Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
File:                     Fd3Uydwj-sNVdPzitClDmK3YUhw.mft (raw, json)
Hash identifier:          QWD0MRHc9YqDwO9mXPIa3VH12xXlNykK85RxH7Mznms=
Subject key identifier:   FB:70:55:52:4F:94:44:58:7E:F8:19:98:34:11:FB:6A:09:85:0F:39
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Certificate issuer:       /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial:       01A1795F580E9ED34C56A59881D39FDA8A10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
Manifest number:          125F
Signing time:             Mon 26 Oct 2026 18:00:53 +0000
Manifest this update:     Mon 26 Oct 2026 18:00:53 +0000
Manifest next update:     Tue 27 Oct 2026 18:00:53 +0000
Files and hashes:         1: 3x_eNlfqr-pzS31r85Kyh1RTzhw.roa (hash: ca0B1hA6S7RSMd4p7jDgIrOLafYEE67HR7dN2aYSue0=)
                          2: AU0mK3kvJWDL6WvTMDBwruIk9Yo.roa (hash: UJ521U9kX8KbpPJ5yoTgLuBYMW8RZw/CsvE9VFkznzw=)
                          3: Fd3Uydwj-sNVdPzitClDmK3YUhw.crl (hash: Ad3yXSzTGVEEf0wdINs/PR/Kz4qJf5Pz9ZJy1fUr12s=)
                          4: k3Io6XWMMdN-bVtwln4_8KO-IVA.roa (hash: Aa8iwiJFepHxrsbFSA+APkKdOhzyuMHdrvQewpxY1oA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 18:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:5f:58:0e:9e:d3:4c:56:a5:98:81:d3:9f:da:8a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
        Validity
            Not Before: Oct 26 18:00:53 2026 GMT
            Not After : Oct 27 18:00:53 2026 GMT
        Subject: CN=fb7055524f9444587ef819983411fb6a09850f39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:59:da:cf:d4:13:dc:0e:c2:59:12:84:10:b8:
                    12:a3:fc:cf:0d:44:41:47:2d:cf:f2:3f:8b:c2:c2:
                    a1:3f:87:f5:40:db:18:0a:15:1f:a1:a3:08:dd:78:
                    6b:0c:ec:63:06:ff:80:eb:07:40:1d:12:01:3f:06:
                    99:94:42:be:41:34:38:f8:a6:1e:e2:f9:5e:05:45:
                    17:3e:ab:06:eb:28:10:3a:3e:e4:2b:0b:79:f3:2e:
                    57:b6:45:99:55:67:bb:85:45:c0:7c:0b:6a:39:8c:
                    41:fb:6f:90:94:ab:c6:06:88:9d:25:c5:19:cc:83:
                    8c:92:b8:13:c9:f3:d4:3f:a9:5a:3c:d1:bd:60:51:
                    e0:b1:b0:37:6a:c9:38:fd:f1:77:9e:43:67:60:2f:
                    db:2e:be:7f:fb:6b:af:66:1b:8c:2d:64:f9:14:86:
                    8d:b3:8a:87:74:38:fe:34:3b:cf:c1:43:a1:97:3e:
                    76:15:f8:0c:b0:c1:12:25:d2:c3:66:be:45:59:25:
                    2f:26:b2:54:bb:f5:4f:98:2f:76:a1:e0:3b:9f:10:
                    98:31:51:e0:e9:a3:51:2c:e2:d5:10:31:4b:4c:16:
                    c5:0d:10:73:98:55:9b:c3:ec:79:0b:a6:c4:da:ad:
                    e9:c0:70:1f:b8:e5:77:f7:91:af:df:0f:0b:a5:d2:
                    23:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:70:55:52:4F:94:44:58:7E:F8:19:98:34:11:FB:6A:09:85:0F:39
            X509v3 Authority Key Identifier:
                keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:28:53:3d:31:9f:d9:b9:14:f3:53:c4:10:15:ed:49:bd:6c:
         14:23:cd:9b:d4:af:d5:13:06:86:9d:55:1a:42:b3:d2:9b:10:
         c0:05:7d:f3:da:cb:7c:d7:90:a4:80:33:8e:8e:37:d7:d5:8f:
         ab:06:5d:cb:ed:b3:b9:7c:f5:cb:a0:15:e6:ab:27:89:88:d5:
         27:74:a2:35:ac:2f:3e:84:35:fe:59:8d:26:fc:a1:c3:0d:07:
         30:f7:f6:00:91:64:a9:4b:f0:f3:a5:d7:ac:95:30:af:7a:de:
         3b:a7:f7:fa:03:75:17:c4:1d:cf:83:c4:fd:29:88:13:2a:50:
         26:5d:df:3e:55:cf:83:90:b2:ae:56:1a:7c:b1:e3:35:0e:7e:
         bc:71:f7:e6:71:e0:41:fb:25:18:e9:c3:1a:be:c6:a7:43:06:
         03:70:03:18:b7:c1:10:51:ca:d0:62:ef:ce:4e:cd:b9:5d:d2:
         ec:7a:5f:5b:3f:af:78:e7:e8:3a:e4:15:f2:03:2b:99:b7:f0:
         d4:d3:1a:36:d8:73:d1:76:ec:a0:da:4e:ba:de:88:fc:b0:e3:
         2e:14:62:db:97:0a:25:88:52:ae:84:65:e3:d7:5e:cc:d2:dd:
         2c:03:c6:95:d4:9a:91:d5:85:f2:86:d0:67:fd:3b:b1:8a:4b:
         69:b8:e8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:54:19 2026 by rpki-client