Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
File:                     9Ma33VF1vo23oFIvfU5BxcQsayk.mft (raw, json)
Hash identifier:          7yOkl0R8CaXgyyQ2Fcy0CJf6+YdK0uoST6/S8fxpjuY=
Subject key identifier:   B3:D7:1B:61:F0:40:12:55:93:38:F5:C6:6A:5D:91:16:B3:47:F8:AD
Authority key identifier: F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29
Certificate issuer:       /CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
Certificate serial:       01A15477842ADFEE2946291243B76DC2B6C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
Manifest number:          173D
Signing time:             Mon 19 Oct 2026 14:01:21 +0000
Manifest this update:     Mon 19 Oct 2026 14:01:21 +0000
Manifest next update:     Tue 20 Oct 2026 14:01:21 +0000
Files and hashes:         1: 9Ma33VF1vo23oFIvfU5BxcQsayk.crl (hash: 0pKH6fK+Z8OhzEp5srQ/WnDQ0WEaPlr4TNYIrjqCHuo=)
                          2: I8asKIhR7rx1QJHePz1zSrjIGUY.roa (hash: Mi4ka4rN84ZkzQjrL2y3JAqkIczcI4CxcVd5uspi2ss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:54:77:84:2a:df:ee:29:46:29:12:43:b7:6d:c2:b6:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4c6b7dd5175be8db7a0522f7d4e41c5c42c6b29
        Validity
            Not Before: Oct 19 14:01:21 2026 GMT
            Not After : Oct 20 14:01:21 2026 GMT
        Subject: CN=b3d71b61f04012559338f5c66a5d9116b347f8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:35:e4:8b:ce:bf:cf:5e:bf:c9:9b:d1:e0:d7:
                    7f:2e:c2:87:92:7c:c0:8a:09:69:7e:89:42:52:9f:
                    db:01:29:a0:33:8a:ab:0a:31:5b:c7:6e:64:77:7c:
                    36:08:af:c2:11:ba:39:b1:43:6c:42:3c:97:2b:6a:
                    94:45:52:25:20:c7:44:2d:61:ca:6d:63:ce:23:03:
                    39:dc:a8:b6:20:17:eb:50:17:f1:8d:cb:dd:52:32:
                    42:08:b1:9e:52:56:67:ca:33:b2:7f:b2:68:ef:de:
                    6f:98:65:c6:ed:10:09:84:4d:28:77:42:b4:65:8a:
                    b7:c7:97:5d:7f:c0:61:fb:b8:8f:45:23:25:8e:7c:
                    c6:63:95:e8:8c:5e:18:0e:c5:ee:d7:54:19:53:ed:
                    07:69:cb:64:9c:42:0a:fc:63:3e:23:88:07:57:d9:
                    92:3f:92:55:5a:a9:f6:0d:29:af:6f:7a:82:7d:a3:
                    5b:07:ff:4d:2b:a5:49:20:23:38:99:92:4b:97:aa:
                    bb:47:1d:09:e6:c8:a4:a9:2f:69:b2:cb:b1:be:05:
                    c3:bf:34:89:5d:93:c3:ea:19:a9:90:ac:22:e0:c3:
                    fa:4e:91:59:6d:77:ff:e1:9c:f6:00:10:ba:fe:21:
                    a9:6b:21:9f:b6:cd:05:a7:a5:e8:21:1c:ee:d4:d6:
                    0d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D7:1B:61:F0:40:12:55:93:38:F5:C6:6A:5D:91:16:B3:47:F8:AD
            X509v3 Authority Key Identifier:
                keyid:F4:C6:B7:DD:51:75:BE:8D:B7:A0:52:2F:7D:4E:41:C5:C4:2C:6B:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Ma33VF1vo23oFIvfU5BxcQsayk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c5f714-472c-4856-aa4b-9b21b6f6679a/1/9Ma33VF1vo23oFIvfU5BxcQsayk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:ea:66:f7:3c:f0:8e:5e:8b:5f:10:5a:56:aa:48:33:c6:71:
         29:10:3d:6a:37:67:67:18:a6:73:74:8b:9c:31:9f:cb:c5:89:
         83:1c:44:8e:03:83:39:4e:6f:bc:d6:37:f7:08:9b:59:1f:8c:
         75:c0:2f:54:9b:ad:97:47:cb:db:68:a9:59:3a:92:70:a0:e2:
         d7:14:d7:a5:a5:74:22:ce:0f:c5:9f:77:6b:91:1c:7f:f4:4f:
         e4:32:7c:8a:b3:88:a3:d8:a1:39:18:ef:88:cd:eb:67:e1:ae:
         c5:82:0b:37:ef:f3:5a:4e:2a:02:cb:48:6a:3b:92:d2:93:24:
         cd:cb:c4:df:3b:39:47:28:9b:1d:4e:b9:23:16:14:be:68:d3:
         34:6c:c9:61:e2:97:62:14:62:6d:28:a0:f2:bc:06:3b:3c:50:
         08:a2:ef:b2:1e:10:db:48:58:84:3e:79:c9:a9:65:0e:05:3e:
         d0:71:da:4c:8a:b3:f8:ed:ad:63:49:40:43:d0:b0:27:fe:13:
         38:89:45:3d:a6:a2:4f:2c:5d:45:95:d8:bc:72:41:5a:f1:b0:
         ed:99:eb:de:c5:d6:26:1c:db:0b:07:b2:b8:86:ea:42:2c:86:
         8d:d2:22:a8:0f:49:e3:2b:9d:58:4f:5e:de:34:e6:8b:32:ca:
         b9:f3:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:52:01 2026 by rpki-client