Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
File:                     e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft (raw, json)
Hash identifier:          kwpgG5PLX5fQxifR5YxnFVSuH9y0nZkqztSEGHNOBiM=
Subject key identifier:   D2:27:E6:74:B7:24:C4:75:44:58:25:4C:01:1E:56:F4:C4:D9:4F:AE
Authority key identifier: 7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F
Certificate issuer:       /CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
Certificate serial:       01A11A86F7096AD2D12AD49F386A3B6D1A0A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
Manifest number:          1A98
Signing time:             Thu 08 Oct 2026 08:00:14 +0000
Manifest this update:     Thu 08 Oct 2026 08:00:14 +0000
Manifest next update:     Fri 09 Oct 2026 08:00:14 +0000
Files and hashes:         1: 2cOGlH4ahQPnzpheBIuDg2DB_bs.roa (hash: MTpw8IRuoip833V4lmKt21Oh/Lmjir8gm9bxVt0H2J0=)
                          2: SXW2RyNwYp7u19zvffmdSb65cCQ.roa (hash: tV3kH4ivKyOScggYwqSDe1o+SoiyPakGIMq0XbWPM1Y=)
                          3: VvLK0PoDpQOcNcKtmg6QR8GeTHg.roa (hash: el7uF1Gpe9VS9/qsvqwupFmtqVKLWLRVyOpLvjR2b54=)
                          4: e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl (hash: mNrrumzWz2YnGN82m0v4J0kCnRtlSwmc1wSF0L4vKHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 07:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1a:86:f7:09:6a:d2:d1:2a:d4:9f:38:6a:3b:6d:1a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b732b6e5710ba8289cff4bb226b75bc4b07819f
        Validity
            Not Before: Oct  8 08:00:14 2026 GMT
            Not After : Oct  9 08:00:14 2026 GMT
        Subject: CN=d227e674b724c4754458254c011e56f4c4d94fae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:53:a3:7c:b9:c7:5e:ff:97:6a:ce:83:e9:a2:
                    82:ad:f6:82:76:d5:c0:4f:43:01:05:b8:61:f9:b6:
                    b8:43:6e:f4:38:e5:4b:4c:bf:2f:e2:9d:67:ef:51:
                    a4:88:18:29:82:93:5f:f0:35:eb:11:fc:69:a4:63:
                    69:fd:c9:71:42:43:60:bb:90:b2:28:52:d9:2d:f2:
                    d6:33:45:70:ad:12:e1:67:ab:86:19:d8:88:23:f1:
                    45:d1:30:a5:d6:d2:e7:81:ed:06:cf:26:b6:e5:8d:
                    16:16:45:a2:83:79:e9:e4:0a:ce:f6:51:15:84:32:
                    bf:7e:d9:ec:81:9a:58:85:70:86:e5:f8:62:1a:bc:
                    ed:3f:97:8c:16:d6:5f:69:11:eb:bd:78:c7:57:2b:
                    f2:83:91:56:12:27:b5:6e:96:06:23:5e:fb:70:c9:
                    ea:cd:6f:4b:3f:38:d2:2f:5e:f2:9b:f9:18:09:b1:
                    98:8f:c7:18:e0:c0:3f:4a:58:d8:5a:38:dd:e1:f6:
                    2e:53:c1:9e:be:a1:93:ea:dd:4a:af:73:27:3a:22:
                    e9:4e:c8:5e:d2:31:0b:1e:28:9e:b2:dc:c7:f5:d5:
                    46:6b:4e:3c:86:d8:c3:70:ec:50:2b:54:47:4d:7f:
                    49:8d:cc:c5:4a:d9:c5:48:86:d8:7a:c5:54:18:a7:
                    d6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:27:E6:74:B7:24:C4:75:44:58:25:4C:01:1E:56:F4:C4:D9:4F:AE
            X509v3 Authority Key Identifier:
                keyid:7B:73:2B:6E:57:10:BA:82:89:CF:F4:BB:22:6B:75:BC:4B:07:81:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3MrblcQuoKJz_S7Imt1vEsHgZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/3391ce-a795-401f-839d-a4d0d10c9016/1/e3MrblcQuoKJz_S7Imt1vEsHgZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:7e:13:39:46:46:13:14:f1:d9:a9:07:bc:63:b0:94:ae:c3:
         7d:86:0f:19:da:60:f6:c8:b1:8e:0c:1b:dd:03:f2:39:9d:88:
         f1:18:aa:be:29:a1:03:d9:7e:84:31:30:50:46:a5:c6:a4:2a:
         00:5a:48:ab:7b:9a:f7:12:10:29:5e:be:1b:9e:f2:21:dd:63:
         89:8d:86:cf:d5:d7:98:ee:ba:29:60:73:24:02:05:0a:46:4a:
         90:b9:f6:a4:03:0b:ba:2a:a8:19:45:43:4c:0f:2e:a8:21:ea:
         06:14:af:07:84:02:d7:85:a2:2d:72:aa:a0:7b:13:0d:0c:1c:
         92:46:d0:c9:b9:6b:f5:eb:f0:a7:f8:c0:83:23:2d:b4:16:34:
         94:35:cd:62:1a:81:96:68:28:10:e5:3b:7a:f8:7e:2a:6b:fe:
         dd:64:1a:df:83:ee:dd:d0:83:69:b1:d0:d7:d8:63:75:7a:29:
         62:1b:60:5b:b3:f3:1a:c3:1e:60:d1:33:58:1a:96:d0:c6:41:
         74:36:b1:5d:9b:cf:df:34:74:ae:57:d3:b0:33:b7:3b:3d:c0:
         d8:9b:06:51:83:51:af:40:b9:39:1e:98:4a:c4:83:37:b1:9f:
         7c:5d:5f:93:45:e4:b2:84:ea:ad:3e:f0:dd:0e:7e:ed:f8:7a:
         d4:45:b9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:59:14 2026 by rpki-client