Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MWcR2l4xw7ZoMpr52bjsWO2gneg.mft
File:                     MWcR2l4xw7ZoMpr52bjsWO2gneg.mft (raw, json)
Hash identifier:          UpexT6hO1PkOC5e/Bi1owXAh7bGUCpvMhaWoB/1yA9I=
Subject key identifier:   18:6F:2D:60:FA:A7:80:B1:3A:09:7B:AD:AB:B9:05:28:66:6C:DA:39
Authority key identifier: 31:67:11:DA:5E:31:C3:B6:68:32:9A:F9:D9:B8:EC:58:ED:A0:9D:E8
Certificate issuer:       /CN=316711da5e31c3b668329af9d9b8ec58eda09de8
Certificate serial:       01A18751F76D1A98199BEE470AB79132FB26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MWcR2l4xw7ZoMpr52bjsWO2gneg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MWcR2l4xw7ZoMpr52bjsWO2gneg.mft
Manifest number:          82
Signing time:             Thu 29 Oct 2026 11:00:58 +0000
Manifest this update:     Thu 29 Oct 2026 11:00:58 +0000
Manifest next update:     Fri 30 Oct 2026 11:00:58 +0000
Files and hashes:         1: MUVw74wh52eOaYfgHXDpQj70saQ.roa (hash: r11ipMGCd1Sxy8FxoqT8IS618bT1jFmr3XV+w9hlLhg=)
                          2: MWcR2l4xw7ZoMpr52bjsWO2gneg.crl (hash: SDkrKPQCrorcLJIu2ztz7pWhHi5Lnqx4DSYpDCWggxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MWcR2l4xw7ZoMpr52bjsWO2gneg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MWcR2l4xw7ZoMpr52bjsWO2gneg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MWcR2l4xw7ZoMpr52bjsWO2gneg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 11:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:87:51:f7:6d:1a:98:19:9b:ee:47:0a:b7:91:32:fb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316711da5e31c3b668329af9d9b8ec58eda09de8
        Validity
            Not Before: Oct 29 11:00:58 2026 GMT
            Not After : Oct 30 11:00:58 2026 GMT
        Subject: CN=186f2d60faa780b13a097badabb90528666cda39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e4:1d:43:ff:6e:94:0e:6b:26:b5:eb:30:13:
                    35:7e:4f:ae:44:15:f8:61:cb:67:9a:94:29:3b:23:
                    0f:ca:15:fc:73:94:54:7b:67:d2:19:a2:5c:ae:49:
                    46:d4:fc:5c:e7:47:f5:6a:2a:e3:41:5b:fa:7a:22:
                    b3:3d:77:ea:24:a2:f1:f2:20:e5:08:c4:48:0b:ff:
                    5b:4c:77:e9:79:fe:0a:e8:fa:7e:87:53:fc:80:59:
                    45:8c:be:5e:10:33:e6:c5:bc:ae:98:93:ba:58:68:
                    39:02:59:41:08:8d:31:b4:0b:36:28:1a:7d:c8:3a:
                    06:62:9c:ee:b8:b2:b7:c4:b2:4a:dc:37:96:ac:a6:
                    16:51:6d:c1:28:05:5e:54:97:d9:23:40:52:2f:81:
                    8a:fb:d1:fd:fb:37:12:7b:76:4a:81:f1:90:7a:15:
                    22:25:ab:bf:bf:a6:bf:e4:63:ac:bb:50:7d:c8:e7:
                    94:25:87:21:70:fd:be:db:f5:f8:5d:06:50:60:49:
                    3d:a8:45:b6:2d:dd:53:14:ae:f4:81:3a:1d:a9:9c:
                    21:8a:7a:d1:82:0c:61:f4:83:93:6c:a3:0b:6e:0c:
                    76:18:77:c6:e0:a3:99:68:8c:d0:0b:e5:46:a6:19:
                    65:9d:de:4e:72:d4:54:63:43:f5:b5:41:7c:02:f9:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6F:2D:60:FA:A7:80:B1:3A:09:7B:AD:AB:B9:05:28:66:6C:DA:39
            X509v3 Authority Key Identifier:
                keyid:31:67:11:DA:5E:31:C3:B6:68:32:9A:F9:D9:B8:EC:58:ED:A0:9D:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWcR2l4xw7ZoMpr52bjsWO2gneg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MWcR2l4xw7ZoMpr52bjsWO2gneg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MWcR2l4xw7ZoMpr52bjsWO2gneg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:0a:f8:8b:01:6c:11:75:87:10:88:4f:af:aa:6e:5f:45:ea:
         f6:72:07:5f:17:0e:f9:2c:03:2b:06:d2:a6:49:3b:87:71:ff:
         2e:04:9c:e3:fa:f7:af:86:2f:58:09:0c:69:61:0a:46:59:17:
         a2:e9:13:40:06:3b:21:5f:ef:b3:68:31:e3:f0:ca:68:95:33:
         76:6c:4c:12:cd:ea:17:e4:40:e2:0d:59:f6:ac:f2:fb:b8:55:
         14:d4:9a:ad:43:e3:82:43:a5:81:d7:c8:3e:af:29:fa:0f:7a:
         60:e8:d3:a8:93:06:90:8f:1b:70:8c:98:3a:64:ab:5c:3f:a2:
         b0:e5:1c:c3:2f:2f:2c:1a:24:3e:d5:3c:63:d6:eb:7e:39:f6:
         68:4f:28:c2:a0:b5:e8:71:2b:c7:d7:b3:c1:0b:a1:07:93:c4:
         78:c6:5a:fb:dc:d4:89:58:02:f5:11:6e:1e:45:80:82:c3:46:
         9a:c5:59:ac:63:5f:2b:40:86:dd:db:8f:ae:d6:5c:31:a7:36:
         df:41:bb:2f:57:d7:eb:c8:16:8c:db:85:33:de:d0:ff:8c:20:
         9d:64:04:c0:eb:0f:50:ec:b6:1a:8c:39:ab:78:02:f5:f7:57:
         f7:a8:b8:a8:6d:6c:e6:75:af:ec:38:ac:37:0a:57:8d:b3:0d:
         09:17:10:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 19:51:03 2026 by rpki-client