Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
File:                     f01ZHCOtLGlHfX96HUzo687pWWw.mft (raw, json)
Hash identifier:          k5VydhJ+CTpruErEV6VlJVCYGj3Ardytj8iQNvw8vVw=
Subject key identifier:   89:3F:D8:B6:53:41:D0:71:DA:7B:B1:6D:D0:4B:53:D8:02:D6:49:EE
Authority key identifier: 7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C
Certificate issuer:       /CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
Certificate serial:       01A193C40C507DE07AF67C4E875F41FDDD91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
Manifest number:          092A
Signing time:             Sat 31 Oct 2026 21:01:01 +0000
Manifest this update:     Sat 31 Oct 2026 21:01:01 +0000
Manifest next update:     Sun 01 Nov 2026 21:01:01 +0000
Files and hashes:         1: f01ZHCOtLGlHfX96HUzo687pWWw.crl (hash: AAE07Snzrxe5il/zuIL+zlxrfpd3APAAyz1iPYPLvD8=)
                          2: pXDB3JZOfxhx6kB_B6yjlms4hgg.roa (hash: 7CjufhrAy5+5Le+UMiFmAE/OHHfY94923x+MRoCs0Dc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:93:c4:0c:50:7d:e0:7a:f6:7c:4e:87:5f:41:fd:dd:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f4d591c23ad2c69477d7f7a1d4ce8ebcee9596c
        Validity
            Not Before: Oct 31 21:01:01 2026 GMT
            Not After : Nov  1 21:01:01 2026 GMT
        Subject: CN=893fd8b65341d071da7bb16dd04b53d802d649ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:10:de:7f:98:7c:c5:28:da:cf:71:82:9e:ff:
                    2c:03:f5:97:b6:35:6f:e6:57:b2:b6:c7:2f:ba:b5:
                    c7:f9:e7:6c:f6:6b:77:47:ad:aa:a6:09:68:da:ca:
                    50:6d:b6:99:6b:5a:eb:2a:b2:94:a2:6f:d5:d3:50:
                    26:bc:46:a5:c7:41:d3:2f:8f:2e:59:1f:05:b6:f0:
                    a8:bf:8e:c8:b5:37:fb:de:20:4f:c5:8f:57:bb:6c:
                    a9:e0:7e:2b:c6:a0:36:5b:cd:c1:82:ef:76:be:46:
                    2c:02:b2:f7:31:c3:6a:73:bf:2b:48:e3:2d:3a:e1:
                    9f:cd:b2:24:14:76:82:62:83:59:8a:40:25:1d:0d:
                    16:09:06:2d:56:9e:49:99:03:55:1d:fd:bf:26:54:
                    01:d8:fe:32:53:0b:e0:f3:5e:1d:56:78:f1:e4:c8:
                    f6:3a:84:2f:de:95:47:78:cc:2c:60:e0:b4:58:a3:
                    8a:fa:3a:65:01:f2:23:43:26:0e:d6:ee:55:bc:55:
                    1f:38:ba:69:36:1e:e0:d4:3a:d1:b3:71:74:0d:e5:
                    8a:04:dc:91:d3:dc:4d:74:dd:26:c4:e0:be:c3:55:
                    5b:96:19:3b:ce:22:c8:b0:91:cb:af:fd:0a:5f:7b:
                    e5:8b:a4:fb:5f:f3:51:2c:d9:0d:cc:47:53:75:4a:
                    38:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3F:D8:B6:53:41:D0:71:DA:7B:B1:6D:D0:4B:53:D8:02:D6:49:EE
            X509v3 Authority Key Identifier:
                keyid:7F:4D:59:1C:23:AD:2C:69:47:7D:7F:7A:1D:4C:E8:EB:CE:E9:59:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f01ZHCOtLGlHfX96HUzo687pWWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/0d67a2-bc36-4b93-b604-d4f5c92d9095/1/f01ZHCOtLGlHfX96HUzo687pWWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8b:95:a8:2f:9a:8a:26:fe:2b:d5:e2:89:fd:cf:31:62:43:
         38:36:c5:59:89:ae:65:1f:e1:07:f3:3c:2e:13:7f:7f:86:61:
         c7:cf:d7:78:d1:9c:44:3f:d5:a7:03:a9:ed:88:02:b5:61:84:
         ab:96:65:0d:78:4e:54:d7:53:7a:c7:81:81:4b:77:1a:d1:3b:
         1b:8f:c5:a8:34:87:4f:7b:e5:cc:b8:bf:27:41:fb:35:77:32:
         1c:35:c5:4a:cb:56:51:0c:49:f1:46:40:61:2a:0c:82:c8:52:
         8d:cf:f4:05:67:a5:d6:73:f5:13:05:68:1a:1a:f5:f9:9d:cd:
         41:e5:26:c3:92:cd:88:ff:3e:8b:0a:09:9e:b2:f4:63:b9:43:
         d1:38:b0:9a:42:df:67:ec:dd:78:19:04:93:13:03:34:56:31:
         18:d9:48:ac:13:1c:80:83:87:91:26:14:a2:7b:65:b3:84:ab:
         53:52:cd:f2:6d:90:bd:ee:61:2b:6a:d8:2f:b0:3e:a1:b7:39:
         ec:34:98:af:d3:8e:0a:38:85:8f:52:8d:89:90:3d:c5:cd:ee:
         48:ea:c0:46:3e:e0:6c:26:ba:54:19:5a:02:26:88:19:89:27:
         a1:44:3f:09:07:78:45:0f:64:9e:6c:6e:d4:4f:b5:c5:a1:a6:
         ae:ca:f4:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 23:55:33 2026 by rpki-client