Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
File:                     _MrtD4HiSNrzMrgIQ9Sino19UeQ.mft (raw, json)
Hash identifier:          MeIkch8KbEO13UjqxMnTt6GCHpWIS/1qpFS+WoQdC0M=
Subject key identifier:   32:B2:73:9B:76:2B:F0:86:03:BB:5F:FF:CC:35:F2:B7:7B:6C:8A:99
Authority key identifier: FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4
Certificate issuer:       /CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
Certificate serial:       01A1618E4C23690EF726107D6CDF42EF3422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
Manifest number:          17E1
Signing time:             Thu 22 Oct 2026 03:01:17 +0000
Manifest this update:     Thu 22 Oct 2026 03:01:17 +0000
Manifest next update:     Fri 23 Oct 2026 03:01:17 +0000
Files and hashes:         1: V-KD2l5XB9TJ4WbuiPSbiHcA26s.roa (hash: tm/NB5wzRW6Hwa1rWNFA/fkC7eMyH/xDfSrejkXoTro=)
                          2: _MrtD4HiSNrzMrgIQ9Sino19UeQ.crl (hash: obtSpdCZoTyJ5UKwye3hGHn2sRCCsLfx/QT+grTMc8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 03:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:61:8e:4c:23:69:0e:f7:26:10:7d:6c:df:42:ef:34:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccaed0f81e248daf332b80843d4a29e8d7d51e4
        Validity
            Not Before: Oct 22 03:01:17 2026 GMT
            Not After : Oct 23 03:01:17 2026 GMT
        Subject: CN=32b2739b762bf08603bb5fffcc35f2b77b6c8a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:43:b4:21:9f:bf:7b:15:4d:94:1c:4e:0e:d1:
                    4b:66:dd:67:2a:09:e8:85:c7:db:57:5a:d7:bf:4f:
                    9f:e2:c9:d0:14:1a:d4:95:d4:85:f4:e3:bd:3f:69:
                    95:40:8d:c6:1a:92:da:fe:0a:57:15:3d:b5:4a:cf:
                    c4:23:6d:37:ee:5a:02:c4:ce:d7:eb:79:c8:f0:54:
                    96:ec:32:89:5a:28:7b:ff:bf:40:23:e0:88:65:b0:
                    21:e0:2c:ca:e7:ac:ee:32:a8:42:63:32:73:f1:76:
                    82:c6:d3:d2:57:4a:af:a8:13:ab:96:ed:9d:ec:08:
                    8c:e6:cb:b7:6b:fd:a7:1c:3a:7f:28:7a:03:96:f6:
                    66:f1:f0:5e:90:ef:6e:02:6e:e1:95:3f:fa:08:b7:
                    12:43:a0:26:4d:32:4b:05:51:88:6f:53:f0:6b:2f:
                    46:4a:13:28:ce:ec:45:a5:ed:42:d8:cc:51:a9:57:
                    1f:35:d7:88:58:cc:68:ac:bb:e0:18:48:dc:85:16:
                    f7:cb:a9:95:e7:74:f1:76:ba:cb:14:ee:55:99:8a:
                    5b:52:a1:ca:09:81:a1:2d:15:87:0f:56:dd:d1:3a:
                    4a:97:e7:38:86:af:eb:e1:be:29:5b:7d:20:c7:92:
                    09:dd:ad:e6:97:48:db:d8:dd:d5:31:f9:c2:c0:c0:
                    0e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B2:73:9B:76:2B:F0:86:03:BB:5F:FF:CC:35:F2:B7:7B:6C:8A:99
            X509v3 Authority Key Identifier:
                keyid:FC:CA:ED:0F:81:E2:48:DA:F3:32:B8:08:43:D4:A2:9E:8D:7D:51:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MrtD4HiSNrzMrgIQ9Sino19UeQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/bdbde0-1d97-4126-93e6-8e77173dc4bc/1/_MrtD4HiSNrzMrgIQ9Sino19UeQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:15:0b:80:a9:59:11:e4:30:f3:0d:70:ed:b9:e5:45:5d:a4:
         24:76:bc:f9:7b:4a:b7:45:72:25:8b:7f:12:c6:22:d3:ca:6a:
         7b:60:11:20:4f:4b:e0:7d:14:c7:53:c4:e0:83:92:0c:f4:92:
         40:69:e7:4b:23:47:fc:81:69:24:28:3d:90:e4:37:2d:53:43:
         67:fe:cf:5d:f4:1e:18:51:21:f2:1e:11:67:13:ae:c1:3f:3d:
         ca:93:e1:1a:6a:5e:48:18:0f:8f:03:e9:7e:83:71:49:e6:ce:
         d4:ad:15:df:7e:7b:50:8a:f1:42:01:db:14:3d:47:32:c3:db:
         86:fc:5d:4d:40:7f:aa:51:17:86:fa:4f:d4:87:c3:d9:0a:eb:
         fb:c6:7f:71:de:e5:9c:b7:93:77:77:a7:e1:5c:d2:50:18:93:
         d6:01:8c:d3:d2:d3:e7:21:d2:e4:06:20:52:42:75:58:45:1f:
         bd:ea:1b:11:e6:01:26:08:4c:fb:d8:54:be:55:a1:54:b9:53:
         aa:04:f0:9f:d3:5a:dc:9e:dd:8e:8b:09:4f:7d:5a:92:2f:2b:
         d6:8b:69:8e:bc:81:05:75:20:11:0f:bb:ad:37:a3:1c:ed:1a:
         01:51:f9:0e:24:9d:e2:91:4e:66:5a:24:c1:4e:8e:85:c0:3c:
         ca:26:1c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 13:06:18 2026 by rpki-client