Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
File:                     3I_H9_qQqYNsGrKgzyvizXKgzN0.mft (raw, json)
Hash identifier:          ehKTXr/PBiFx76Io8jnWHtO6QtxEvC/op5MxnZ8/Pio=
Subject key identifier:   24:C9:FA:9C:D0:90:1C:0F:2D:F8:95:7D:48:14:71:C0:50:E4:5C:5C
Authority key identifier: DC:8F:C7:F7:FA:90:A9:83:6C:1A:B2:A0:CF:2B:E2:CD:72:A0:CC:DD
Certificate issuer:       /CN=dc8fc7f7fa90a9836c1ab2a0cf2be2cd72a0ccdd
Certificate serial:       01A116E1BADE58907B6400CE88A3117E2810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
Manifest number:          0177
Signing time:             Wed 07 Oct 2026 15:00:54 +0000
Manifest this update:     Wed 07 Oct 2026 15:00:54 +0000
Manifest next update:     Thu 08 Oct 2026 15:00:54 +0000
Files and hashes:         1: 3I_H9_qQqYNsGrKgzyvizXKgzN0.crl (hash: uJnfSYdJQFm52iawv1TvOvnr5WaZe4QTR+ev7gvbYqg=)
                          2: 6HatfdixY2P5gSgvmX5-6wUd1wc.roa (hash: 3HNrydriuFOEzSXWmClbpJIH0oZDXxGv93C16WVaK7I=)
                          3: AuzmeUpM_SxpfBgEhLhD1987_aI.roa (hash: vCf9za/qm6yqMbXZ2WsXiNRkpm9xQG6Sr9RvFWVkvpY=)
                          4: RKccBzAjfAgdOH1QdushhT7AryI.roa (hash: A/QzLDENuO4yPz22/8nn+nO2J9VEx9TuDbqFSEgKIeo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 15:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:16:e1:ba:de:58:90:7b:64:00:ce:88:a3:11:7e:28:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8fc7f7fa90a9836c1ab2a0cf2be2cd72a0ccdd
        Validity
            Not Before: Oct  7 15:00:54 2026 GMT
            Not After : Oct  8 15:00:54 2026 GMT
        Subject: CN=24c9fa9cd0901c0f2df8957d481471c050e45c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9d:8b:15:3f:fe:51:34:83:6a:6d:3d:60:b9:
                    59:09:24:15:b2:ca:26:46:8d:ae:5f:59:85:2d:c6:
                    f4:c5:88:4a:f6:92:a2:14:c7:7b:4d:dc:f9:04:18:
                    15:e0:a4:60:34:8e:33:92:3b:42:5f:f3:b7:ea:23:
                    ff:4c:e2:5e:34:47:39:0a:a5:0e:d7:94:95:37:88:
                    c8:e6:d9:f2:75:95:0c:fa:67:c0:69:25:27:c1:7b:
                    e7:70:c0:ff:1b:c5:37:3a:44:09:ed:48:cc:4a:26:
                    85:b1:d1:46:bd:eb:7f:89:0b:5b:94:b5:b8:d1:04:
                    c2:c4:dc:73:94:c1:df:b5:12:36:32:14:31:2c:f4:
                    88:f7:58:8d:c4:c5:7d:23:f7:6e:43:ee:9b:84:1d:
                    d7:c4:c3:dc:15:c6:79:fe:9f:36:3f:e2:e1:5d:83:
                    94:66:8f:5a:ba:b5:18:87:bb:7f:21:da:f6:6f:bd:
                    39:cb:04:6e:d7:07:bd:25:24:28:a1:b5:4e:d9:e9:
                    77:2d:c6:19:1a:63:c3:d7:11:9d:19:81:f4:06:72:
                    56:4a:ea:47:46:f9:80:47:e6:a9:ff:52:3b:d1:e9:
                    5c:33:b4:c5:86:6d:cd:9f:9a:65:d5:0f:eb:af:27:
                    48:f1:e4:91:c3:cd:5a:60:1c:e8:8d:2a:05:3e:13:
                    3a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:C9:FA:9C:D0:90:1C:0F:2D:F8:95:7D:48:14:71:C0:50:E4:5C:5C
            X509v3 Authority Key Identifier:
                keyid:DC:8F:C7:F7:FA:90:A9:83:6C:1A:B2:A0:CF:2B:E2:CD:72:A0:CC:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3I_H9_qQqYNsGrKgzyvizXKgzN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/75083d-25db-4085-9d09-2c26197c83e9/1/3I_H9_qQqYNsGrKgzyvizXKgzN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b0:67:ac:60:10:79:f7:47:ba:d9:4e:a7:22:65:06:66:86:
         d1:1b:a6:cf:3e:f0:04:36:2e:47:8a:fa:aa:ce:c0:92:75:37:
         16:97:eb:64:bb:84:3d:b0:5c:ea:71:c4:bb:ac:e4:c5:b3:25:
         03:72:40:d2:6d:ca:4e:9a:c9:e6:a4:55:70:fa:f2:21:8a:ef:
         a0:94:8f:37:df:77:1d:ea:5e:e8:59:98:11:e7:a7:02:ae:6c:
         5d:02:4e:53:55:38:e1:96:2f:87:d9:40:58:8a:7d:c5:99:d8:
         bd:55:6c:97:36:05:0d:98:61:16:11:f6:8c:63:47:04:87:0d:
         13:c1:ec:34:de:d6:0c:d6:68:ee:6e:0e:f9:09:4e:7c:89:40:
         2b:c1:24:97:70:4f:dd:05:88:3f:02:ac:67:90:79:89:e9:85:
         cd:2c:df:fa:b9:d4:9b:cc:b3:06:c7:7a:3f:6c:75:89:bd:16:
         c8:6f:cb:e6:b4:5b:a9:a3:eb:3c:95:ed:e5:98:8f:fd:38:a8:
         ed:6f:bf:1c:48:f0:72:f6:d8:96:e3:b3:6b:dd:d1:41:5b:ca:
         22:6a:ad:c8:7c:7a:7f:b8:e7:98:55:56:be:d4:f0:83:e1:1d:
         e1:44:84:b4:da:de:ec:fd:0e:a1:a2:8b:19:00:64:91:dc:12:
         9e:05:e7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 01:00:31 2026 by rpki-client