Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File:                     piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier:          L98OEKZc5s/OocVqCeTtvisMhAK0LVHj6+MQVyEfvW8=
Subject key identifier:   D6:3E:56:6C:A4:0D:18:96:9B:0B:83:10:AC:E6:30:2A:4A:C2:51:03
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer:       /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial:       01A17F6234EC97F6518C65724B7AADCBA29C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number:          0F0A
Signing time:             Tue 27 Oct 2026 22:01:44 +0000
Manifest this update:     Tue 27 Oct 2026 22:01:44 +0000
Manifest next update:     Wed 28 Oct 2026 22:01:44 +0000
Files and hashes:         1: Sr6zqiJ99FeqwYQ28f19iLqoqDg.roa (hash: TL3BARSlFoDZ5ZNhUOEZiPZ9fIVbuOQ2POjRAByuFjI=)
                          2: TGeDIFBGIW5eczvcX5q3jNyzVtA.roa (hash: DgUdGVPI56iMDORgQFEHjPBMjjgqkbyYMnQ4bBFfVcc=)
                          3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: OlExqytS9ApvdS9TsGtmvxNzw61JLe/sZr51lRT8gSU=)
                          4: tVbgzppTtTNiiJtIVClKJaUjV5Q.roa (hash: +w5E9Iu1vewLPX6wA/Khvas6REQH1AClWY9b6rdLWo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:62:34:ec:97:f6:51:8c:65:72:4b:7a:ad:cb:a2:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
        Validity
            Not Before: Oct 27 22:01:44 2026 GMT
            Not After : Oct 28 22:01:44 2026 GMT
        Subject: CN=d63e566ca40d18969b0b8310ace6302a4ac25103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:b7:ae:e8:ef:30:ad:e5:a5:b0:2b:c6:2d:
                    8b:48:25:ac:41:dc:5c:1a:72:5c:2f:c4:7d:e9:fd:
                    7a:87:50:2e:23:3b:ed:7b:43:73:50:46:7d:15:8b:
                    c2:95:23:3a:3d:bb:04:e1:28:22:1b:ff:d3:f1:11:
                    ae:2d:13:97:72:ac:e5:a2:f8:07:52:6f:46:52:69:
                    ca:a5:ac:0b:22:dd:32:42:13:f4:ed:77:aa:cc:27:
                    1f:86:bf:0e:9d:4b:8a:87:84:a3:1f:85:78:e5:4a:
                    f7:64:93:dd:39:85:d6:a2:59:07:d6:ee:60:e6:7a:
                    6d:e9:55:67:d5:1a:08:8b:21:2b:d7:e8:62:42:68:
                    4f:58:cc:bc:2f:86:3a:3f:5d:9d:e3:fd:e4:61:6b:
                    99:7e:3b:65:43:0f:9c:f0:10:fb:18:cb:f1:7f:a6:
                    9e:b9:15:67:c6:a0:99:cc:1a:c7:29:41:3c:b9:7a:
                    b2:67:fd:98:9f:bc:3d:4a:48:54:d5:20:92:6a:43:
                    6e:8e:dc:a4:ad:97:39:c8:6d:12:b3:3d:78:cf:51:
                    25:5a:7c:0f:7f:24:89:be:ea:98:1b:22:2b:83:2b:
                    89:8f:15:93:06:4a:bd:e8:6d:29:64:4e:7e:83:cb:
                    40:79:45:09:07:17:09:a7:b0:ca:f1:b2:38:3c:7b:
