Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File:                     PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier:          B0uD/KAfYy4bMfVXBZtNFzHnAcvBrf4HlGezCSAbLE8=
Subject key identifier:   22:34:A6:B5:D5:61:F2:23:A9:8D:A2:9E:D9:F7:9E:D6:12:DB:4D:74
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer:       /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial:       01A10FCD2A7D6C2F80B1C3E97B4E64382E45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number:          1A8D
Signing time:             Tue 06 Oct 2026 06:01:06 +0000
Manifest this update:     Tue 06 Oct 2026 06:01:06 +0000
Manifest next update:     Wed 07 Oct 2026 06:01:06 +0000
Files and hashes:         1: 3LaL7uXB-UYgWuSk1gGwpH4emtk.roa (hash: SZi8GiIOhAGOw0aZ9QVtTEgPlEhqv8CHu5L26uxGnTw=)
                          2: OKvF1jZUD1oQ8vjnPvKbRctzA_Y.roa (hash: TURUpo5c7V3B7eiBvFVs4P/z+qyI+1sdNbYu2NhorzE=)
                          3: Op5GYXPNrxg_HfwVEuFZeHOadM4.roa (hash: uIjeZZuq23pgTgw8/rbcHVuGWjLz/Rc1HlKQEVLAUp8=)
                          4: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: fzBv5+XcSwLLcBc7HPerYMiqHGl8L4zkEy3lilC//TM=)
                          5: kFJJEyTKADp1baTJnM1zkurd-AY.roa (hash: 6YWt+74Liha4YiPIKXVwr09uzTbyh63tPVdg3eh1Ecw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 23:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0f:cd:2a:7d:6c:2f:80:b1:c3:e9:7b:4e:64:38:2e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Validity
            Not Before: Oct  6 06:01:06 2026 GMT
            Not After : Oct  7 06:01:06 2026 GMT
        Subject: CN=2234a6b5d561f223a98da29ed9f79ed612db4d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:bd:08:0f:eb:aa:e9:ef:19:0d:3a:be:ae:f1:
                    b6:77:41:57:d5:9f:3e:50:55:50:ea:e9:87:ac:67:
                    00:64:c5:73:61:cc:b3:92:d3:a3:a4:bc:94:74:cd:
                    98:98:9d:12:6d:39:27:4a:c6:18:5e:67:ef:d9:38:
                    7a:52:5c:72:9d:8c:f7:40:d1:a3:1c:83:54:5a:b9:
                    45:22:09:a9:4c:5d:33:99:69:ac:f1:6d:53:eb:40:
                    de:96:50:04:8a:e6:59:b8:92:91:bc:eb:9b:a5:9b:
                    c4:3b:c3:2a:60:ab:06:3f:d4:88:46:77:f0:8f:46:
                    d2:33:2e:fa:90:eb:2e:f6:1e:00:d6:66:cf:d8:ad:
                    35:f0:d4:93:6b:ba:07:32:8c:7a:00:83:fc:4b:58:
                    90:2e:99:4f:d0:32:48:d9:64:56:a9:68:45:39:3f:
                    62:a8:6f:89:62:0b:7f:bc:5c:9c:27:e1:d8:71:d0:
                    41:48:ee:82:ad:80:1d:87:46:21:4a:34:56:13:60:
                    1d:a3:f8:96:2f:12:f5:b6:fa:ec:aa:1c:07:9d:0f:
                    3f:1b:66:31:19:9c:82:e4:cc:0a:3f:68:9f:ff:63:
                    4d:95:39:38:29:f8:21:3a:a6:67:7e:2b:aa:0b:41:
                    10:d6:7a:26:fc:d9:a0:fd:bc:2b:d6:f2:7e:56:a4:
                    a9:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:34:A6:B5:D5:61:F2:23:A9:8D:A2:9E:D9:F7:9E:D6:12:DB:4D:74
            X509v3 Authority Key Identifier:
                keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:66:f4:81:0e:44:9e:e0:1a:4b:ce:d0:13:66:0f:3d:ae:68:
         a2:82:39:48:04:7b:6c:36:4b:94:a7:d9:08:d7:22:58:15:64:
         52:fe:a5:98:40:1a:51:38:28:d0:27:45:f2:d8:cd:63:3e:d1:
         05:d8:77:b0:0b:3f:36:98:61:2f:f6:4f:05:83:2c:06:02:61:
         d2:15:73:5d:e6:c0:71:13:86:66:9f:02:50:03:99:42:08:43:
         7f:84:4d:5b:ef:5f:2e:fb:77:ef:1f:88:75:44:95:e4:0e:be:
         a8:57:16:02:d8:65:85:4c:10:d5:b8:41:52:e7:9a:f5:58:57:
         27:88:78:98:50:f6:4d:95:46:9f:42:6a:4a:69:6d:b7:86:d6:
         57:54:2e:e9:9a:66:c4:32:0d:6d:e3:14:f4:5e:c0:bc:87:3a:
         97:7d:96:a2:87:eb:28:9a:44:dc:a3:16:70:f7:2f:32:70:83:
         96:ef:c9:9c:ae:6f:2c:9a:4b:97:bf:b3:ea:7d:23:08:bc:0a:
         18:a4:72:9b:46:bb:2d:a4:7e:14:50:af:bd:f7:98:ca:8a:2c:
         e1:c6:ba:82:94:3e:18:dc:30:31:ee:b9:23:70:f8:77:ad:33:
         f1:b2:68:5c:60:b3:10:a8:ac:47:00:0c:22:98:bd:8b:f7:ae:
         4d:da:51:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 08:50:04 2026 by rpki-client