Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
File:                     E38zct9XyBSrqLUakHhh2SueT1U.mft (raw, json)
Hash identifier:          /c/Pc8zb1nyyCW7i3BPVLm7mJ/C3HMlsCtGWL08HC2U=
Subject key identifier:   71:C0:E6:51:EF:EE:2D:BC:E6:E2:45:52:C7:75:F8:A4:57:C8:92:86
Authority key identifier: 13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55
Certificate issuer:       /CN=137f3372df57c814aba8b51a907861d92b9e4f55
Certificate serial:       01A13F703848ED764606A722882C93576ED3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
Manifest number:          1AA8
Signing time:             Thu 15 Oct 2026 12:01:21 +0000
Manifest this update:     Thu 15 Oct 2026 12:01:21 +0000
Manifest next update:     Fri 16 Oct 2026 12:01:21 +0000
Files and hashes:         1: CwDjP9tnkLMqRQJExwbW5a8tb2c.roa (hash: Cvhm4+Ug1T3hSPp5fKBEvpgdxdZDIyd8JjxFJnRL+xc=)
                          2: E38zct9XyBSrqLUakHhh2SueT1U.crl (hash: 8TQR3m4OlhX9eTXNOe4DPP7JtOYoIfTTccLx6wNsiUM=)
                          3: dYc4QHw_MlBGkai83ebw6UpAabw.roa (hash: PhHK3yJG/efNPRvamiA5Euk3gsAbVkNsvmnaGEDrJ+4=)
                          4: lV7YMWxQNgA7TeXSrVvxVEzp5zI.roa (hash: gNnh1Gc1ZxAnhLjUx2sE8mDgR6U7dHMmlaCZ5/JRTJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:70:38:48:ed:76:46:06:a7:22:88:2c:93:57:6e:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137f3372df57c814aba8b51a907861d92b9e4f55
        Validity
            Not Before: Oct 15 12:01:21 2026 GMT
            Not After : Oct 16 12:01:21 2026 GMT
        Subject: CN=71c0e651efee2dbce6e24552c775f8a457c89286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:13:13:3a:fa:04:f8:0e:c8:5f:be:06:e9:
                    53:30:2f:3c:77:c8:ec:a4:08:78:04:80:e5:35:60:
                    a0:24:18:6f:f6:a8:c8:8c:02:ac:5c:df:cb:e7:d5:
                    9b:4a:34:5c:2d:c0:c6:ef:5b:56:e6:a9:de:3e:09:
                    22:93:8d:3a:be:1d:55:47:41:e0:1a:21:eb:f1:70:
                    5c:c8:e3:80:69:76:cd:a0:6a:c3:32:3c:9c:5d:75:
                    3e:14:ee:c2:76:ef:87:1d:0e:05:df:92:b5:5e:76:
                    a4:b6:9c:b2:20:ad:9f:ae:58:e6:2f:2b:cb:ba:7b:
                    33:61:3d:2c:7f:94:5b:b1:56:cb:40:04:63:2a:57:
                    84:d9:67:0c:2a:9c:b6:11:48:77:81:be:aa:01:eb:
                    7a:4b:b4:5b:bc:53:04:ad:62:1d:7c:a2:30:70:5d:
                    fe:09:9f:ec:8f:c7:da:ba:c2:fc:4f:8c:42:83:ae:
                    31:34:4b:36:a6:e5:40:79:34:78:0a:93:e0:56:70:
                    6c:b4:80:54:21:4a:00:34:d3:ed:6f:cf:16:a3:bd:
                    71:fd:39:9d:a9:44:24:6e:50:93:c5:36:b1:20:00:
                    54:24:48:2c:ba:5a:ee:41:44:f8:45:b1:7d:b1:46:
                    13:b4:95:c9:b0:d3:c7:c4:62:76:50:46:36:09:60:
                    52:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C0:E6:51:EF:EE:2D:BC:E6:E2:45:52:C7:75:F8:A4:57:C8:92:86
            X509v3 Authority Key Identifier:
                keyid:13:7F:33:72:DF:57:C8:14:AB:A8:B5:1A:90:78:61:D9:2B:9E:4F:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E38zct9XyBSrqLUakHhh2SueT1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/8b141b-494e-466b-a22c-a224fefac218/1/E38zct9XyBSrqLUakHhh2SueT1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:ff:f6:41:f5:69:62:e8:17:ef:31:87:58:fe:f9:5f:36:a3:
         94:ee:26:80:4e:36:ad:af:d1:b9:fe:7f:79:5f:c1:7f:79:2d:
         b7:9a:92:5c:7b:55:f9:48:67:f7:ff:bb:9f:a4:5b:35:37:f3:
         c4:01:e3:aa:ba:58:27:2c:6c:2d:2f:f6:f1:a6:0d:c5:83:1a:
         b6:95:18:e9:c4:6e:ba:04:9e:27:15:f7:95:d5:ad:f4:f1:2c:
         ea:1f:25:ec:62:72:11:8d:b9:dc:9b:31:da:53:f7:a5:46:6b:
         b9:f7:e2:e9:de:f5:51:b6:07:ab:58:3b:ec:05:49:0c:d2:e2:
         c5:05:d6:db:e5:85:46:f1:81:d6:b5:ac:6b:12:f5:cc:01:3d:
         09:2e:48:7a:54:06:3c:1e:f2:4d:17:96:b8:21:64:b9:93:0e:
         68:f6:9a:2f:a3:53:8a:03:45:4a:b6:a8:74:c5:c7:58:90:a2:
         ef:7e:9e:a1:b0:12:8c:f7:4c:5a:94:51:d9:64:4e:61:39:8c:
         05:c3:d4:02:10:61:ff:75:18:9e:c1:f2:34:2a:dd:9d:18:a3:
         98:b3:b5:83:5e:13:ae:59:95:74:aa:77:48:10:c2:08:9b:1f:
         06:eb:a2:1d:36:65:99:85:e7:03:a6:20:86:7e:36:23:e7:d7:
         4c:2c:7a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:20:00 2026 by rpki-client