Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft
File:                     lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft (raw, json)
Hash identifier:          7ph8W7UJ1wNCf1V01C73q5PccrVh6o/51IAag/5LQuc=
Subject key identifier:   FB:21:48:CB:1A:BE:68:AB:BA:55:E9:2C:EE:7B:A8:B8:0B:81:BD:B3
Authority key identifier: 94:9D:BD:7F:AF:8C:3F:93:DC:BF:FD:C6:10:5E:4B:00:BE:C8:C8:25
Certificate issuer:       /CN=949dbd7faf8c3f93dcbffdc6105e4b00bec8c825
Certificate serial:       01A175B93FE0ADD492BF7145077765BCF3E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft
Manifest number:          F3
Signing time:             Mon 26 Oct 2026 01:00:36 +0000
Manifest this update:     Mon 26 Oct 2026 01:00:36 +0000
Manifest next update:     Tue 27 Oct 2026 01:00:36 +0000
Files and hashes:         1: e3qzYZKsiXi2JvR8gSKvnSuYwtE.roa (hash: V3dxX8nRKOg3+e1hOcKrnPrRXrDt/Vgdwrv2Gxb63Tk=)
                          2: lJ29f6-MP5Pcv_3GEF5LAL7IyCU.crl (hash: 7JSxDZnsGngKExFRJexSIJ08FBEGwwerP1V5JWDwyyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 01:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:75:b9:3f:e0:ad:d4:92:bf:71:45:07:77:65:bc:f3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=949dbd7faf8c3f93dcbffdc6105e4b00bec8c825
        Validity
            Not Before: Oct 26 01:00:36 2026 GMT
            Not After : Oct 27 01:00:36 2026 GMT
        Subject: CN=fb2148cb1abe68abba55e92cee7ba8b80b81bdb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ae:ad:38:03:88:e1:2f:e8:8c:97:26:92:f3:
                    3c:5d:88:c8:13:49:61:b9:1a:61:b2:82:28:cf:89:
                    ba:2b:2e:fe:a5:f0:13:e6:35:b6:23:46:d6:55:cc:
                    d0:98:77:65:0e:90:ef:41:0f:ae:18:4f:00:43:5f:
                    6a:60:d7:4c:e4:7d:14:17:91:ed:11:9c:ca:e9:7a:
                    10:58:90:7d:6a:bf:e1:46:38:b2:20:a6:8e:56:51:
                    eb:18:4e:a6:b3:c6:cb:ce:8e:38:b9:fb:35:a4:44:
                    a3:ca:58:89:c8:e1:e0:4f:b8:af:7b:b6:57:5b:46:
                    73:ad:a5:c6:6e:02:8c:12:be:6a:7c:e5:8d:3a:a6:
                    b2:5a:64:0e:08:4e:bf:3f:27:94:f5:83:4f:d3:cd:
                    66:d3:3d:f6:55:31:f4:53:65:ab:af:0e:b5:af:07:
                    6f:9d:40:78:b8:bf:e6:6f:05:d1:36:0c:1d:63:f4:
                    e1:a6:4f:6d:33:22:7e:a5:f8:44:04:20:97:ac:3c:
                    11:f1:00:7b:ee:b8:51:19:6e:45:42:40:c5:88:ce:
                    cb:1e:81:05:cb:56:d1:2f:77:aa:27:d6:98:7a:01:
                    de:c0:b7:d3:18:02:8d:93:5a:24:ce:e7:98:5f:7e:
                    ba:85:66:be:cc:e7:2d:e0:c2:4d:3d:20:9a:7d:32:
                    0d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:21:48:CB:1A:BE:68:AB:BA:55:E9:2C:EE:7B:A8:B8:0B:81:BD:B3
            X509v3 Authority Key Identifier:
                keyid:94:9D:BD:7F:AF:8C:3F:93:DC:BF:FD:C6:10:5E:4B:00:BE:C8:C8:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2e9f44-e90d-4e99-a4a2-dc246e64db3a/1/lJ29f6-MP5Pcv_3GEF5LAL7IyCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:41:53:2e:21:2f:5a:55:81:4b:8e:72:ee:b2:1a:d6:af:79:
         4b:1b:54:83:d3:c2:c9:a6:ab:e2:a9:b1:a6:82:fa:71:cd:58:
         e5:76:37:ae:47:2e:c9:88:6e:55:29:50:c4:e5:64:fd:8f:4b:
         dc:df:ae:e4:f8:74:11:d6:5a:6e:b4:d8:a6:58:04:9c:c1:27:
         4c:3f:e2:ce:0f:33:0b:d3:21:cb:16:bb:fc:78:af:a2:6a:d7:
         d3:90:52:dd:e9:fb:b3:e1:a0:71:27:4c:c1:0f:ce:e7:93:d1:
         bf:de:1e:3a:20:6d:d2:f2:2c:80:74:16:0d:82:66:8a:c3:d2:
         4c:1e:8e:a5:ea:2f:40:55:00:b8:98:56:4a:ec:15:1b:60:6d:
         11:88:b9:9f:ff:7e:8e:33:6c:1c:a7:b0:c1:17:7b:21:8b:3a:
         cf:e2:01:43:71:83:7d:8c:2a:e2:18:9b:4f:5d:ff:59:94:6b:
         a5:d7:7d:ee:09:af:7e:ff:c7:b4:ca:12:3b:db:6b:a1:1f:8e:
         e5:f9:ca:67:b0:e9:64:33:37:ea:b2:98:fe:3d:4e:ff:69:39:
         9f:21:2e:7f:96:3f:e2:13:9f:0c:fc:05:09:fa:9a:67:4a:6e:
         82:e6:16:1c:3f:de:ce:68:97:16:5c:3c:9a:16:f6:10:c0:cf:
         53:bc:5b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:24:31 2026 by rpki-client