Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
File:                     M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft (raw, json)
Hash identifier:          qWCkfP/btVt7lguxrmgacKlF3hMgzjNPa3aTG2oxp9I=
Subject key identifier:   2E:22:B1:B8:58:26:8B:E2:1F:76:78:FE:2D:E3:50:A8:82:41:D0:C1
Authority key identifier: 33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34
Certificate issuer:       /CN=334b09743ed2afd6afb47c58360ee3112a95cd34
Certificate serial:       01A138FFF02177971DCB04BB24F9DC780701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
Manifest number:          0A7C
Signing time:             Wed 14 Oct 2026 06:00:59 +0000
Manifest this update:     Wed 14 Oct 2026 06:00:59 +0000
Manifest next update:     Thu 15 Oct 2026 06:00:59 +0000
Files and hashes:         1: M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl (hash: TBUdRqJCDZcw2SjzHsFYTSZWQ6gCbzRVOMtvgVpBEnM=)
                          2: e6fhuOPwHgBC5tZioXiiJV5do9A.roa (hash: Tof60j4LzMdcQ5pUyDPNWrOeovuUoNpSgIiN6gPcX+A=)
                          3: y2a6KdhGkPiXtxfG-w0YaFa-FWQ.roa (hash: h3pRV3DAqC7d5FCCtaEybceEXDVivTMx7nMioi0L1JU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 23:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:38:ff:f0:21:77:97:1d:cb:04:bb:24:f9:dc:78:07:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=334b09743ed2afd6afb47c58360ee3112a95cd34
        Validity
            Not Before: Oct 14 06:00:59 2026 GMT
            Not After : Oct 15 06:00:59 2026 GMT
        Subject: CN=2e22b1b858268be21f7678fe2de350a88241d0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e8:92:44:65:8e:17:82:6c:04:d6:cf:60:66:
                    c3:2d:6e:20:0c:6c:04:20:1b:f3:ed:f0:5d:f3:0d:
                    fb:b2:69:65:da:6b:a2:78:4c:52:60:f3:db:cf:d6:
                    e0:de:e2:48:32:58:fe:6b:4e:10:44:f3:a6:b2:12:
                    97:33:f3:92:70:de:b4:c0:3c:79:45:1a:7d:2f:27:
                    fe:af:b5:b6:f2:1b:1f:41:8a:84:3a:84:b2:60:46:
                    9b:82:a0:da:42:00:68:ac:ed:e0:60:7a:8b:ee:17:
                    1b:fe:4b:24:f7:cd:bb:ce:b8:0f:88:aa:8f:25:fa:
                    ec:48:2f:d3:0b:95:cf:83:49:74:4a:a7:1e:63:a6:
                    fd:58:db:48:28:c2:ee:8a:52:13:74:5f:e7:5b:e5:
                    08:8d:7b:8f:2d:d5:00:d9:cd:50:8c:b1:a5:99:d7:
                    94:22:0c:98:47:6a:ff:fd:ce:3c:c3:b6:80:e9:07:
                    36:4d:ba:2a:69:7b:4e:e4:dd:97:b2:71:89:c1:00:
                    7c:c7:8d:2a:7b:ed:49:68:9b:70:4e:38:3e:01:c3:
                    57:de:ac:ca:52:1d:52:f2:69:ff:6c:e9:d1:6b:d8:
                    43:6f:25:8c:47:44:5d:54:14:da:89:88:37:b0:7a:
                    fb:fc:c2:df:f9:a6:bb:08:db:e1:e0:0b:19:6f:aa:
                    ed:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:22:B1:B8:58:26:8B:E2:1F:76:78:FE:2D:E3:50:A8:82:41:D0:C1
            X509v3 Authority Key Identifier:
                keyid:33:4B:09:74:3E:D2:AF:D6:AF:B4:7C:58:36:0E:E3:11:2A:95:CD:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M0sJdD7Sr9avtHxYNg7jESqVzTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cd410f-9de4-4d82-8091-59e792fe14cc/1/M0sJdD7Sr9avtHxYNg7jESqVzTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7e:da:37:a5:36:22:ee:22:54:ef:dc:31:d5:be:50:18:bb:
         51:84:c0:d6:9c:15:a8:c2:d7:cb:ea:5c:eb:3b:1b:91:30:46:
         e5:b4:48:e8:4c:36:c2:dd:11:ba:47:7d:ea:a3:57:f8:77:70:
         36:d7:50:5d:77:fd:cd:2e:d8:cd:ec:41:4c:7f:d5:f5:19:c2:
         35:fc:97:1b:3e:e6:c7:51:42:e7:70:63:05:6f:ca:67:da:a2:
         31:ea:3b:67:d9:99:9b:ed:fa:44:34:30:7b:29:bf:4a:36:bc:
         80:57:a5:26:65:8a:ce:ec:bf:6e:a4:9a:22:49:dd:1b:bc:3d:
         9e:cf:61:bb:eb:b3:9c:6b:77:46:d8:c2:ce:28:50:d3:cb:21:
         74:fb:5a:f3:0a:3d:26:ea:ff:68:b6:2d:4a:71:f8:2b:6c:94:
         6e:8a:bd:75:1c:75:70:6a:85:e7:12:58:a3:eb:0a:63:5b:49:
         25:33:67:e8:f9:dc:fd:c4:6c:61:98:89:1f:2d:60:3d:33:4a:
         2f:69:ad:ab:7e:11:c5:0c:bb:c4:7d:e8:b2:65:fc:37:53:aa:
         27:1d:5c:66:43:1a:a4:35:f9:c0:58:f6:f7:23:ee:88:29:4c:
         53:af:fb:73:81:1a:ee:cb:16:17:52:05:09:75:22:94:d2:0a:
         d6:d2:c3:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:56:26 2026 by rpki-client