Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
File:                     8_74sMHKR-cW2iGdMQKAKH026-M.mft (raw, json)
Hash identifier:          vTnMk1Eq3d7itrJRgiQ2rwskBShtcPU8Vse3SaDek4Y=
Subject key identifier:   36:3F:AD:F8:D6:18:2F:AA:38:E3:A7:0B:B3:93:8F:B8:18:18:5A:0D
Authority key identifier: F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3
Certificate issuer:       /CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
Certificate serial:       01A183759B23F57E8025CAF2073A02C8953E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
Manifest number:          1155
Signing time:             Wed 28 Oct 2026 17:01:25 +0000
Manifest this update:     Wed 28 Oct 2026 17:01:25 +0000
Manifest next update:     Thu 29 Oct 2026 17:01:25 +0000
Files and hashes:         1: 8_74sMHKR-cW2iGdMQKAKH026-M.crl (hash: S4Gu4LKAajJgIAuEt8pOsMZ4PYpLHOP8MsmO3LyO28w=)
                          2: UIIn39nTLp1morWauT7gr2in8-4.roa (hash: jTFbYC8gMB5ReO3RhcTGo44tsBwWXySORvyGFBMm9pk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 14:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:83:75:9b:23:f5:7e:80:25:ca:f2:07:3a:02:c8:95:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3fef8b0c1ca47e716da219d310280287d36ebe3
        Validity
            Not Before: Oct 28 17:01:25 2026 GMT
            Not After : Oct 29 17:01:25 2026 GMT
        Subject: CN=363fadf8d6182faa38e3a70bb3938fb818185a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:16:68:75:c2:e5:7e:76:00:97:38:ea:c7:32:
                    6d:51:ec:04:43:ca:e2:09:4e:b6:d4:aa:48:95:da:
                    33:02:4c:e7:c1:49:53:f7:4a:0e:31:6f:1f:26:b5:
                    83:44:b6:a7:5c:08:b8:60:08:13:60:8e:b3:58:5d:
                    0b:71:95:60:3c:18:6b:85:57:63:70:0c:8e:43:80:
                    c0:de:16:5f:fd:f7:c6:8f:88:3a:4c:8d:2f:5b:67:
                    06:cf:a7:7f:92:c3:14:4d:5e:b0:dd:c7:87:36:2d:
                    12:ce:17:b5:6a:17:9d:16:fb:a4:07:a9:70:a0:31:
                    01:5e:3d:5e:d6:c0:67:0b:80:3c:8a:ab:44:c8:62:
                    df:9d:a9:5d:8c:7e:a7:39:b1:9d:82:91:eb:25:a4:
                    cb:61:eb:dd:38:44:db:0c:1e:ac:9b:1b:3d:b1:70:
                    7a:f6:69:d1:90:62:bf:3a:fa:61:2a:8f:af:45:5c:
                    a1:82:28:b1:9d:78:00:56:49:74:29:95:4b:37:a9:
                    90:c8:fa:3c:5b:cb:e5:8e:d2:38:4e:bc:6c:60:6c:
                    be:2f:39:e6:b2:4d:25:84:37:2b:d0:96:f6:43:d8:
                    56:fe:5c:ce:bb:54:f4:13:5f:14:16:10:74:10:a9:
                    04:66:2e:ae:24:9a:52:52:e4:6d:bc:8f:de:05:67:
                    ec:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3F:AD:F8:D6:18:2F:AA:38:E3:A7:0B:B3:93:8F:B8:18:18:5A:0D
            X509v3 Authority Key Identifier:
                keyid:F3:FE:F8:B0:C1:CA:47:E7:16:DA:21:9D:31:02:80:28:7D:36:EB:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8_74sMHKR-cW2iGdMQKAKH026-M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d5bd98-ff34-4263-8d0f-f87c50df6fb7/1/8_74sMHKR-cW2iGdMQKAKH026-M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:7d:fa:44:b0:2f:11:3d:84:cc:bd:e3:16:8a:39:c8:88:b9:
         1f:1f:b2:8b:e6:f8:22:a6:60:ce:96:97:f7:81:9f:26:7a:6c:
         35:53:45:71:29:1a:a4:d9:be:31:53:a3:76:31:d1:10:ce:dc:
         07:19:a5:85:78:7e:e3:36:3a:30:50:d7:ce:c0:2d:21:24:83:
         bd:e6:2c:f2:e9:6d:ad:70:0f:79:60:87:93:86:e6:d9:27:19:
         27:51:c4:91:5b:ac:04:e1:ca:c5:71:29:55:a9:e4:dd:9e:67:
         d3:76:a3:1f:0b:20:6f:4a:6f:a1:fb:9d:79:80:86:27:b7:d5:
         0d:5f:93:05:cd:e4:74:c6:71:79:e0:8f:6d:41:fe:ac:4d:7c:
         e2:61:2f:8b:b4:69:3c:3e:29:c3:8f:83:91:b5:52:e6:37:3e:
         a3:73:af:40:d6:e0:ac:c6:94:51:8b:be:f3:ca:c7:64:49:9a:
         2f:14:6e:61:86:8c:cd:86:ba:fd:f2:c3:ff:d2:41:f1:91:ea:
         9a:db:d1:79:65:75:33:53:df:b6:73:5b:b5:a5:c6:83:78:21:
         56:ef:2e:dd:09:c8:e7:bf:7d:ea:d9:2d:3e:62:d3:f1:6c:e1:
         99:7e:64:42:c9:67:02:ea:f3:1b:1e:59:84:fe:f2:2f:e5:da:
         18:dc:91:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 00:41:45 2026 by rpki-client