Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File:                     B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier:          o90bf330DfVS2xsEXAbZNqmjQhfxGr/sfUHOz+ksk9M=
Subject key identifier:   03:5C:E6:AB:87:C1:A7:2C:6C:C2:AA:2E:5F:B2:37:06:8B:E3:67:51
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer:       /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial:       01A128B16971171FE144D8028E6A633BCA25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number:          1A9C
Signing time:             Sun 11 Oct 2026 02:01:17 +0000
Manifest this update:     Sun 11 Oct 2026 02:01:17 +0000
Manifest next update:     Mon 12 Oct 2026 02:01:17 +0000
Files and hashes:         1: ABBwkEzotHssFvLAUqOqZl36BVo.roa (hash: dEDcIYfYDWYKiT/mjWB6IYlv7v5dgtX5b4iPv92zXw4=)
                          2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: OGcyNY+dWbMlOAZ1CQ71dhjqxXNuubWSTIm5KzE06zA=)
                          3: JxdVQlPabf5FpimKARBZDSKiNxU.roa (hash: iaX91Mhj2IG2/tYDP0MoHlwqtJyUmq2/acODPla0N8E=)
                          4: KtSkCkgQPN_jCjx_NpSrj0Cqf2k.roa (hash: Z7pmLe6ijXP6+y2mebYVp1P1jXZISWrSpz5NJdmd0Uo=)
                          5: dtKfjS2Cx153-9Bxv94dxO25icU.roa (hash: e1P0tOI8yTdnj97qKiJfMB6m74LROCBqW62mLe1obDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:b1:69:71:17:1f:e1:44:d8:02:8e:6a:63:3b:ca:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
        Validity
            Not Before: Oct 11 02:01:17 2026 GMT
            Not After : Oct 12 02:01:17 2026 GMT
        Subject: CN=035ce6ab87c1a72c6cc2aa2e5fb237068be36751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c1:09:af:01:75:ff:2b:4a:49:39:ea:6e:1a:
                    a7:2a:cd:48:34:b7:56:f2:36:fa:80:4f:ac:3e:ca:
                    3e:c0:22:3b:34:58:07:a5:40:79:7b:15:ed:a3:23:
                    17:a7:4c:4b:0e:f9:a8:95:bd:8c:b6:78:8a:bb:9f:
                    a3:af:d1:6d:8b:f0:e8:72:80:8c:c4:7b:31:fd:42:
                    28:3b:7a:8f:74:7a:dc:e0:a7:e9:94:f3:c3:82:2d:
                    03:10:99:27:60:88:09:0c:d5:20:ae:50:ca:7c:45:
                    14:f4:45:35:95:ad:c8:de:e4:48:ac:a6:3b:c9:3a:
                    25:f2:c1:74:c6:35:7a:23:0a:1b:58:03:ed:c3:ae:
                    cd:ed:61:1d:d3:4d:4f:0a:31:a0:86:10:16:be:d3:
                    12:a7:3f:6f:26:28:44:cd:cd:06:a1:b8:47:44:dd:
                    bb:e2:01:f8:03:c4:13:7b:6f:95:ff:29:e9:f7:01:
                    56:48:be:71:ba:3f:a5:53:95:b9:93:8d:e8:59:66:
                    60:00:42:ef:f0:2a:0a:5f:3d:1c:d8:8c:12:fa:65:
                    24:9d:96:49:f0:be:a7:91:18:be:15:33:c2:2b:fc:
                    dc:ff:4e:b6:2c:0f:7f:da:33:06:25:ba:43:59:5a:
                    0d:1b:13:18:d7:40:39:9e:d3:0e:f7:8e:8c:8b:c0:
