:07:c8:db:8b:45:84:71:d1:63:a0:a1:7a:f5:fc:
                    c5:d7:bb:a1:84:7d:27:55:91:15:d1:a6:dc:9b:11:
                    48:67:69:fe:46:07:83:af:dd:51:16:5b:91:f6:e2:
                    34:38:0f:07:73:33:98:a5:df:6e:44:6d:d8:8b:ed:
                    3b:3a:b1:49:22:87:36:24:d7:16:59:17:ba:31:1b:
                    b7:43:ae:f3:a7:fe:d5:2d:ad:72:41:42:f8:0e:0d:
                    fa:60:4d:f3:ca:6d:90:e3:50:1d:89:70:d3:30:0b:
                    fa:7f:0c:90:a5:b2:c7:5d:5f:dd:9f:d2:33:89:18:
                    3e:d7:fa:14:3e:e2:83:43:9f:ac:5a:fe:f1:9f:99:
                    89:57:d7:1c:ec:cf:e3:7d:a1:07:d5:a4:a9:f8:84:
                    a7:15:d0:1d:32:04:e1:51:ea:e5:88:be:23:89:9d:
                    2e:49:97:98:cc:f9:8d:33:5a:78:56:4c:a2:75:53:
                    ac:cf:30:19:10:85:8b:c0:c3:5d:46:3c:b2:5e:5a:
                    e7:3d:01:96:bc:9e:2e:6d:f5:1d:c0:af:0b:82:e1:
                    9d:e8:44:ae:d9:aa:93:61:4c:36:85:51:e3:9d:ba:
                    a1:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:D2:D3:BC:BC:3D:7A:0B:3A:FD:EA:68:F4:13:FD:0C:ED:9A:F7:9C
            X509v3 Authority Key Identifier:
                keyid:98:2A:54:1D:5A:C8:FF:7B:B0:40:8C:74:34:AC:10:12:EF:F7:3C:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCpUHVrI_3uwQIx0NKwQEu_3PLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9cf3b-9572-4992-b247-01208d86ddcc/1/mCpUHVrI_3uwQIx0NKwQEu_3PLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:85:83:1e:38:f3:9c:3a:9d:e3:35:05:34:9d:c1:39:76:d8:
         02:7a:75:8a:ef:25:d4:46:97:b5:e5:55:fa:0b:a4:0e:49:60:
         6e:c5:62:6c:8d:0e:17:48:ca:a6:9a:d0:c4:e5:50:12:fb:3a:
         4c:9f:22:58:f0:9d:36:df:ba:78:c5:b9:ce:b2:0c:a8:4f:58:
         c1:e5:33:06:4a:90:22:2b:02:3e:5a:1d:3b:cb:4e:47:86:76:
         d5:5a:e4:f0:67:75:1c:b3:98:62:cb:be:b5:6e:77:56:6b:5b:
         43:18:d2:7e:c7:af:9c:16:a4:45:8f:9e:de:55:bf:8c:d9:05:
         70:60:92:6b:68:25:c9:f2:e2:59:cc:e6:f1:db:c7:18:7e:8c:
         d3:47:b2:e2:b0:58:98:1d:8e:74:fe:e8:94:36:c8:84:67:5a:
         8c:00:b8:b5:18:11:29:44:4f:6d:d5:44:8f:33:d2:7e:8a:ef:
         aa:0f:d2:ae:da:ce:5c:1d:2f:dc:32:de:3b:33:74:b3:15:f3:
         c4:6f:e2:1b:26:d6:e5:94:ad:41:ba:92:cd:2e:59:ea:24:d2:
         40:3d:ad:70:6b:20:fe:6f:02:5b:74:2b:fa:ec:41:a3:8f:fc:
         c4:85:6c:ff:38:99:45:8d:3a:38:88:7f:74:bb:92:54:c4:7e:
         10:6c:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:36:37 2026 by rpki-client