Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
File:                     PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft (raw, json)
Hash identifier:          CTLgJrLom2zaPK2yF3Pb9PEV7Sy+MTmPfvyZ+UTFqEg=
Subject key identifier:   D6:B6:73:E9:A3:A2:15:24:BF:92:99:E0:2B:04:96:7E:1E:5D:C2:D2
Authority key identifier: 3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68
Certificate issuer:       /CN=3d639fa4eddc162df3659e721d247ff338962f68
Certificate serial:       01A10F2808DCF1B65F7A892A1ECACB4D68D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
Manifest number:          0362
Signing time:             Tue 06 Oct 2026 03:00:44 +0000
Manifest this update:     Tue 06 Oct 2026 03:00:44 +0000
Manifest next update:     Wed 07 Oct 2026 03:00:44 +0000
Files and hashes:         1: PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl (hash: QoGqdhpAvFGCQcs1N2c2P0MrQh7QoK3B8jd1FuYAQYc=)
                          2: SSbCIFUzoJnAufFAmpn4-eL0evQ.roa (hash: xLYQWvxW9OI7//jHrJrCiY97JsgcAmDpELt0HCZDcTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 23:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:28:08:dc:f1:b6:5f:7a:89:2a:1e:ca:cb:4d:68:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d639fa4eddc162df3659e721d247ff338962f68
        Validity
            Not Before: Oct  6 03:00:44 2026 GMT
            Not After : Oct  7 03:00:44 2026 GMT
        Subject: CN=d6b673e9a3a21524bf9299e02b04967e1e5dc2d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:72:f3:40:a7:5f:96:0f:34:85:a3:b1:89:
                    24:f1:ec:cf:c1:4e:05:cb:e2:48:f0:79:6e:3a:d4:
                    df:2f:c9:13:b8:ab:74:12:46:44:51:00:5b:7d:82:
                    e3:82:68:5b:c2:52:1d:74:27:9d:c9:ff:a7:d9:67:
                    10:03:72:55:0d:3c:86:77:0d:3c:f4:21:6d:5a:d8:
                    81:c0:83:2c:c5:27:6d:82:3e:73:bc:24:d0:81:47:
                    80:b4:50:ee:11:70:99:7b:e0:a1:d5:e0:d3:4b:c8:
                    48:60:cd:fd:d5:6b:c7:7b:0d:ce:a7:23:8c:88:cc:
                    94:56:24:3a:3f:49:4b:69:33:58:87:dc:40:be:c1:
                    9e:ac:6b:64:4a:b0:5b:ba:70:7f:85:10:9c:17:9f:
                    41:c7:33:c5:3c:68:2d:75:38:99:0b:c7:be:22:d3:
                    5b:0a:62:50:82:de:4d:e0:5c:58:ef:cb:4a:23:21:
                    61:f4:e0:e0:a3:f7:f4:23:b6:65:e8:9f:e9:17:9f:
                    19:99:91:13:51:7d:f1:63:01:8e:4a:99:07:61:d6:
                    42:b3:89:79:6b:55:f2:c3:76:77:6c:df:24:4a:43:
                    19:fe:f9:5f:fd:82:d6:b5:46:4e:f7:82:25:ea:f8:
                    34:21:ba:5c:dd:84:90:71:4f:5f:59:99:cf:69:0c:
                    ea:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B6:73:E9:A3:A2:15:24:BF:92:99:E0:2B:04:96:7E:1E:5D:C2:D2
            X509v3 Authority Key Identifier:
                keyid:3D:63:9F:A4:ED:DC:16:2D:F3:65:9E:72:1D:24:7F:F3:38:96:2F:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c77983-be3a-48e3-b5d0-ad284d2824a4/1/PWOfpO3cFi3zZZ5yHSR_8ziWL2g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:23:6e:5c:8c:a4:11:04:45:dc:39:91:26:ef:66:bd:08:1f:
         90:92:0a:7e:71:a6:50:d9:39:07:b7:20:ef:4b:f6:41:ca:82:
         28:33:60:b3:b8:90:e4:38:41:8b:63:77:46:13:b0:bf:5d:d4:
         32:84:26:26:5e:62:cb:4f:6e:f9:1f:65:7f:6b:9c:0c:c9:a9:
         ef:93:4b:76:de:fc:9f:12:21:c2:8e:73:07:a4:ab:55:6d:50:
         d9:8c:2c:33:8b:30:b7:0d:61:28:ae:5c:25:36:b4:15:08:86:
         c5:1f:df:1d:21:b5:7d:a8:bf:06:b7:86:2f:2d:77:d5:be:7d:
         2c:f1:38:8b:28:28:59:1f:69:ad:a2:83:d1:42:b2:94:9f:1d:
         a8:66:82:ef:2e:3e:11:cd:eb:d6:34:54:45:ed:60:3d:c5:d5:
         91:f5:fd:35:6b:b3:b2:c9:4c:2c:8e:40:4d:c6:5f:20:17:dd:
         ed:14:f5:a5:dd:97:7c:84:80:a9:eb:3a:9d:20:0d:e6:b3:44:
         58:69:92:14:8e:43:e5:1c:b2:a3:1b:95:80:63:cb:e4:cc:b0:
         92:63:30:04:58:99:de:e9:12:40:df:f2:78:f9:a3:06:08:95:
         ad:01:06:a5:23:c4:4e:bb:d1:4f:f1:97:12:50:5f:ae:86:55:
         61:bc:37:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 10:18:09 2026 by rpki-client