Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
File:                     E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json)
Hash identifier:          68FOifDYX5G4o79B7aFNIwwOgCT/S9ZBtol2hB9xs2o=
Subject key identifier:   86:F9:9E:89:F4:BD:58:E4:F2:59:F6:37:EE:E9:F5:A6:23:0C:42:D3
Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
Certificate issuer:       /CN=13b89b80186332d441bb0515c47261c5ffa0616b
Certificate serial:       01A13ECB9A6F44981D91D9C8F7704299D0A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
Manifest number:          17D8
Signing time:             Thu 15 Oct 2026 09:01:33 +0000
Manifest this update:     Thu 15 Oct 2026 09:01:33 +0000
Manifest next update:     Fri 16 Oct 2026 09:01:33 +0000
Files and hashes:         1: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: rHsM8LPlqxUGlsI9k9/p+BYDfpmAg1tFH/BdQ4noUlk=)
                          2: ng9Xwpw4kTndq_afGB7nkkVST_Q.roa (hash: EnVisylVrMLRpq23iMqP/krYezkyFTHOer8sFdAaBdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 09:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:cb:9a:6f:44:98:1d:91:d9:c8:f7:70:42:99:d0:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b
        Validity
            Not Before: Oct 15 09:01:33 2026 GMT
            Not After : Oct 16 09:01:33 2026 GMT
        Subject: CN=86f99e89f4bd58e4f259f637eee9f5a6230c42d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:47:8d:bd:df:37:74:a0:da:2e:2d:99:cf:33:
                    a4:82:7a:c4:7e:7f:bb:ce:2e:0f:fc:a1:9c:cf:86:
                    9c:53:19:c2:3c:51:41:fe:29:49:6f:22:2e:1d:dd:
                    d0:4f:2b:fd:9e:5f:74:78:f5:5a:80:fd:84:a7:00:
                    e9:d4:4a:cb:77:6c:81:a6:7b:3d:5c:b9:69:3d:85:
                    53:9f:18:53:b0:ec:74:f1:22:7f:37:dc:ba:3b:ca:
                    9e:2c:f2:4d:a1:a0:c8:90:2b:dc:05:ed:61:dc:78:
                    50:a3:20:10:8e:22:84:fd:37:83:95:eb:f3:bd:a7:
                    e3:74:e3:bb:45:2c:74:37:c1:91:db:61:2e:25:c2:
                    91:12:3f:27:ae:a4:a7:ae:98:a9:7a:d8:a9:59:17:
                    e8:b7:a1:d7:40:53:33:75:75:b0:e2:e1:f3:ab:ad:
                    c7:3a:5f:29:0d:91:56:d7:7c:aa:0d:b8:d0:f1:a6:
                    57:e4:d6:ce:4e:49:f8:41:f3:8d:ce:68:42:a4:8c:
                    99:ef:14:62:52:98:07:81:bb:1b:ea:fd:72:03:21:
                    62:cf:70:90:c3:c5:21:79:44:89:12:64:a9:d7:7b:
                    be:f5:ea:a7:2b:77:39:51:4d:b6:63:28:e2:ec:bc:
                    9a:98:5c:84:26:e3:2c:d3:60:f0:ba:e2:62:23:9f:
                    28:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F9:9E:89:F4:BD:58:E4:F2:59:F6:37:EE:E9:F5:A6:23:0C:42:D3
            X509v3 Authority Key Identifier:
                keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:02:ad:84:2c:61:43:a3:fb:28:be:40:d7:4f:c5:2d:56:2a:
         a1:a2:59:df:98:15:8e:b2:1d:97:17:87:dd:2d:ac:e1:fb:d0:
         1f:1e:18:4a:bb:58:4d:7e:a0:c0:d1:90:93:85:57:01:d5:b5:
         51:00:e9:08:25:fb:05:42:6a:b2:7f:9b:24:04:26:f5:5e:9a:
         89:69:0d:8e:47:f7:75:ec:2c:ae:d4:44:31:22:ef:ad:c8:f5:
         70:ee:77:cc:47:2e:6f:4d:53:d7:ac:e3:1d:9a:79:54:d2:f7:
         20:e4:f0:ec:8e:22:f2:9f:6c:db:b9:08:ca:9b:77:ac:be:6f:
         bc:b1:5b:aa:cc:6e:b6:68:1d:78:70:16:3d:27:16:d3:82:9a:
         33:75:65:09:04:43:3b:b8:8a:b1:4f:c0:2c:44:2e:53:07:6c:
         43:6d:bd:03:c7:6b:cc:97:16:f6:d1:45:c3:90:05:29:67:41:
         95:eb:31:29:30:89:98:fe:e1:9c:3b:4a:d3:42:42:7e:69:43:
         f0:6d:71:7a:b4:c4:bc:18:98:29:d0:92:6c:cb:79:e4:82:d6:
         6f:1b:e5:d4:ec:51:3f:46:1c:4c:db:20:42:8a:90:71:da:a2:
         cb:eb:bf:d0:72:8a:3f:17:27:b3:ed:5a:05:7e:0e:a3:05:58:
         52:b0:91:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 20:54:58 2026 by rpki-client