Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
File:                     MnVXzyJinQWKURSWWy-d-O9NtpA.mft (raw, json)
Hash identifier:          LgA4X18aPG5gEf0t+YZWFscL+VhXTPZmZsN5vo1j+dA=
Subject key identifier:   2E:AE:A7:7E:CD:1C:77:45:47:0E:8C:CD:10:A1:97:BE:4E:E2:B7:2A
Authority key identifier: 32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90
Certificate issuer:       /CN=327557cf22629d058a5114965b2f9df8ef4db690
Certificate serial:       01A1231D5D7D701E882DC4C2F27C88E9F9BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
Manifest number:          117D
Signing time:             Sat 10 Oct 2026 00:01:29 +0000
Manifest this update:     Sat 10 Oct 2026 00:01:29 +0000
Manifest next update:     Sun 11 Oct 2026 00:01:29 +0000
Files and hashes:         1: FnV4siConvZq8mk9CbOlR5a9DjI.roa (hash: IZ5c3lykfIm9IkvU3L26cQr7DSQZqq6fwwu8m+5tYDw=)
                          2: MnVXzyJinQWKURSWWy-d-O9NtpA.crl (hash: jlY8Cf6PVZZnseEHpmrflrsnaYc7AdoGDmYuAtyoX9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 00:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:1d:5d:7d:70:1e:88:2d:c4:c2:f2:7c:88:e9:f9:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=327557cf22629d058a5114965b2f9df8ef4db690
        Validity
            Not Before: Oct 10 00:01:29 2026 GMT
            Not After : Oct 11 00:01:29 2026 GMT
        Subject: CN=2eaea77ecd1c7745470e8ccd10a197be4ee2b72a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:90:3d:cb:0d:cf:f1:69:35:d6:45:f6:f7:fa:
                    f4:d0:dd:43:44:53:fe:20:28:b5:3f:a8:02:3b:f5:
                    35:dd:b7:ec:d0:41:e7:3f:ed:43:fe:61:09:2f:92:
                    89:30:82:5a:ec:82:4d:13:4b:81:d4:40:4a:35:82:
                    88:c5:78:76:48:39:17:4d:81:62:0f:c0:9a:50:ba:
                    84:74:42:2b:44:09:9e:90:07:20:29:20:69:6c:40:
                    39:dd:58:39:13:31:be:9a:ac:e3:e6:bd:24:4f:c5:
                    91:a7:b7:ec:d5:62:b8:ab:46:2b:ff:43:96:da:dc:
                    79:50:43:ac:bf:3d:ce:9f:ea:29:46:62:3e:c3:e1:
                    ee:aa:56:79:57:bb:55:b1:92:ba:5b:1c:fd:ee:ee:
                    68:d8:1a:29:2a:a1:f9:cd:fc:e9:d6:d8:70:c2:ed:
                    b8:31:d5:80:af:c0:fe:11:8a:1b:a6:a1:42:0e:05:
                    8f:77:54:8e:ce:0a:1b:2b:eb:75:92:22:49:2f:9f:
                    db:74:45:73:32:3f:e1:11:80:3b:01:82:16:ad:5b:
                    a1:81:da:89:32:8c:5c:d8:55:4c:b0:0d:ad:46:b0:
                    17:7f:cc:f2:95:88:0b:f4:42:2c:2d:7f:5d:08:86:
                    ae:35:54:7d:62:5a:4e:c4:c0:b2:b4:39:50:be:c7:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AE:A7:7E:CD:1C:77:45:47:0E:8C:CD:10:A1:97:BE:4E:E2:B7:2A
            X509v3 Authority Key Identifier:
                keyid:32:75:57:CF:22:62:9D:05:8A:51:14:96:5B:2F:9D:F8:EF:4D:B6:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MnVXzyJinQWKURSWWy-d-O9NtpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9cff3d-1168-411c-a065-fd725b825291/1/MnVXzyJinQWKURSWWy-d-O9NtpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:d9:94:49:10:e9:1e:d2:5f:2e:da:7f:26:02:3f:65:82:6e:
         ab:9c:e0:df:e9:7f:2f:1e:38:c9:f7:f7:ea:b6:95:11:a4:17:
         a2:e0:b2:73:27:b3:36:33:f7:10:a3:92:b6:a1:63:2e:d9:45:
         25:8f:e8:84:e9:a9:57:a4:fb:91:80:48:8e:cf:fc:c5:c6:bd:
         03:50:27:db:30:e7:28:9b:88:38:4b:ba:d9:bb:86:1f:cc:e2:
         a8:03:84:80:af:4a:40:e7:e1:df:c4:dd:99:3f:1d:8d:af:08:
         31:43:d4:b5:8c:00:8b:e5:95:7f:88:eb:86:09:38:1b:3e:9a:
         cb:7d:ff:61:47:0f:3c:c4:80:7a:61:36:2a:c6:52:db:c1:99:
         48:86:3d:9b:5d:7d:28:9a:96:91:b0:84:87:36:db:f8:56:28:
         fd:f1:1e:1e:48:17:a4:4d:fb:ff:93:e2:ef:44:c2:01:c2:73:
         a3:94:27:ed:3c:18:b2:64:96:16:2d:2d:ab:1d:e6:ae:7c:56:
         1c:fe:07:f5:b7:52:91:f0:d7:77:3a:a7:bb:60:2a:3d:8a:71:
         e0:06:c7:59:11:6c:3e:dd:3c:26:f3:37:7a:a5:cf:12:e2:2f:
         6c:61:2f:66:53:b2:6b:06:a2:1d:a7:5c:26:75:ac:59:a4:e4:
         58:8e:91:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:49:41 2026 by rpki-client