Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
File:                     735cdfZIrGkrFLwiLiwYDIY7ReI.mft (raw, json)
Hash identifier:          q+7rJKBNRW4PbN2y07ojB6WyMYSt9lIo9BlqNlTWJLg=
Subject key identifier:   6F:1B:74:E0:A9:5E:55:29:25:C9:B5:08:45:42:91:15:84:E3:BA:A1
Authority key identifier: EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
Certificate issuer:       /CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Certificate serial:       01A142035722620025E0F1CA31C0408645C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
Manifest number:          0745
Signing time:             Fri 16 Oct 2026 00:01:17 +0000
Manifest this update:     Fri 16 Oct 2026 00:01:17 +0000
Manifest next update:     Sat 17 Oct 2026 00:01:17 +0000
Files and hashes:         1: 1j3vfqmoOqwb7Yh6DBdvRjdsFsg.roa (hash: /Uld+qa79+lTp86N22k2YZMrzBMGIznMfTj+54uPKBY=)
                          2: 735cdfZIrGkrFLwiLiwYDIY7ReI.crl (hash: BF4rhwldnu+PR8tHR/MulgUzovOeR8CvRbgxnd2oLtA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 00:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:42:03:57:22:62:00:25:e0:f1:ca:31:c0:40:86:45:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
        Validity
            Not Before: Oct 16 00:01:17 2026 GMT
            Not After : Oct 17 00:01:17 2026 GMT
        Subject: CN=6f1b74e0a95e552925c9b5084542911584e3baa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:16:97:a5:ce:89:5b:0e:7a:64:01:8a:dc:
                    cb:a5:5e:9a:f2:62:d5:8c:0d:e3:f7:58:83:87:5e:
                    9e:14:a4:8c:5a:ce:1e:2e:b7:10:90:34:61:df:9b:
                    c7:51:3b:88:b4:bb:56:a1:57:ac:ba:fb:db:72:1a:
                    b3:ea:0c:f6:6a:88:61:d9:c9:1c:f0:d0:44:35:2d:
                    d4:f0:45:32:73:97:5a:e3:a3:0b:6d:ff:9b:b5:48:
                    75:96:5e:70:b8:3a:b7:be:1a:ec:20:a3:5e:ff:96:
                    a9:11:5d:42:ef:a3:8d:c7:e9:17:3a:11:78:61:ae:
                    c7:e3:32:76:e0:70:b5:a8:c8:7a:f7:eb:ac:73:5c:
                    00:7a:89:67:03:ff:9c:36:6b:1f:c4:ce:e0:5c:be:
                    a5:11:ab:b0:b8:bb:c9:31:32:2e:3d:e0:87:d5:c5:
                    ee:18:ad:34:67:5d:c1:a1:69:22:58:ba:00:37:5f:
                    ce:a6:80:e9:88:92:2b:52:9f:f3:2f:e1:cf:35:10:
                    2b:10:b4:d0:ec:c6:41:07:0e:72:3d:c9:c6:d5:c2:
                    40:b4:95:cf:bd:5d:f6:7d:b5:d7:87:99:a8:c3:c4:
                    10:2b:10:2a:f4:a3:c7:bf:a4:ea:e3:b8:ed:90:ac:
                    6e:68:23:b3:40:dd:57:52:08:9d:f7:3a:c6:8d:84:
                    98:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1B:74:E0:A9:5E:55:29:25:C9:B5:08:45:42:91:15:84:E3:BA:A1
            X509v3 Authority Key Identifier:
                keyid:EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:67:e4:d3:ed:fd:f3:91:a7:a3:08:61:ff:24:78:6b:6c:35:
         ae:81:c4:f4:1f:48:ce:f0:96:4b:86:14:40:8a:44:4c:f8:7f:
         68:b6:7f:db:20:0e:9b:c3:03:c1:b8:65:86:2f:a8:7f:4e:ac:
         75:81:b1:44:c0:a6:81:3c:97:71:ba:1a:49:af:58:34:40:ab:
         07:b0:86:14:f2:e0:7f:d9:8b:b4:29:c7:a5:2a:ad:6a:7e:70:
         aa:fb:62:d5:0f:26:32:23:67:18:ab:fc:23:d7:c0:78:1e:4c:
         c6:3d:8b:8a:03:1a:00:9c:cd:36:06:9f:b1:a9:92:b8:65:5e:
         a1:da:8c:2e:45:46:a8:31:ce:07:0b:e6:74:a6:82:f2:a0:c6:
         1a:09:23:58:c4:b7:43:b9:01:7f:43:e8:d5:d9:05:08:b1:0a:
         2d:d5:0c:fb:dd:74:5b:ef:0e:94:18:93:ee:ef:e7:34:f5:e7:
         db:d8:b5:6d:e0:d0:a4:d6:a6:68:5d:2c:66:4a:77:66:82:c8:
         f9:70:f4:ef:bc:39:ba:d2:d0:78:a7:d1:2c:55:36:ce:5f:2a:
         9f:7e:bb:57:55:f7:22:9b:73:60:46:6f:3b:ca:a3:1d:f4:62:
         2c:55:e7:ee:dc:7b:5a:b0:79:49:cb:7c:75:48:7d:f7:e1:e5:
         67:53:a2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 11:14:51 2026 by rpki-client