                    9f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5C:E6:AB:87:C1:A7:2C:6C:C2:AA:2E:5F:B2:37:06:8B:E3:67:51
            X509v3 Authority Key Identifier:
                keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:74:9a:08:db:56:7c:e6:40:13:54:75:83:bd:0a:62:c0:30:
         30:ca:1b:a8:8b:b0:be:b6:3f:48:95:08:f0:a7:e5:32:e1:65:
         4f:ab:ba:f6:e9:33:0d:5c:1b:b6:70:0a:47:ee:a2:cc:9d:e7:
         9c:fc:b1:ca:f1:1c:95:db:50:40:07:6c:b5:56:09:39:9a:78:
         a0:6d:5a:7b:67:fa:0c:b6:d3:f4:78:8a:fc:fc:27:aa:9e:2a:
         10:a1:f3:d5:5f:82:34:da:5f:51:48:e6:65:91:6c:32:04:a9:
         b9:e6:03:7a:d7:2b:77:0e:89:59:47:81:cd:22:f7:0b:fd:09:
         f8:c7:a5:9a:f0:b1:84:8f:3f:23:ba:0f:e5:58:fa:58:45:cf:
         f0:c3:04:99:76:11:02:5a:0b:46:44:64:ab:bc:d3:62:22:fe:
         7b:29:c1:5a:4b:25:09:c8:3c:b8:82:29:2f:86:d4:2b:0c:90:
         67:35:0a:ae:41:f8:51:09:02:08:d4:92:33:80:79:e3:b2:36:
         67:3d:f0:6c:9e:3e:ed:29:96:b6:ba:3a:3f:13:6c:7e:72:bc:
         11:32:bc:4c:9e:6f:4a:a8:97:ef:c2:32:7a:13:41:06:da:4a:
         9a:90:da:ba:8a:9c:e3:4f:b8:7b:ac:69:71:fe:97:22:76:e7:
         04:6a:8e:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEosWlxFx/hRNgCjmpjO8olMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZmViOWFlMGZhODkyNzA0NWY4MzQyMzc0M2M0YTczYTI3
YTc0YTcwHhcNMjYxMDExMDIwMTE3WhcNMjYxMDEyMDIwMTE3WjAzMTEwLwYDVQQD
EygwMzVjZTZhYjg3YzFhNzJjNmNjMmFhMmU1ZmIyMzcwNjhiZTM2NzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8EJrwF1/ytKSTnqbhqnKs1INLdW
8jb6gE+sPso+wCI7NFgHpUB5exXtoyMXp0xLDvmolb2MtniKu5+jr9Fti/DocoCM
xHsx/UIoO3qPdHrc4KfplPPDgi0DEJknYIgJDNUgrlDKfEUU9EU1la3I3uRIrKY7
yTol8sF0xjV6IwobWAPtw67N7WEd001PCjGghhAWvtMSpz9vJihEzc0GobhHRN27
4gH4A8QTe2+V/ynp9wFWSL5xuj+lU5W5k43oWWZgAELv8CoKXz0c2IwS+mUknZZJ
8L6nkRi+FTPCK/zc/062LA9/2jMGJbpDWVoNGxMY10A5ntMO946Mi8CfwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANc5quHwacsbMKqLl+yNwaL42dRMB8GA1UdIwQY
MBaAFAf+ua4PqJJwRfg0I3Q8SnOienSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82M2U1YTUtNWQ0Zi00M2VlLWFmNzAt
ZGM3M2Y5ZDliZTI5LzEvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82M2U1YTUtNWQ0Zi00M2VlLWFmNzAtZGM3M2Y5ZDliZTI5
LzEvQl82NXJnLW9rbkJGLURRamREeEtjNko2ZEtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFnSaCNtW
fOZAE1R1g70KYsAwMMobqIuwvrY/SJUI8KflMuFlT6u69ukzDVwbtnAKR+6izJ3n
nPyxyvEcldtQQAdstVYJOZp4oG1ae2f6DLbT9HiK/Pwnqp4qEKHz1V+CNNpfUUjm
ZZFsMgSpueYDetcrdw6JWUeBzSL3C/0J+MelmvCxhI8/I7oP5Vj6WEXP8MMEmXYR
AloLRkRkq7zTYiL+eynBWkslCcg8uIIpL4bUKwyQZzUKrkH4UQkCCNSSM4B547I2
Zz3wbJ4+7SmWtro6PxNsfnK8ETK8TJ5vSqiX78IyehNBBtpKmpDauoqc40+4e6xp
cf6XInbnBGqOHg==
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:12:49 2026 by rpki-client