Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.mft
File:                     mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.mft (raw, json)
Hash identifier:          AwmlrfB3VfIncjh/Oha+NqdHakYLM2qxe9G/x4I8OLw=
Subject key identifier:   9D:E4:88:A6:03:89:ED:C8:D3:10:A3:13:A0:EF:AE:D4:C9:F8:E8:4D
Authority key identifier: 99:3F:99:CC:DC:E1:D7:1A:6C:5E:E8:5B:67:E2:D1:FE:FE:AD:88:48
Certificate issuer:       /CN=993f99ccdce1d71a6c5ee85b67e2d1fefead8848
Certificate serial:       01A17A3A788A069A16B400436302A431349E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.mft
Manifest number:          CE
Signing time:             Mon 26 Oct 2026 22:00:14 +0000
Manifest this update:     Mon 26 Oct 2026 22:00:14 +0000
Manifest next update:     Tue 27 Oct 2026 22:00:14 +0000
Files and hashes:         1: b91U6HYF0ho-j3RbSoom-vw6azw.roa (hash: u+n1AmOZJw8G3qiLP8bKsVx/fGf6mN4ChrHMCSiOMho=)
                          2: mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.crl (hash: GaWvZNaEz3+59GNgHShLlYQhUmaXIvt+2IveQtCnqxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7a:3a:78:8a:06:9a:16:b4:00:43:63:02:a4:31:34:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=993f99ccdce1d71a6c5ee85b67e2d1fefead8848
        Validity
            Not Before: Oct 26 22:00:14 2026 GMT
            Not After : Oct 27 22:00:14 2026 GMT
        Subject: CN=9de488a60389edc8d310a313a0efaed4c9f8e84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9a:66:9c:c0:10:df:b8:19:ae:29:69:09:f9:
                    82:e2:6d:77:9c:5f:a0:bf:1d:1d:ed:81:9d:89:65:
                    cb:73:74:77:32:2d:62:fc:3b:81:88:0b:7b:9b:fb:
                    aa:d1:8d:74:dd:9e:2f:a1:9b:13:7a:cb:be:73:1e:
                    70:4e:2a:69:ed:3a:24:a8:b3:50:c5:e6:e4:78:fd:
                    a3:88:89:5a:4d:7c:dc:9b:06:dc:a5:7b:0e:29:fd:
                    48:7d:b3:dd:bc:13:30:7f:75:46:6a:98:e5:dd:6d:
                    b0:b6:82:26:18:64:6c:d2:f6:17:75:a3:09:49:0a:
                    34:0d:d2:cf:e1:db:a5:75:c1:8a:0d:4b:cb:12:6c:
                    1a:47:cd:7f:56:77:5d:b3:2e:7f:31:be:a6:64:8e:
                    2c:19:dc:b1:27:46:d3:3a:29:61:5f:78:dc:8a:50:
                    0e:20:02:20:8e:c8:a4:e7:3b:5e:28:9e:35:e1:6a:
                    ad:78:fa:2a:04:ed:9c:73:27:22:cf:18:f9:0a:64:
                    62:81:f9:50:5c:1e:8a:9a:f0:30:9f:e5:a4:c9:de:
                    c1:06:a6:55:43:a4:23:7e:c9:27:95:3b:7d:92:64:
                    41:fc:e2:74:af:5e:6c:be:13:44:e4:92:b1:45:b8:
                    75:c0:41:68:f3:26:a6:2c:60:39:d5:c6:56:64:a8:
                    cf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:E4:88:A6:03:89:ED:C8:D3:10:A3:13:A0:EF:AE:D4:C9:F8:E8:4D
            X509v3 Authority Key Identifier:
                keyid:99:3F:99:CC:DC:E1:D7:1A:6C:5E:E8:5B:67:E2:D1:FE:FE:AD:88:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f09a86-a5af-4cd8-b6ef-7505ed997ade/1/mT-ZzNzh1xpsXuhbZ-LR_v6tiEg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8f:17:20:f9:7c:d7:ed:30:af:d5:df:e3:4d:1b:6e:41:4e:
         13:18:c9:ef:e6:f4:8f:b1:46:21:dd:83:90:ea:a8:57:16:64:
         27:aa:ff:74:48:26:87:92:77:d9:38:c5:56:e7:1d:dd:52:8a:
         82:fa:d8:8b:16:ed:e7:9e:2b:2c:b0:b4:1e:20:ce:73:5e:b5:
         64:0f:bd:52:8e:6b:7e:1a:0e:e9:ac:91:19:85:7d:b6:6a:a9:
         4f:6c:28:a5:45:f3:46:11:36:84:dc:86:12:7f:85:37:65:26:
         95:c3:d3:74:9d:e2:20:42:0b:4d:28:96:f2:8e:b9:5a:cf:d4:
         73:b0:f3:f7:e6:f9:25:ef:b8:ce:28:90:ca:5f:4d:b1:c2:47:
         4a:d9:77:bf:07:d4:29:55:62:b2:36:fe:cb:35:6c:e4:ba:78:
         92:77:a5:c5:00:7b:6a:99:b0:f5:e8:8c:e7:23:83:54:70:3c:
         a6:83:26:e0:7f:0e:94:38:1a:ef:b9:b1:3f:dc:66:8c:f8:2b:
         29:4c:4c:72:e5:57:c7:f6:67:04:73:b0:f3:38:bd:9c:ea:e2:
         e8:a0:3d:76:5a:05:66:dc:b4:93:76:7d:26:ab:95:51:d4:05:
         9d:a3:3f:72:87:c8:50:82:dd:32:4b:f5:55:4f:c6:d8:38:c5:
         2a:5e:5c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:57:11 2026 by rpki-client