Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
File:                     eTT37l0EoCYiPDqjGRK_YQ0A23s.mft (raw, json)
Hash identifier:          1HJvY1rzcP9wFr5PpOTmx5T0I5L1GbNNfn1ZESzTNz4=
Subject key identifier:   01:C8:03:B2:86:6F:1D:F6:35:33:06:7D:26:5E:3B:7A:97:E2:B2:84
Authority key identifier: 79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B
Certificate issuer:       /CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
Certificate serial:       01A13F38F4404613EE8AFDF2514B70CDA973
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
Manifest number:          1A23
Signing time:             Thu 15 Oct 2026 11:00:59 +0000
Manifest this update:     Thu 15 Oct 2026 11:00:59 +0000
Manifest next update:     Fri 16 Oct 2026 11:00:59 +0000
Files and hashes:         1: Xs9gaqFFXZ7GrvsrGgY-yuwbYTE.roa (hash: DTk6BwHVpjtDOIubeFVH1qzIK/Hrx5OrTlZrFAVfucM=)
                          2: eTT37l0EoCYiPDqjGRK_YQ0A23s.crl (hash: KeULH5aGILHagSC7n8v5cvvkPuB5XTyQNx1xlgIWOtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:38:f4:40:46:13:ee:8a:fd:f2:51:4b:70:cd:a9:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7934f7ee5d04a026223c3aa31912bf610d00db7b
        Validity
            Not Before: Oct 15 11:00:59 2026 GMT
            Not After : Oct 16 11:00:59 2026 GMT
        Subject: CN=01c803b2866f1df63533067d265e3b7a97e2b284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:af:65:eb:1d:bd:39:66:e7:a9:0f:08:d9:21:
                    09:9a:bf:01:d8:70:00:8d:36:19:c6:34:bd:6d:58:
                    81:e7:a3:3c:ec:31:08:0c:53:55:a0:f5:73:cd:e1:
                    4f:6c:5e:14:e1:8e:38:34:cc:50:23:9e:64:53:a4:
                    1f:38:c0:9f:05:94:5f:ba:22:d4:72:f4:b6:ec:3c:
                    f7:2b:c2:47:bd:3e:f0:93:e1:36:91:af:9a:0b:e4:
                    2a:88:26:ca:eb:90:77:e6:87:bf:85:b7:5d:80:aa:
                    62:d2:94:64:50:78:b6:cf:3a:e2:ea:10:f5:6a:d8:
                    8e:28:a9:ae:65:32:18:71:49:87:b4:14:d3:cf:70:
                    ac:b7:58:b3:84:f5:d1:98:6a:c6:cc:81:f0:cd:9a:
                    53:ca:fc:eb:f1:75:f5:de:ee:4a:23:81:4b:8b:54:
                    4f:47:84:8f:ee:ad:73:9a:02:f6:38:5d:39:62:aa:
                    13:13:6d:38:8e:28:26:c2:ab:9e:82:dc:cd:89:bc:
                    09:9c:a8:d9:28:d3:2c:64:7f:5e:d6:45:fb:f2:37:
                    8b:9d:67:3b:c0:27:b8:61:63:70:26:02:e5:13:63:
                    08:f3:45:8e:0f:b9:27:5e:1a:8c:ef:b2:47:5e:d5:
                    e9:1b:ad:1c:98:ec:a3:99:48:bb:bb:4d:97:cb:73:
                    10:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C8:03:B2:86:6F:1D:F6:35:33:06:7D:26:5E:3B:7A:97:E2:B2:84
            X509v3 Authority Key Identifier:
                keyid:79:34:F7:EE:5D:04:A0:26:22:3C:3A:A3:19:12:BF:61:0D:00:DB:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eTT37l0EoCYiPDqjGRK_YQ0A23s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c65587-f3ec-43ce-ab76-f1d349823504/1/eTT37l0EoCYiPDqjGRK_YQ0A23s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:2e:d4:e2:bd:e4:70:eb:fa:bf:67:46:35:66:d8:65:b6:b2:
         c6:bd:3d:7a:af:bf:d7:ef:f0:50:bc:08:10:e8:ba:95:e6:8b:
         9f:c3:36:a5:7b:2f:d1:93:b1:84:9b:1e:01:e8:7f:6c:34:68:
         f6:64:b0:91:19:69:20:a4:33:36:90:cb:35:35:f8:80:79:ca:
         7d:bd:f5:84:3d:2a:29:7d:2b:c3:61:6f:48:b0:48:fe:39:28:
         23:a4:8d:3b:0a:23:7b:fa:03:98:f7:9f:bb:42:ab:e8:9b:d0:
         c5:a7:66:2f:89:2d:32:2b:02:a4:e5:fb:81:5b:cb:63:26:c1:
         69:63:fd:3b:51:0e:d7:56:a1:ec:c2:96:2e:cd:0d:28:88:87:
         f1:a8:30:9c:af:55:2e:8e:35:81:ce:b2:68:76:53:a1:85:29:
         50:3a:f8:cf:12:8e:dc:e9:c5:58:d2:85:fd:ee:f4:8c:8b:b2:
         6c:1e:13:9e:7a:d5:36:44:80:ef:fd:17:2a:4a:db:f0:3a:3c:
         38:49:33:e3:06:15:db:77:e9:54:f7:7d:67:99:93:1c:3f:b7:
         a9:a8:6e:c1:d5:4d:8c:e7:0d:47:2a:3e:5c:c3:59:2f:1e:c9:
         dd:08:c2:5e:2d:d1:fe:15:ce:f0:cc:14:bb:76:fb:9c:92:34:
         a4:b7:5e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:51:04 2026 by rpki-client