Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
File:                     C7PnOqi38K872EAFctrnKw1G9Vw.mft (raw, json)
Hash identifier:          fKwOLcG1ctKBiT6w+cMNoLI01CpzZDq7VjjEkO/zioM=
Subject key identifier:   35:F2:3E:3C:C8:A7:95:04:73:EF:E3:B9:0D:99:30:0B:55:1E:10:AC
Authority key identifier: 0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C
Certificate issuer:       /CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
Certificate serial:       01A14FF60749BC167C7213C1E7999BC8807F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
Manifest number:          0F83
Signing time:             Sun 18 Oct 2026 17:01:26 +0000
Manifest this update:     Sun 18 Oct 2026 17:01:26 +0000
Manifest next update:     Mon 19 Oct 2026 17:01:26 +0000
Files and hashes:         1: 4oHL96070XVJFK5YR2z3SGTLdMY.roa (hash: FF1916bNfm13YDHdzfWvKY2B8uJg3LA5NBIqV3b8KEA=)
                          2: 7ZWwgnvwU4U_1-WB90W9zaIeApk.roa (hash: pXdrhZt6u9TZRpK/zMCuOmrnZo7nb4SnqRLes1rkitE=)
                          3: C7PnOqi38K872EAFctrnKw1G9Vw.crl (hash: ak3QezwmMLYAUwOH2Z7yisNysCBgB7jCpgEMLGt/s0k=)
                          4: dGGdzraFBMqQuQOaaYdWRwXkWRo.roa (hash: 2J+i3mFaVsHOA07pasr4FZkQypfzyjabfUuePsjfpFk=)
                          5: mCPvVZ52cqu_7fQiYfxNWTgmIyU.roa (hash: MKIXaK5pXObdOC8zIpNfkiNlH80bR9ObWjRqGl0bxns=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 17:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4f:f6:07:49:bc:16:7c:72:13:c1:e7:99:9b:c8:80:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb3e73aa8b7f0af3bd8400572dae72b0d46f55c
        Validity
            Not Before: Oct 18 17:01:26 2026 GMT
            Not After : Oct 19 17:01:26 2026 GMT
        Subject: CN=35f23e3cc8a7950473efe3b90d99300b551e10ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:38:e4:4e:bc:cd:16:3a:7c:c2:93:9b:d3:20:
                    63:ee:72:0b:5e:95:20:bc:62:d8:f9:b2:fe:01:1c:
                    ba:b8:4c:7e:9e:c2:72:37:f3:89:c0:ca:a9:ce:cd:
                    61:b2:f4:53:37:da:57:1b:e1:21:63:89:66:3d:9a:
                    d5:5c:86:f5:67:e8:92:a3:d8:8f:3d:e7:48:b3:a5:
                    ae:fe:2b:71:eb:a5:76:06:cd:c2:cc:00:d8:96:c8:
                    58:59:ee:ab:3d:18:56:3b:bf:34:d4:77:e0:86:e7:
                    a4:63:90:75:1e:7e:11:26:05:ea:c0:00:f5:70:50:
                    d6:bb:a2:19:d6:ad:2f:7c:95:32:89:e7:d9:a6:b7:
                    1e:3e:92:6c:a7:59:25:dd:f6:fe:fd:41:df:e0:74:
                    39:5e:e3:71:48:c9:6f:f0:60:b3:e9:15:84:58:af:
                    c6:4d:66:51:82:ad:8d:d8:6f:1d:ec:a0:c2:c3:19:
                    10:60:97:45:ef:36:e7:d1:67:02:6d:2f:34:f3:2c:
                    28:7e:71:3b:00:7f:db:c4:9b:94:55:ff:2c:31:87:
                    53:65:d5:31:14:94:64:63:1b:08:ad:c2:ff:03:4a:
                    fe:35:e2:d4:99:50:74:b2:80:e5:dd:43:f3:d9:83:
                    23:99:fa:ff:e1:93:50:65:79:01:58:e4:10:7a:1f:
                    f9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F2:3E:3C:C8:A7:95:04:73:EF:E3:B9:0D:99:30:0B:55:1E:10:AC
            X509v3 Authority Key Identifier:
                keyid:0B:B3:E7:3A:A8:B7:F0:AF:3B:D8:40:05:72:DA:E7:2B:0D:46:F5:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7PnOqi38K872EAFctrnKw1G9Vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/eff67f-40a9-4775-a9c2-ad28fa966b51/1/C7PnOqi38K872EAFctrnKw1G9Vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:33:4e:ad:fd:f9:4c:01:c8:27:58:42:01:3b:5b:7d:84:93:
         b3:e7:16:5a:54:ac:e9:aa:5c:28:2c:43:31:3c:91:87:f6:78:
         e9:e1:99:f9:1b:0b:6b:d6:bb:67:2b:88:7a:4b:a7:d7:5e:de:
         5e:a4:38:7f:35:51:85:b5:31:5a:81:82:5f:15:bc:ec:02:12:
         da:5b:ea:7a:f5:ac:cb:82:6c:38:67:9c:03:49:f7:90:d1:d5:
         a4:64:d6:83:00:2a:e1:9b:d0:ef:0e:ed:ec:2a:df:78:84:45:
         dc:79:52:d8:ae:10:90:04:5f:df:ee:4b:be:29:28:15:43:0e:
         d0:3b:65:3e:4e:7b:6d:44:b4:4a:71:2b:ff:18:51:12:1d:b6:
         34:24:8d:ec:a5:05:7a:8c:f4:84:07:7e:1d:82:9b:d0:9b:61:
         6c:0e:58:81:81:11:47:1f:ad:76:a6:f7:21:4c:b3:f9:b0:a5:
         3b:33:3a:f2:55:17:0b:e3:be:b9:fe:c8:99:29:fd:72:4a:d3:
         19:a7:f8:87:c1:69:fe:53:99:d7:ef:a6:d8:20:1c:95:dc:f6:
         95:46:a1:a4:d3:e2:35:8c:60:8e:d4:73:7e:41:85:18:32:64:
         53:5f:b3:36:46:e0:5c:74:b1:d6:fc:98:6f:a2:f7:3a:c2:db:
         4b:5b:3e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 04:07:51 2026 by rpki-client