Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
File:                     RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft (raw, json)
Hash identifier:          7jTne1eYpw2ZY/4f3ksa8eBz/cA46mEvwtkc/gCkjOk=
Subject key identifier:   FC:12:11:B6:20:9D:82:74:1B:94:FF:48:BB:EE:13:64:83:F2:44:D0
Authority key identifier: 46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19
Certificate issuer:       /CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
Certificate serial:       01A1280C27861850F424FD02FCBFA0370940
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
Manifest number:          0F29
Signing time:             Sat 10 Oct 2026 23:00:47 +0000
Manifest this update:     Sat 10 Oct 2026 23:00:47 +0000
Manifest next update:     Sun 11 Oct 2026 23:00:47 +0000
Files and hashes:         1: RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl (hash: 1WeOP43mVhZhE4KgGqBKMp6gDnfeKGDBhKMhWoovXFE=)
                          2: sKVP7_JMXgsXmjjxFeQ2pbiZSww.roa (hash: Wqcj3vAf/zWfuQq+F6Z9N/hZLBl0tmkL1ZSY3Yzwl0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:28:0c:27:86:18:50:f4:24:fd:02:fc:bf:a0:37:09:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46f01771d1cc8fd114c46a616206aa4c59dbdc19
        Validity
            Not Before: Oct 10 23:00:47 2026 GMT
            Not After : Oct 11 23:00:47 2026 GMT
        Subject: CN=fc1211b6209d82741b94ff48bbee136483f244d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0f:ea:d7:2b:4a:8d:a8:dd:e5:46:aa:18:2e:
                    f1:33:ef:40:d8:e6:30:98:dc:5e:7b:4e:c8:ab:c2:
                    b0:42:ab:37:c0:f7:da:52:93:08:2c:1c:38:a6:f2:
                    eb:29:f8:ef:dd:fb:41:f6:aa:1d:b8:7f:fc:67:da:
                    e8:a6:d9:af:23:b4:22:3e:a0:8a:bb:89:c8:db:9d:
                    3d:12:8a:6b:ec:1c:56:2b:42:22:27:0a:5a:a4:87:
                    a3:2e:09:a3:f6:4a:a1:0f:27:81:5b:b6:3a:e3:c0:
                    9d:77:45:1e:47:21:b2:10:b1:11:2f:21:95:a9:09:
                    6a:16:56:3d:f4:0b:80:66:11:41:12:c4:08:a0:de:
                    ea:18:f2:57:18:38:d0:4d:9a:78:6a:45:7f:35:95:
                    1b:9e:76:0c:ae:b9:b4:77:ad:ef:68:18:31:99:3f:
                    b9:20:47:df:26:97:ed:dc:c0:35:2a:35:2e:89:79:
                    33:06:d1:12:1b:3c:21:91:5b:b0:a9:ab:34:7e:35:
                    f7:51:3e:2f:bc:58:82:a0:dd:d4:df:45:03:4e:ec:
                    c4:2a:4e:9a:11:e2:1d:73:f9:24:2e:57:4c:21:ea:
                    2d:95:c1:b3:a0:5f:8f:8c:f9:1b:6f:c8:b1:4a:6a:
                    3d:0b:58:0b:78:67:1e:0f:25:07:ab:ba:bd:95:2f:
                    8e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:12:11:B6:20:9D:82:74:1B:94:FF:48:BB:EE:13:64:83:F2:44:D0
            X509v3 Authority Key Identifier:
                keyid:46:F0:17:71:D1:CC:8F:D1:14:C4:6A:61:62:06:AA:4C:59:DB:DC:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RvAXcdHMj9EUxGphYgaqTFnb3Bk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/7e57a3-a181-45df-b4ae-316f6dabffbf/1/RvAXcdHMj9EUxGphYgaqTFnb3Bk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:55:78:00:7e:c8:f1:7a:46:e7:b6:fe:38:95:56:32:5c:43:
         c1:c3:03:93:6a:72:0c:c9:fd:44:e2:f6:57:4d:1d:d2:cd:bb:
         3d:6a:95:7a:94:dd:6a:88:40:5f:8c:42:82:7d:23:54:b9:3b:
         61:b4:b0:fd:c9:53:00:8c:31:aa:8b:9d:4c:3b:c7:8f:a5:2a:
         64:46:69:85:cb:66:74:f3:81:25:67:5a:20:3a:5d:c7:49:72:
         99:c7:34:4b:cc:ad:cd:5c:27:8f:27:b8:47:d8:57:32:52:a7:
         74:18:7d:97:35:f3:56:a5:d7:b3:5f:5b:8d:d5:6a:14:e6:1a:
         13:5e:a0:80:85:87:36:29:ee:2c:89:71:d2:e9:a5:50:00:8f:
         d1:c6:7b:b7:55:06:e5:17:bd:4f:4c:b2:25:a4:c3:a3:2e:d9:
         2d:8d:a5:db:1e:9d:bb:88:83:da:6e:0c:e1:31:ea:b7:15:c6:
         36:12:d9:11:fb:5b:ac:62:59:74:58:ac:ea:9d:e4:8b:a9:bf:
         99:c2:67:69:ef:2e:b3:95:2e:6f:6e:e0:33:5b:3a:5f:60:33:
         b0:7e:20:7e:39:f3:92:8b:dc:71:0c:21:a1:10:d0:bd:0d:a2:
         bf:26:7e:71:00:3d:f1:b0:85:8e:8f:e4:c8:20:d3:ba:6c:71:
         55:fb:c4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 06:31:33 2026 by rpki-client