                    6e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3E:56:6C:A4:0D:18:96:9B:0B:83:10:AC:E6:30:2A:4A:C2:51:03
            X509v3 Authority Key Identifier:
                keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:44:41:bf:5c:d8:9c:e8:ac:72:7c:b9:89:cd:44:6d:f1:b1:
         04:e4:1d:42:40:8d:7b:76:b9:b1:2f:86:ac:72:4d:5c:69:cc:
         16:06:b1:a9:d7:88:b9:19:c9:2f:d9:6b:f0:3f:6f:af:bd:86:
         8b:e2:84:e5:66:3e:73:9a:af:27:b5:81:c9:d3:e1:23:ed:c7:
         6c:ae:3d:1c:dc:61:a0:95:15:cb:a0:96:7e:9a:76:94:cb:57:
         00:05:96:4b:c2:0d:7f:63:3b:45:48:35:e1:b9:d0:cd:71:7a:
         25:90:7d:50:06:ef:26:08:37:de:b6:24:11:d2:60:eb:cc:6c:
         a0:fa:cb:ca:6d:7e:df:11:1f:e4:bd:b7:38:88:f6:c5:b6:64:
         78:73:3e:3b:e2:a7:05:2a:0e:2a:a4:cb:86:84:1d:35:5b:d8:
         95:18:c2:bd:78:b6:f8:66:31:cb:57:9e:f7:46:8c:f3:59:6a:
         63:00:ae:2b:53:25:96:12:17:eb:88:82:eb:a1:4c:cd:97:c4:
         82:52:c0:ca:57:44:1c:8a:80:38:19:56:6a:8e:dc:8a:0a:f3:
         0f:f4:15:3d:0c:0e:c8:bc:94:3c:e1:b4:29:24:09:8e:a1:15:
         6c:8a:c9:e3:6a:25:9a:0e:18:16:39:bc:c8:36:71:b8:ba:29:
         cc:f6:97:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF/YjTsl/ZRjGVyS3qty6KcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MmE4YzdhMWY2YTRjOTQ5ZTAyN2I1MzY5ZDk3ZDc1NzZl
MTQ3ZjgwHhcNMjYxMDI3MjIwMTQ0WhcNMjYxMDI4MjIwMTQ0WjAzMTEwLwYDVQQD
EyhkNjNlNTY2Y2E0MGQxODk2OWIwYjgzMTBhY2U2MzAyYTRhYzI1MTAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYa3rujvMK3lpbArxi2LSCWsQdxc
GnJcL8R96f16h1AuIzvte0NzUEZ9FYvClSM6PbsE4SgiG//T8RGuLROXcqzlovgH
Um9GUmnKpawLIt0yQhP07XeqzCcfhr8OnUuKh4SjH4V45Ur3ZJPdOYXWolkH1u5g
5npt6VVn1RoIiyEr1+hiQmhPWMy8L4Y6P12d4/3kYWuZfjtlQw+c8BD7GMvxf6ae
uRVnxqCZzBrHKUE8uXqyZ/2Yn7w9SkhU1SCSakNujtykrZc5yG0Ssz14z1ElWnwP
fySJvuqYGyIrgyuJjxWTBkq96G0pZE5+g8tAeUUJBxcJp7DK8bI4PHtu5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNY+VmykDRiWmwuDEKzmMCpKwlEDMB8GA1UdIwQY
MBaAFKYqjHofakyUngJ7U2nZfXV24Uf4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYt
NThjODVkNDMzNmJjLzEvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9mYzAyMmQtZjhlNS00YTZlLThiMWYtNThjODVkNDMzNmJj
LzEvcGlxTWVoOXFUSlNlQW50VGFkbDlkWGJoUl9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0RBv1zY
nOiscny5ic1EbfGxBOQdQkCNe3a5sS+GrHJNXGnMFgaxqdeIuRnJL9lr8D9vr72G
i+KE5WY+c5qvJ7WBydPhI+3HbK49HNxhoJUVy6CWfpp2lMtXAAWWS8INf2M7RUg1
4bnQzXF6JZB9UAbvJgg33rYkEdJg68xsoPrLym1+3xEf5L23OIj2xbZkeHM+O+Kn
BSoOKqTLhoQdNVvYlRjCvXi2+GYxy1ee90aM81lqYwCuK1MllhIX64iC66FMzZfE
glLAyldEHIqAOBlWao7cigrzD/QVPQwOyLyUPOG0KSQJjqEVbIrJ42olmg4YFjm8
yDZxuLopzPaXdQ==
-----END CERTIFICATE-----
Generated at Wed Oct 28 05:24:59 2026 by rpki-client