Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
File:                     r-us3hVZeiga4rspMG3E2m3Pt14.mft (raw, json)
Hash identifier:          zHwOpSWiR1yaPd6t4st99OxejR/eFsbtuyXn+eKacMo=
Subject key identifier:   28:13:B5:62:D5:62:B4:1A:5E:C0:60:D4:E2:DC:4A:5E:DD:84:39:EE
Authority key identifier: AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E
Certificate issuer:       /CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
Certificate serial:       01A19F91611F66216CEE3F5BFE0F87954AB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
Manifest number:          02EC
Signing time:             Tue 03 Nov 2026 04:01:07 +0000
Manifest this update:     Tue 03 Nov 2026 04:01:07 +0000
Manifest next update:     Wed 04 Nov 2026 04:01:07 +0000
Files and hashes:         1: jdSx0T-sdrzr500OOr7Atdy3Z4E.asa (hash: nbjDNb/jtcCfwpceFtypmGiC8RlKHHL0LGrtqS6ZCo8=)
                          2: r-us3hVZeiga4rspMG3E2m3Pt14.crl (hash: E9P0u5XhbXSkwNLP28vOCXu73hdB4S9hiKCmhwx+IPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Nov 2026 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:9f:91:61:1f:66:21:6c:ee:3f:5b:fe:0f:87:95:4a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afebacde15597a281ae2bb29306dc4da6dcfb75e
        Validity
            Not Before: Nov  3 04:01:07 2026 GMT
            Not After : Nov  4 04:01:07 2026 GMT
        Subject: CN=2813b562d562b41a5ec060d4e2dc4a5edd8439ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:94:93:ef:1b:8d:bb:46:f4:4a:3a:d2:67:64:
                    d1:63:29:50:82:2b:9e:6f:25:1f:b6:6d:d5:4e:08:
                    b7:bd:75:5e:49:21:4e:34:fc:ec:3e:70:ed:0c:30:
                    a1:f2:22:89:3d:2b:6e:cf:f3:8e:68:72:3f:1d:4a:
                    8b:9d:bb:97:98:18:87:d0:ab:53:c0:a0:2d:9e:18:
                    2e:d3:bd:63:58:36:97:85:76:69:03:dc:c4:9d:fa:
                    35:87:85:c6:85:c7:e5:64:0b:d3:2b:b6:7a:7f:bf:
                    02:00:d1:da:f8:13:db:5e:96:47:ea:0e:e6:37:c3:
                    93:ab:ca:e0:31:2c:e8:3f:b0:13:60:b0:73:a8:3d:
                    18:01:1a:c7:07:0e:d7:80:35:9b:18:e5:6a:dc:0c:
                    3e:8a:61:2a:4b:bb:2a:a9:ef:a4:9e:55:9c:aa:45:
                    2c:7d:4a:ff:5f:03:5f:a6:80:ef:db:1a:54:57:58:
                    8b:17:91:36:73:6d:38:cd:0f:2e:d5:c4:64:42:96:
                    d7:6d:72:86:c0:3b:ad:bf:83:9b:a8:70:86:cb:ee:
                    0c:13:5a:a9:8b:d3:ee:40:fd:c7:2f:cd:aa:f5:33:
                    d9:ed:5e:8e:7a:6f:6f:9f:de:8e:8e:ef:36:89:ea:
                    81:0f:26:78:c3:8e:96:39:48:39:b2:c0:51:e5:b8:
                    59:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:13:B5:62:D5:62:B4:1A:5E:C0:60:D4:E2:DC:4A:5E:DD:84:39:EE
            X509v3 Authority Key Identifier:
                keyid:AF:EB:AC:DE:15:59:7A:28:1A:E2:BB:29:30:6D:C4:DA:6D:CF:B7:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-us3hVZeiga4rspMG3E2m3Pt14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d211c2-6ca9-4803-96b3-2e194ac1ad6f/1/r-us3hVZeiga4rspMG3E2m3Pt14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:00:b1:30:84:7b:b6:86:6c:6d:e5:4c:8e:6f:bd:20:22:fe:
         a5:41:7c:cb:02:95:a3:b6:8e:f9:d1:65:12:7c:99:b8:d8:e2:
         e9:57:57:2b:dd:a4:ef:cf:01:d0:23:b8:fd:1e:cc:9f:e6:c3:
         03:cf:2c:b2:b7:73:4a:bb:91:b0:06:cd:9c:3f:4d:4f:6f:bb:
         c9:5f:c8:b4:98:89:12:65:08:30:20:56:31:f7:71:b5:9f:6a:
         70:1b:52:cc:45:8c:d9:74:e4:94:9b:0c:c4:db:43:01:d3:27:
         eb:b2:c2:a9:c0:c7:33:36:f3:97:e3:37:92:99:d4:84:f3:4b:
         98:44:df:01:2b:25:97:9e:84:e8:96:41:42:d8:57:72:5e:ce:
         71:ce:bc:7c:a2:f5:fb:35:d6:ed:2d:f8:6d:01:fd:59:b5:41:
         78:db:7a:0a:fd:cd:c1:fd:29:af:73:ea:5d:3d:0c:fa:86:d4:
         95:74:0e:f3:ed:f2:15:5f:01:85:b4:0d:12:ad:53:6c:87:c1:
         1f:9a:cf:b2:bb:af:53:bc:01:aa:b1:c8:e7:2f:37:95:13:14:
         e0:44:40:aa:d7:e8:d5:f5:ac:6a:78:5f:54:55:90:29:c4:38:
         13:3d:2e:53:65:a9:ed:fa:31:e0:d9:14:ea:ac:09:fd:d3:31:
         0d:fb:52:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 08:23:35 2026 by rpki-client