Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft
File:                     dr24CfTd5EyCqeW9i3cS1tdjvws.mft (raw, json)
Hash identifier:          P65yLnK6/5/UgAfKwesO1uNXGU0f9KB3uRR88E3PJJU=
Subject key identifier:   87:01:B8:61:1E:53:05:7B:90:C6:A3:C1:EC:3C:2B:61:BF:85:2C:19
Authority key identifier: 76:BD:B8:09:F4:DD:E4:4C:82:A9:E5:BD:8B:77:12:D6:D7:63:BF:0B
Certificate issuer:       /CN=76bdb809f4dde44c82a9e5bd8b7712d6d763bf0b
Certificate serial:       01A132C72818E5AB0264481D467316E2490D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft
Manifest number:          029E
Signing time:             Tue 13 Oct 2026 01:01:15 +0000
Manifest this update:     Tue 13 Oct 2026 01:01:15 +0000
Manifest next update:     Wed 14 Oct 2026 01:01:15 +0000
Files and hashes:         1: DElIG2I4poXxTLyxmk8qHhToIrc.roa (hash: EymYSA7xmGhavoS2+cvnhWPb/p1asE537I39DsH2QsI=)
                          2: dr24CfTd5EyCqeW9i3cS1tdjvws.crl (hash: KLBm9L2FLAgjhES775zrerLrKdGYC59kQtm19zvxo1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 23:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:c7:28:18:e5:ab:02:64:48:1d:46:73:16:e2:49:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76bdb809f4dde44c82a9e5bd8b7712d6d763bf0b
        Validity
            Not Before: Oct 13 01:01:15 2026 GMT
            Not After : Oct 14 01:01:15 2026 GMT
        Subject: CN=8701b8611e53057b90c6a3c1ec3c2b61bf852c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:81:85:35:ef:66:90:a8:0b:7b:e2:4a:52:
                    5d:c1:a7:ca:bb:88:7a:80:f4:7a:96:a3:8f:e8:6a:
                    83:ed:d5:5f:5c:80:55:b7:3d:ec:05:dc:68:60:61:
                    63:52:1e:35:e4:5a:9d:75:0e:17:68:91:75:ea:d4:
                    2d:74:74:dd:04:e6:03:ad:7b:2f:dc:72:72:25:4d:
                    b2:39:28:3b:77:88:8c:d6:c2:1c:fc:bb:32:c8:a6:
                    ef:f1:71:4d:94:33:e3:ea:47:b1:b7:9e:58:de:9e:
                    e6:f1:09:37:62:f9:3f:7f:f6:ac:0d:86:27:46:12:
                    9d:54:a0:19:9a:45:89:a2:0b:e0:a5:17:bf:ed:9f:
                    b6:a9:eb:23:5c:c8:3d:41:db:5a:d6:4b:24:52:82:
                    67:8f:2a:36:61:e5:cc:6c:99:6e:e7:2c:ae:cd:e5:
                    fd:09:87:5a:4a:95:b3:30:05:ca:68:25:de:59:d2:
                    a1:be:cc:a7:ae:9c:ad:2a:b6:1d:e4:71:8d:7b:b2:
                    02:df:1a:ff:4f:2c:86:5c:ae:72:cc:4a:87:7f:5b:
                    e2:21:21:00:e5:73:ab:87:9f:d1:d7:c5:c5:38:8e:
                    5d:71:e0:07:c6:18:70:3b:ce:17:ea:99:f7:ff:4a:
                    71:20:6a:07:95:8b:d3:63:9a:c2:35:1a:a0:ee:18:
                    5b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:01:B8:61:1E:53:05:7B:90:C6:A3:C1:EC:3C:2B:61:BF:85:2C:19
            X509v3 Authority Key Identifier:
                keyid:76:BD:B8:09:F4:DD:E4:4C:82:A9:E5:BD:8B:77:12:D6:D7:63:BF:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dr24CfTd5EyCqeW9i3cS1tdjvws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/76a811-8291-444b-9c96-d068adeabeac/1/dr24CfTd5EyCqeW9i3cS1tdjvws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:29:f2:a8:31:9c:92:7e:a0:72:e8:8b:9a:5a:a0:d8:7d:70:
         a5:9f:df:63:1d:1d:60:f3:38:c2:4e:a8:1b:77:00:db:d1:51:
         34:54:e2:46:39:30:83:f1:63:58:26:26:70:15:43:16:25:3d:
         91:80:3f:ba:2b:33:91:f5:34:a4:6a:31:bd:ce:45:3a:8f:eb:
         be:b5:66:ed:4b:68:53:9e:cc:ae:f9:cd:dc:70:6d:9d:e1:69:
         95:dc:be:29:35:71:bc:66:95:99:9d:eb:a9:b7:e3:a5:f0:c5:
         f5:f2:7a:bd:8a:25:7a:ff:05:52:75:29:7c:26:57:5b:9d:b6:
         49:ad:08:69:fb:cb:23:29:df:2e:a2:46:72:7b:7b:d1:de:b8:
         fb:f5:72:ff:d9:1d:c8:3c:22:9e:6f:e9:c7:f2:61:7e:6f:68:
         fb:c7:a5:4a:1c:c6:bd:33:2b:2f:97:ca:8e:06:54:d2:8b:10:
         07:33:a4:3f:d9:a4:77:cd:4b:85:07:26:77:ee:ea:7a:36:1e:
         5f:d5:48:20:98:93:61:91:77:e9:9b:4f:ac:cb:58:09:c8:53:
         3b:2b:4e:ec:f5:81:fe:44:73:2d:c4:fa:d6:dd:c4:e9:6b:46:
         b5:f3:d1:16:dc:df:1d:71:ce:af:8c:ad:28:fe:a9:dd:9e:ad:
         e6:41:2d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 08:12:10 2026 by rpki-client