Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
File:                     py0XjI5T9SExwftkdDyWDPiX_Qw.mft (raw, json)
Hash identifier:          tciLnpU9B/o7AgQeoAjJfe2lIGGQkWgJMJ8G/DB2FBc=
Subject key identifier:   AC:BE:03:82:D6:1A:72:A3:EA:32:73:C2:2B:F7:0E:98:95:DD:D5:BB
Authority key identifier: A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C
Certificate issuer:       /CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
Certificate serial:       01A13CDC39258162E025B97A6CF54D5DB635
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
Manifest number:          17CF
Signing time:             Thu 15 Oct 2026 00:00:27 +0000
Manifest this update:     Thu 15 Oct 2026 00:00:27 +0000
Manifest next update:     Fri 16 Oct 2026 00:00:27 +0000
Files and hashes:         1: py0XjI5T9SExwftkdDyWDPiX_Qw.crl (hash: 6zVBwN3a69EEmReohegpSgfTBKo1DIzzI8F1Gd9GhBc=)
                          2: w5wexF-hJcvTksgksSednww4z4E.roa (hash: e+qIfWqcWPWmwyJXZsE4ITGx8fFJ1s+k83g6vuyixn8=)
                          3: wEDppBCkxMeXKCmEIpLC-dW_mTc.roa (hash: +v+EfzVXLmYVPjpd5/ZRf8OaEefwLkjG3ANx8qenK0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:dc:39:25:81:62:e0:25:b9:7a:6c:f5:4d:5d:b6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a72d178c8e53f52131c1fb64743c960cf897fd0c
        Validity
            Not Before: Oct 15 00:00:27 2026 GMT
            Not After : Oct 16 00:00:27 2026 GMT
        Subject: CN=acbe0382d61a72a3ea3273c22bf70e9895ddd5bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:eb:0c:89:f0:2c:b3:af:6b:7d:0f:a5:21:d4:
                    00:09:2e:ae:71:6d:bb:4b:f4:cd:6d:6c:b1:c0:e5:
                    8d:19:35:05:1f:8b:a1:e8:62:39:e8:82:9b:10:87:
                    aa:53:16:dc:27:ba:63:54:79:b1:e1:f9:94:4b:38:
                    21:66:f7:95:f4:a4:82:7f:58:2d:d8:cc:ce:64:34:
                    40:02:7b:6e:51:1a:db:79:ae:4d:da:ea:37:96:8f:
                    66:c6:03:09:f0:cc:be:ec:18:8b:1c:99:f5:49:8f:
                    cc:55:0e:c5:df:e6:89:f6:b7:8c:1b:36:53:3e:b2:
                    b3:e3:a7:ed:5b:3f:79:53:0a:70:1a:90:f3:6d:8a:
                    a3:92:59:2d:55:d1:8a:23:68:28:e8:10:4a:ca:ff:
                    53:22:5d:46:50:88:5e:16:c7:3f:16:84:a4:05:bd:
                    cd:15:56:0a:0c:81:f5:f7:38:10:99:00:c6:ab:78:
                    54:91:15:7c:35:85:7c:ff:1e:a9:e5:e0:32:87:98:
                    5a:41:76:08:71:3d:0d:b0:e2:c1:5a:c8:32:e7:c4:
                    4b:42:ea:12:4b:8a:1e:8f:2a:bb:ef:9e:b3:ff:1e:
                    26:bb:31:0e:73:b0:68:32:dd:31:6c:b0:49:46:f1:
                    d2:53:c2:d1:a2:48:85:ea:23:2d:b9:38:6b:a0:7b:
                    aa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BE:03:82:D6:1A:72:A3:EA:32:73:C2:2B:F7:0E:98:95:DD:D5:BB
            X509v3 Authority Key Identifier:
                keyid:A7:2D:17:8C:8E:53:F5:21:31:C1:FB:64:74:3C:96:0C:F8:97:FD:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/py0XjI5T9SExwftkdDyWDPiX_Qw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1b813a-5e86-45b0-99cd-28b9d261ecb1/1/py0XjI5T9SExwftkdDyWDPiX_Qw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0b:09:47:bf:1d:1a:9d:8e:f1:02:eb:a1:fe:71:42:f8:91:
         26:fb:d9:50:11:5f:b6:4e:bc:5e:8b:ae:6b:ea:40:e3:85:aa:
         ca:53:db:9c:04:d7:b6:f9:09:6c:32:c4:6f:ac:84:b3:52:69:
         99:dc:54:0d:58:83:c7:38:10:7f:7a:f2:fc:dc:c0:96:15:48:
         65:d6:c8:b7:19:f0:79:fd:c7:37:a2:d9:b9:ed:c5:33:a1:8c:
         20:ff:b1:8a:0e:b4:54:81:e4:d1:e1:37:61:d7:51:cb:7c:11:
         05:f8:43:b2:0a:e9:41:4c:fa:6e:25:58:e1:a1:2c:69:79:a5:
         d4:0a:1f:58:bb:b5:5a:d9:ab:0a:22:df:17:5d:c3:be:d3:ae:
         0a:a2:5a:6c:35:d0:e1:db:15:8b:3b:2c:4e:1c:9b:1e:a2:58:
         bc:81:6c:1c:b5:e3:ee:c7:a9:3e:1b:b7:77:ac:14:15:90:0f:
         1e:de:71:19:82:23:3c:12:f6:8b:55:07:32:fd:a1:a5:fd:f4:
         46:25:b5:69:5d:03:3b:de:1d:8a:34:5d:bc:ab:10:67:46:65:
         58:d2:b4:9b:e7:19:77:31:56:e7:a0:19:94:a1:5b:b3:29:ce:
         7e:53:dd:d3:5d:bf:0b:c2:7c:6b:e1:82:d2:17:e6:35:f5:b2:
         b5:c8:bb:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE83DklgWLgJbl6bPVNXbY1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3MmQxNzhjOGU1M2Y1MjEzMWMxZmI2NDc0M2M5NjBjZjg5
N2ZkMGMwHhcNMjYxMDE1MDAwMDI3WhcNMjYxMDE2MDAwMDI3WjAzMTEwLwYDVQQD
EyhhY2JlMDM4MmQ2MWE3MmEzZWEzMjczYzIyYmY3MGU5ODk1ZGRkNWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlesMifAss69rfQ+lIdQACS6ucW27
S/TNbWyxwOWNGTUFH4uh6GI56IKbEIeqUxbcJ7pjVHmx4fmUSzghZveV9KSCf1gt
2MzOZDRAAntuURrbea5N2uo3lo9mxgMJ8My+7BiLHJn1SY/MVQ7F3+aJ9reMGzZT
PrKz46ftWz95UwpwGpDzbYqjklktVdGKI2go6BBKyv9TIl1GUIheFsc/FoSkBb3N
FVYKDIH19zgQmQDGq3hUkRV8NYV8/x6p5eAyh5haQXYIcT0NsOLBWsgy58RLQuoS
S4oejyq7756z/x4muzEOc7BoMt0xbLBJRvHSU8LRokiF6iMtuThroHuqkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKy+A4LWGnKj6jJzwiv3DpiV3dW7MB8GA1UdIwQY
MBaAFKctF4yOU/UhMcH7ZHQ8lgz4l/0MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xYjgxM2EtNWU4Ni00NWIwLTk5Y2Qt
MjhiOWQyNjFlY2IxLzEvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xYjgxM2EtNWU4Ni00NWIwLTk5Y2QtMjhiOWQyNjFlY2Ix
LzEvcHkwWGpJNVQ5U0V4d2Z0a2REeVdEUGlYX1F3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeAsJR78d
Gp2O8QLrof5xQviRJvvZUBFftk68Xouua+pA44WqylPbnATXtvkJbDLEb6yEs1Jp
mdxUDViDxzgQf3ry/NzAlhVIZdbItxnwef3HN6LZue3FM6GMIP+xig60VIHk0eE3
YddRy3wRBfhDsgrpQUz6biVY4aEsaXml1AofWLu1WtmrCiLfF13DvtOuCqJabDXQ
4dsVizssThybHqJYvIFsHLXj7sepPhu3d6wUFZAPHt5xGYIjPBL2i1UHMv2hpf30
RiW1aV0DO94dijRdvKsQZ0ZlWNK0m+cZdzFW56AZlKFbsynOflPd012/C8J8a+GC
0hfmNfWytci7Ww==
-----END CERTIFICATE-----
Generated at Thu Oct 15 05:56:43 2026 by rpki-client