Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft
File:                     MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft (raw, json)
Hash identifier:          NcDcupe/pxgZ1pC9IlelRctZeJUFOop9s4fmHrjtlaw=
Subject key identifier:   BB:10:EE:67:13:3E:0E:BF:20:85:70:D8:05:01:B6:13:FA:30:99:EF
Authority key identifier: 32:20:CD:6C:F3:F8:65:EF:6C:FA:04:22:2C:22:3C:F2:0E:E7:E0:48
Certificate issuer:       /CN=3220cd6cf3f865ef6cfa04222c223cf20ee7e048
Certificate serial:       01A14203A111C2772C459E5E152DA6A907A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft
Manifest number:          0120
Signing time:             Fri 16 Oct 2026 00:01:36 +0000
Manifest this update:     Fri 16 Oct 2026 00:01:36 +0000
Manifest next update:     Sat 17 Oct 2026 00:01:36 +0000
Files and hashes:         1: MiDNbPP4Ze9s-gQiLCI88g7n4Eg.crl (hash: ILC55fCuxi7PywERbA1lXUGRnd9PR3+gBBoDUozvn+M=)
                          2: kFL249yBJc4sSXnfovKwJ6mjCww.roa (hash: HJelDmFXzIdgkYrGpNACjTkxKKW9AU78etwdV7+OHDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 00:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:42:03:a1:11:c2:77:2c:45:9e:5e:15:2d:a6:a9:07:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3220cd6cf3f865ef6cfa04222c223cf20ee7e048
        Validity
            Not Before: Oct 16 00:01:36 2026 GMT
            Not After : Oct 17 00:01:36 2026 GMT
        Subject: CN=bb10ee67133e0ebf208570d80501b613fa3099ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:2f:11:5d:7d:56:51:99:52:f8:bd:2f:be:
                    ee:05:28:c3:d4:20:5b:49:55:ba:ee:ca:41:52:92:
                    3f:06:f1:fe:09:b2:60:de:a0:ad:2b:0b:ad:2e:a5:
                    cd:84:17:d2:47:e0:b1:f8:6b:e2:a3:18:bf:ac:1f:
                    2a:e4:36:46:a7:ee:74:6e:2c:c7:56:a6:02:c4:ae:
                    19:58:09:87:4c:93:64:9d:20:eb:4f:5c:ff:c4:ec:
                    e5:74:c8:be:c5:f5:f1:0a:2b:0c:ba:82:28:84:ae:
                    45:f0:a6:8c:e5:11:83:92:13:ef:47:fc:f6:7c:c3:
                    86:b4:53:e2:4d:96:2a:e2:c1:73:ee:01:d5:ed:21:
                    1c:81:58:63:92:2e:1d:c5:af:e3:31:bd:ba:23:95:
                    9f:70:05:f0:86:26:72:c1:26:e3:d6:90:9e:0f:f2:
                    d9:3a:35:1c:c4:46:23:ea:e9:0e:d2:b5:94:70:1f:
                    bf:35:44:30:e6:52:56:60:bd:ca:b1:27:6f:fe:a5:
                    b7:30:2e:6b:92:37:e5:49:b2:c7:81:2b:57:10:77:
                    f0:e6:7c:6b:74:47:76:b8:08:84:63:ae:25:86:bc:
                    54:20:11:94:f3:ac:4b:ea:fd:a8:08:30:56:5b:6f:
                    c3:73:33:1c:73:4d:99:18:1a:70:e1:99:9a:f1:b2:
                    d6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:10:EE:67:13:3E:0E:BF:20:85:70:D8:05:01:B6:13:FA:30:99:EF
            X509v3 Authority Key Identifier:
                keyid:32:20:CD:6C:F3:F8:65:EF:6C:FA:04:22:2C:22:3C:F2:0E:E7:E0:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/ef2192-f2d9-4a56-93f6-17382539b000/1/MiDNbPP4Ze9s-gQiLCI88g7n4Eg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e9:57:1e:b5:61:ce:e0:e8:4d:13:3c:f2:40:e2:5f:40:30:
         90:e3:4d:84:2f:8f:b5:a6:44:41:b7:ef:47:fa:5a:40:d2:a3:
         f3:08:42:94:80:ab:18:8f:5b:f6:5b:e4:99:b8:94:ea:b1:e1:
         98:ed:94:db:73:00:1b:28:67:fe:6c:a2:26:3d:5f:59:e5:32:
         a8:16:70:5f:e7:73:b6:bd:b2:54:bc:5b:15:85:73:55:5a:82:
         6b:02:6e:b5:26:51:fc:8c:32:54:2e:c5:6e:5d:eb:89:08:b6:
         73:67:f9:f9:41:eb:5b:d3:22:8d:f2:81:71:a6:67:36:08:5c:
         b1:c4:07:b8:c0:18:ce:ec:a3:a5:2d:4b:38:10:d4:c6:5c:bf:
         a6:d9:02:ce:ba:ed:e3:02:70:44:00:6b:40:f0:7c:be:15:06:
         47:07:2a:3d:26:5c:b5:f3:26:69:c4:e1:25:d2:a3:b5:8f:be:
         1d:89:8b:d3:65:55:fc:1a:6a:59:47:4c:e2:2c:f1:17:8a:2f:
         8a:52:5a:a1:9d:d0:59:76:7f:48:4a:c2:eb:c4:c1:f4:26:5c:
         3a:c5:8b:ed:4e:86:d1:a4:d8:e4:0d:1b:f6:63:bf:4a:e1:3e:
         07:e9:e8:e4:8c:b6:37:6e:0e:6c:41:5c:32:0c:5c:a4:7c:77:
         61:7a:86:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 08:02:58 2026 by rpki-client