Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
File:                     sYfM7EmqX2aqAmSNkbSi7o_3veY.mft (raw, json)
Hash identifier:          sELH3xx8Jp64+jKYEIZVF+xll8PXRz3XzOai7oRGAgI=
Subject key identifier:   72:09:46:43:B0:4D:27:13:79:40:1B:87:46:38:B5:87:30:51:74:93
Authority key identifier: B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6
Certificate issuer:       /CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
Certificate serial:       01A1784C2F6D80136434AF84868EBAA8E944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
Manifest number:          07F1
Signing time:             Mon 26 Oct 2026 13:00:21 +0000
Manifest this update:     Mon 26 Oct 2026 13:00:21 +0000
Manifest next update:     Tue 27 Oct 2026 13:00:21 +0000
Files and hashes:         1: sYfM7EmqX2aqAmSNkbSi7o_3veY.crl (hash: XQ3Xltx80fNuKCYSzxRWmuIPbYVED9tPUnBDuRGZ23E=)
                          2: vtk0NYL8kgLZ9pXjVTmANhtyXlc.roa (hash: ASiU/VZxh3GZFZYmlNltFl5dj/W+E1FulQvZXR6ONjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:4c:2f:6d:80:13:64:34:af:84:86:8e:ba:a8:e9:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b187ccec49aa5f66aa02648d91b4a2ee8ff7bde6
        Validity
            Not Before: Oct 26 13:00:21 2026 GMT
            Not After : Oct 27 13:00:21 2026 GMT
        Subject: CN=72094643b04d271379401b874638b58730517493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:24:9b:dc:18:9d:e7:ab:e1:0b:f1:b7:cc:
                    28:fa:73:87:76:07:90:fc:40:89:89:a8:75:5f:65:
                    42:57:aa:6b:91:59:c8:bf:ce:87:ba:5f:06:24:49:
                    13:ea:bd:d1:ed:91:13:59:bf:e7:54:ea:f3:f5:08:
                    07:8a:25:fe:ae:76:54:fd:6e:7f:44:7d:1c:e6:a7:
                    74:d8:46:72:cd:56:76:ed:9f:63:96:70:0e:2d:e9:
                    4e:ae:ae:b2:0e:10:ef:f5:52:42:d0:c7:39:4e:de:
                    53:49:63:d3:4f:97:fe:17:f4:66:27:9e:6c:cc:fc:
                    c7:8a:4c:5f:d0:eb:bd:3a:09:6b:f2:f0:ac:b6:cf:
                    42:82:b1:e9:be:b3:a2:66:e9:79:79:16:82:db:70:
                    ea:97:c9:d4:56:8d:5a:bc:c6:12:7f:95:2f:57:dd:
                    90:8c:11:35:57:a7:fd:78:ea:45:d8:6a:8b:e5:b7:
                    01:c3:78:b5:ac:df:e1:2b:49:74:55:28:c0:ba:f0:
                    db:45:c2:bc:c3:19:b4:33:d7:68:f5:76:e4:83:70:
                    be:6e:c5:68:35:0e:dc:73:98:f3:60:16:05:c8:db:
                    f0:d3:4b:6c:99:59:89:44:50:5e:6a:1d:cd:c8:1c:
                    c9:40:1a:bd:a5:13:a2:7a:3b:14:a6:77:b9:96:25:
                    a6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:09:46:43:B0:4D:27:13:79:40:1B:87:46:38:B5:87:30:51:74:93
            X509v3 Authority Key Identifier:
                keyid:B1:87:CC:EC:49:AA:5F:66:AA:02:64:8D:91:B4:A2:EE:8F:F7:BD:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYfM7EmqX2aqAmSNkbSi7o_3veY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/72281a-d688-415d-a2c6-17f4e0f6cdeb/1/sYfM7EmqX2aqAmSNkbSi7o_3veY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:55:24:4a:44:e7:f7:d9:e5:ba:23:4f:50:6c:c8:ee:75:a8:
         06:4d:ee:e4:86:8e:a2:75:8e:31:99:8a:d8:cd:28:96:f5:b8:
         4b:02:62:27:0d:36:b4:19:07:6b:23:9d:a4:a2:ee:0f:c1:cd:
         c1:cd:8a:d1:de:07:03:55:94:20:3d:3b:1a:da:fe:15:74:8b:
         63:0d:d4:f8:dc:a2:1f:e2:75:5e:8f:90:67:61:20:c6:a4:ea:
         0b:30:9d:06:e1:ba:08:2c:5e:a3:bf:78:f0:c0:32:be:f3:d3:
         76:19:aa:fa:53:60:73:f6:e9:33:33:36:c0:8b:02:be:99:2e:
         17:54:88:63:3a:af:0f:13:ba:64:f9:3d:78:4c:a9:fe:ce:8a:
         0c:48:c2:ba:bd:a9:fb:0a:ac:68:4f:36:48:8e:8a:b5:74:46:
         3e:2e:ba:7a:4f:32:26:59:ad:76:5f:3c:d3:d9:b5:c7:3a:2a:
         54:b8:9e:eb:88:37:c1:aa:38:dc:07:5b:d1:b3:4a:da:e5:c8:
         1b:18:e3:f7:f5:58:32:8c:a5:46:60:27:45:13:1f:1f:4c:2c:
         95:aa:b2:c0:26:27:48:a3:1d:8b:1a:6f:b7:c2:dc:50:93:ef:
         62:aa:cf:2c:3b:73:f4:f8:9b:da:62:03:09:fa:9d:2b:cc:17:
         b2:b3:6f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:53:08 2026 by rpki-client