Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
File:                     B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft (raw, json)
Hash identifier:          A1xmW7HaVkyvinzCtIaUhvODO6Umbgzoj4HnROPtHno=
Subject key identifier:   92:A0:0D:B7:FC:30:C9:94:08:21:41:51:1D:12:64:63:F8:92:1D:FC
Authority key identifier: 07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E
Certificate issuer:       /CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
Certificate serial:       01A140831EE4DE36A3869518E1832765472C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
Manifest number:          0572
Signing time:             Thu 15 Oct 2026 17:01:37 +0000
Manifest this update:     Thu 15 Oct 2026 17:01:37 +0000
Manifest next update:     Fri 16 Oct 2026 17:01:37 +0000
Files and hashes:         1: B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl (hash: DHPIL+9rqmhacWPZFihIq6tldTtQStJU4BpPFLgZvPo=)
                          2: sz9G7DpWjEEMUVJVVxcUaKAB47w.asa (hash: qMSm9Lo5lhWN3TZsyk9ikcvCy7eunxVm7Ys7+c4vy5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 16:56:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:40:83:1e:e4:de:36:a3:86:95:18:e1:83:27:65:47:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0776334dc6f70f563e998f6080ad328aab7f8d0e
        Validity
            Not Before: Oct 15 17:01:37 2026 GMT
            Not After : Oct 16 17:01:37 2026 GMT
        Subject: CN=92a00db7fc30c994082141511d126463f8921dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:01:46:0a:42:1f:14:37:30:82:45:e6:6d:31:
                    5c:ae:8d:d2:05:6c:d8:5a:02:b3:67:16:66:0a:06:
                    bc:a8:30:be:f4:2c:6a:36:c5:6d:ba:a9:67:11:a2:
                    a5:b8:a6:45:0e:e2:23:fc:2a:bd:26:ba:09:b5:f7:
                    61:19:a5:f8:15:ce:a9:b8:22:e3:cb:eb:2a:ca:3b:
                    e2:a8:ba:24:dd:d2:8c:36:14:47:88:ae:d1:de:9a:
                    0c:34:57:70:0a:76:a5:d2:64:f2:85:36:80:25:1b:
                    14:2b:8b:a2:55:85:ff:26:8b:e2:a0:e4:9c:70:92:
                    6b:f3:19:94:24:5b:34:f4:ee:7c:30:ac:d9:2c:94:
                    7b:8b:30:47:2d:60:49:c3:8b:5a:85:82:cd:5c:9d:
                    41:5c:3e:47:f3:61:96:91:1d:f2:0b:b8:a9:38:d4:
                    ff:6e:fe:a6:41:b1:00:d0:c7:bf:d9:25:3b:17:fb:
                    8a:02:2f:b5:38:01:9c:72:40:ca:00:ef:07:5b:98:
                    15:3d:e5:3d:2f:59:25:0e:93:e4:89:96:25:4e:0c:
                    5b:d8:a6:a9:0a:90:a1:a8:2e:31:84:bc:45:fb:03:
                    c8:f0:ad:c9:60:9a:f4:cb:01:41:90:a8:46:25:57:
                    70:2d:1e:64:85:da:6c:aa:f1:49:d7:8e:3f:9b:f6:
                    d9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A0:0D:B7:FC:30:C9:94:08:21:41:51:1D:12:64:63:F8:92:1D:FC
            X509v3 Authority Key Identifier:
                keyid:07:76:33:4D:C6:F7:0F:56:3E:99:8F:60:80:AD:32:8A:AB:7F:8D:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/bc34a0-3203-43c7-919d-e4c8a18ba645/1/B3YzTcb3D1Y-mY9ggK0yiqt_jQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f8:44:30:05:28:bd:71:4f:05:66:92:bc:e1:cb:b9:d4:5c:
         bc:23:72:d1:93:6a:3a:72:bb:ce:29:15:c1:d9:ba:0c:58:7e:
         7d:dd:14:06:00:51:34:2a:4c:90:47:37:c8:c8:c6:27:3b:62:
         b4:9f:8b:ff:54:f2:b8:39:c1:9d:4a:8c:b2:4e:1a:84:5d:c0:
         e5:74:f7:28:0a:eb:60:d8:5a:59:d3:92:e8:ee:fc:60:54:f3:
         a0:e4:b3:08:f3:df:16:d0:63:b4:18:33:96:dd:9a:3a:9e:fb:
         14:e5:c2:e0:dc:e6:89:37:1a:bf:0e:69:e9:be:93:7e:7e:b1:
         de:bd:99:24:d2:3e:9d:8a:ff:e5:3f:8f:58:ff:ff:14:a8:3c:
         e5:f2:62:fa:d7:e7:f1:b5:71:92:07:6c:fc:11:b3:01:50:38:
         71:3c:a4:ff:c4:0a:2d:73:02:72:6d:c5:ad:51:07:7a:ad:f9:
         31:e1:a9:99:03:0f:07:34:22:ab:52:d5:51:b6:d0:18:f9:7d:
         a1:1c:91:0a:ce:d2:6e:91:0e:1b:34:d0:97:59:08:04:f6:d4:
         15:a1:b5:14:78:a1:8b:dd:96:63:9e:b1:d1:72:10:98:cd:67:
         fb:40:fd:d2:23:c5:41:db:11:16:2c:f5:9e:18:5a:c2:d4:5b:
         95:ab:c5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:06:46 2026 by rpki-client