Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
File:                     fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft (raw, json)
Hash identifier:          Y1ohxJanOYIv5W9Yy2h0nnpE7tSHUWnKFpkjTOIlZ7o=
Subject key identifier:   A0:C0:92:7C:D1:A3:E1:B5:99:A3:85:94:FA:B1:D5:20:83:0D:0F:D4
Authority key identifier: 7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C
Certificate issuer:       /CN=7c99016af748a48fce84f63f5e3a89331427dd8c
Certificate serial:       01A11861F87619C8F3637D0E25237142569E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
Manifest number:          0378
Signing time:             Wed 07 Oct 2026 22:00:36 +0000
Manifest this update:     Wed 07 Oct 2026 22:00:36 +0000
Manifest next update:     Thu 08 Oct 2026 22:00:36 +0000
Files and hashes:         1: 1-DzzhuQacybavI0JEFJ_Pxy7kt4.roa (hash: uRHVp/iNbMxJaaaPObGWSNEIFbTXLqpiK+JCvtnSoQ4=)
                          2: fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl (hash: aqVAmCJK8Kj6YFojENR976DAQpJRi5dmF94kjHk6OiM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 18:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:18:61:f8:76:19:c8:f3:63:7d:0e:25:23:71:42:56:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c99016af748a48fce84f63f5e3a89331427dd8c
        Validity
            Not Before: Oct  7 22:00:36 2026 GMT
            Not After : Oct  8 22:00:36 2026 GMT
        Subject: CN=a0c0927cd1a3e1b599a38594fab1d520830d0fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:26:9d:a2:f5:e1:28:40:ed:f0:a6:20:b0:e1:
                    35:17:88:30:8c:22:ff:b3:2a:b6:0e:2b:4e:a5:0a:
                    8b:13:cf:a6:70:72:26:19:53:a3:65:20:8e:93:99:
                    5d:ec:e0:97:be:c1:00:69:3e:b8:a1:89:29:ff:a3:
                    8e:f2:6e:28:74:7d:e6:c3:80:1d:8d:68:6d:de:50:
                    b0:8c:b6:33:a7:0d:db:44:4d:33:f3:5d:5b:d5:52:
                    80:eb:6a:17:a9:7f:a6:70:34:94:68:8b:74:a8:38:
                    42:71:61:d8:30:21:e3:de:5b:fc:c5:47:55:7e:5a:
                    3d:6b:58:ea:6c:f5:0e:a8:a4:d0:e4:21:b6:28:b1:
                    93:05:61:76:e4:69:9d:32:28:05:50:58:81:a7:7b:
                    79:76:17:b9:7f:38:23:dc:c0:36:21:a8:df:25:a0:
                    34:65:41:fa:ef:75:ba:b7:c6:03:30:25:69:15:18:
                    86:ae:4f:d3:4f:0f:48:e8:fa:98:e9:7c:88:b2:1e:
                    24:b6:66:1c:0b:a5:2a:f9:02:fa:23:cb:74:cc:34:
                    7e:6d:8b:fe:b3:e5:a6:a1:db:bf:ce:b8:c8:fa:ae:
                    83:0a:4e:e1:d3:08:cb:20:86:21:b5:c1:c0:b8:2c:
                    3c:dd:f2:e3:73:0d:1e:19:7e:7d:76:20:2e:0f:99:
                    04:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C0:92:7C:D1:A3:E1:B5:99:A3:85:94:FA:B1:D5:20:83:0D:0F:D4
            X509v3 Authority Key Identifier:
                keyid:7C:99:01:6A:F7:48:A4:8F:CE:84:F6:3F:5E:3A:89:33:14:27:DD:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJkBavdIpI_OhPY_XjqJMxQn3Yw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3f72d7-b5b5-4dc2-9f02-1554f1d3b9b6/1/fJkBavdIpI_OhPY_XjqJMxQn3Yw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c2:8d:4a:38:ba:ba:06:b9:2e:20:1f:d7:6d:5b:3b:b0:c3:
         aa:b6:42:41:23:5a:d3:9a:7a:d0:59:79:72:3f:6f:f3:13:fc:
         f5:4d:40:5b:cc:d0:f9:ea:a0:84:af:e1:00:f5:a2:47:f6:7f:
         3d:05:06:de:4d:e9:26:5d:0b:4e:0c:d6:f4:2a:ad:64:3a:7e:
         b3:66:df:9b:9a:48:47:a3:d3:b9:f5:04:c8:ae:8e:e9:62:3f:
         63:3c:4f:dc:85:49:e7:92:6a:54:51:b0:d8:42:de:ca:84:5a:
         e3:6f:b5:c6:52:0d:ce:64:ed:64:62:b2:38:ea:98:90:b7:67:
         74:5f:9b:9b:b5:d5:dc:94:ec:9e:20:a3:fa:56:f0:12:c9:e4:
         18:f7:51:17:f4:cb:d7:67:2d:76:71:d5:52:08:37:0f:b1:3c:
         d3:03:d3:81:17:24:63:42:aa:99:07:c3:2b:95:9f:c3:05:68:
         74:58:6d:3b:b9:f1:2d:10:85:c8:b8:27:a0:52:6b:87:12:cb:
         ed:a3:11:be:b1:6c:57:77:3a:15:ba:16:a5:99:46:b8:f4:a2:
         49:6b:f1:62:07:e4:b7:ec:62:2a:4b:bb:d4:39:15:c5:4f:b4:
         e2:3a:32:a7:47:8c:8d:05:da:68:8e:5b:dd:0f:88:a3:98:74:
         0f:cc:ea:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:09:50 2026 by rpki-client