Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
File:                     MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft (raw, json)
Hash identifier:          BGy+kbVX4Ejt4eAdeVneYTIhxpbLpATQmwnx+0k4kvI=
Subject key identifier:   01:3A:8A:0F:75:21:30:D4:DD:D1:E9:37:A7:CE:95:CA:09:00:C1:DB
Authority key identifier: 31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2
Certificate issuer:       /CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
Certificate serial:       01A186E38F0B7E8F369F6DCE8182E39000DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
Manifest number:          15E3
Signing time:             Thu 29 Oct 2026 09:00:22 +0000
Manifest this update:     Thu 29 Oct 2026 09:00:22 +0000
Manifest next update:     Fri 30 Oct 2026 09:00:22 +0000
Files and hashes:         1: 3IB8mthpDOk_BFBQubUuplUkjXo.roa (hash: e+u6WkaJwntAo2oCWNchAEYFIeKwoZYuEMGJQKwp5uE=)
                          2: KaqeHG0uZeg5OeAlCabPEVitkog.roa (hash: kUNIU0ayuenQ62hZ/a8gWBFN8YsJ5arVTqiahqwzqow=)
                          3: MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl (hash: XBwGlkxwPtgz42As2+dakoeU55jULynnv2MmbczzTY8=)
                          4: g8rfoziuF-oQqakJ7VRRFDiP_8Q.roa (hash: tMNJvnilP3OgFRAUiXL5Z4gr4F5ohZRaQsEApjgqeNI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 09:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:86:e3:8f:0b:7e:8f:36:9f:6d:ce:81:82:e3:90:00:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3188fae3ebbb3d74feeddcf507f83e67db8850a2
        Validity
            Not Before: Oct 29 09:00:22 2026 GMT
            Not After : Oct 30 09:00:22 2026 GMT
        Subject: CN=013a8a0f752130d4ddd1e937a7ce95ca0900c1db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:c3:9c:32:76:a7:af:50:b4:35:a0:82:6b:
                    9a:62:16:d3:37:24:09:3a:94:6c:38:91:0f:7c:88:
                    21:b5:a7:b3:43:6f:f3:e7:f0:4e:53:4e:98:6f:8c:
                    84:e8:27:92:4f:f2:51:bf:97:fe:ac:a4:12:51:91:
                    cf:9b:a2:fb:06:28:42:cb:48:fc:17:1d:25:84:92:
                    26:8a:0b:a4:ee:db:8c:2d:56:d8:4b:f6:2e:a8:4e:
                    9c:09:15:de:ce:58:f8:3c:82:8e:30:6f:5b:d1:e3:
                    2d:15:da:43:01:20:76:ea:2b:6a:00:82:3f:64:15:
                    94:bb:0f:42:e9:24:03:9e:29:48:12:c6:07:90:e9:
                    11:3c:f6:4a:50:58:2d:7c:57:22:d4:ea:d6:51:9f:
                    a9:65:e5:d3:65:24:5b:6a:63:4f:49:d4:3b:b1:52:
                    be:0e:4c:a7:d1:9d:ee:04:9f:9c:00:09:9e:57:59:
                    80:07:c6:fd:9c:22:76:09:be:d4:c7:ad:34:79:89:
                    2e:ee:a9:87:29:c6:3d:ec:71:1a:4e:6f:a5:05:86:
                    86:84:2f:33:a4:ef:3b:fc:56:30:a1:53:fc:55:2a:
                    6a:b8:b5:bb:0c:94:fd:32:63:f6:b5:cb:b6:bc:a2:
                    54:12:06:f7:01:f0:a3:62:c2:aa:74:2f:b8:0f:89:
                    d5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3A:8A:0F:75:21:30:D4:DD:D1:E9:37:A7:CE:95:CA:09:00:C1:DB
            X509v3 Authority Key Identifier:
                keyid:31:88:FA:E3:EB:BB:3D:74:FE:ED:DC:F5:07:F8:3E:67:DB:88:50:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYj64-u7PXT-7dz1B_g-Z9uIUKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ea29f2-c340-4d61-b5bb-b853dff8765c/1/MYj64-u7PXT-7dz1B_g-Z9uIUKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:d0:dd:e0:a2:5f:38:e5:cb:28:4b:0f:16:df:e1:f8:84:6e:
         04:5f:d5:65:68:49:ba:dc:0d:11:98:17:ff:56:a3:1d:82:7b:
         5d:0c:75:a6:2f:12:47:e7:0e:a3:4e:26:d3:ef:48:04:ac:0b:
         d3:55:6e:ef:16:99:7f:a2:ca:81:9b:0a:6c:92:48:d4:f5:ca:
         0f:77:48:e0:54:4c:e6:38:72:3c:06:23:78:2d:cb:3e:08:1b:
         07:91:83:92:de:2e:6a:88:ba:61:0e:0e:47:94:02:ee:05:e6:
         60:dc:49:fc:5d:69:92:f0:9b:0e:a4:bf:f6:5e:51:52:e7:a0:
         57:0d:34:19:83:4c:61:f8:30:80:5a:00:85:bd:ab:0a:e7:11:
         95:13:0e:90:4e:89:ca:2a:31:0b:4f:0d:b7:91:0b:84:6f:4b:
         cf:b5:8e:a9:2d:fd:b5:85:5b:ea:e6:96:68:22:a8:87:c0:c8:
         1c:4f:d3:9c:5a:f8:3a:76:23:82:57:5e:63:48:bd:5d:a7:ca:
         39:24:64:41:77:8a:10:05:c3:0d:66:da:43:6e:75:1f:3a:36:
         ca:e8:b4:e7:4f:78:4b:80:ca:f1:5b:8b:55:9f:fe:40:33:cd:
         b8:d4:5d:34:4d:03:d2:f4:43:91:e4:2a:81:7c:fa:7e:b7:6d:
         e7:61:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:57:46 2026 by rpki-client