Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
File:                     3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json)
Hash identifier:          J/FnYBRKt2jOwQORSkMQkR4+cSIBfxZA59a8glYxYyc=
Subject key identifier:   75:56:DF:BC:7D:95:B7:E2:C3:7C:1E:12:07:E7:B4:38:3E:91:8D:4D
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Certificate issuer:       /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial:       01A13F39966B70E514A746EF4D637228B738
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
Manifest number:          1AA9
Signing time:             Thu 15 Oct 2026 11:01:41 +0000
Manifest this update:     Thu 15 Oct 2026 11:01:41 +0000
Manifest next update:     Fri 16 Oct 2026 11:01:41 +0000
Files and hashes:         1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: C2oqGpLkOD/otdCbFbxoLPd3w4gQrhILDVU/mjm/nFE=)
                          2: 5eF8s6L4dxVdQ8kG6JSRKH5Z-p4.roa (hash: W/wS7TiCIbBG/r7K+DfX8KMRxtkECp8i1kkTUjuuZaI=)
                          3: 5tcCkCr9HL184Lf-stMsZLwXzY8.asa (hash: W+8BBuc5L8FD4aYBcumTsMn0Sc7cRyfKyOoBOmnm+hw=)
                          4: Lt-JS9jFkT4UgaNicX0rbzX6mAk.asa (hash: xwZnxqjyxoKeHqIztJC/xo2eZabCtc46qjY8fPIJBWM=)
                          5: QfmBtp8KP7z9Jf5dlAT_B8Tard0.roa (hash: uRY0F8qxF9a6vSVsKTRXDUbGyb6OveIKtipgP1G7Ly0=)
                          6: V4te01z2mPYByn_WDoLME3CzX-0.roa (hash: gfJ/GwODtNT85oPrPT0DpykGNXUPo2/It/pR8L+5MmI=)
                          7: rtn1yFDMEF3uOmDML8IMWwUHHk8.roa (hash: z0koHkmAbR2uxvEhOZByMFluLfmEdIOonXQa6YxqrIY=)
                          8: ue-Y0ctMxDRIaXof8C95hwV8dOQ.roa (hash: FlHy0MeZzzmzPGhIk531V6sP1Eub2bevIcHJmxYMIHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 11:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3f:39:96:6b:70:e5:14:a7:46:ef:4d:63:72:28:b7:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
        Validity
            Not Before: Oct 15 11:01:41 2026 GMT
            Not After : Oct 16 11:01:41 2026 GMT
        Subject: CN=7556dfbc7d95b7e2c37c1e1207e7b4383e918d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0c:6c:bb:04:18:dd:51:e1:c3:15:1a:39:f5:
                    06:94:d1:9a:f3:42:aa:a5:bc:3f:06:2f:52:07:43:
                    02:33:ef:42:86:66:a5:e3:7d:f1:0f:2e:c6:5c:03:
                    aa:33:b7:bd:6a:f8:40:77:15:21:6e:56:a6:02:d9:
                    bf:1a:6d:b5:24:ae:64:3c:0a:0a:cf:81:27:eb:f5:
                    ca:58:c1:50:ea:c5:5b:a5:eb:ac:a0:57:41:75:c6:
                    ea:74:fc:78:d2:17:73:fb:26:95:38:b0:7f:9a:5c:
                    a7:a6:30:aa:67:4c:48:62:1c:37:73:58:c4:6d:f5:
                    28:45:71:88:a5:fb:b2:ce:cb:a5:af:7f:12:cb:a0:
                    c9:31:c6:94:5a:99:74:55:a5:3b:88:80:f5:d5:b1:
                    7f:8a:6e:a8:28:5b:51:17:32:cb:33:dd:2c:90:cd:
                    23:38:55:c3:81:29:85:9f:66:58:6c:b4:20:e1:39:
                    71:9a:1c:33:c1:72:8f:9e:62:0d:80:a6:47:da:18:
                    6e:c5:34:b3:e6:ed:b5:91:96:99:7a:9d:bf:6f:23:
                    a1:72:32:68:3f:5e:31:62:64:f7:de:35:c8:84:9d:
                    a9:cf:11:23:83:1f:1d:c0:5f:f0:10:12:40:dc:3c:
                    21:23:54:cd:c4:81:48:ea:9b:99:6c:97:87:64:8a:
                    92:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:56:DF:BC:7D:95:B7:E2:C3:7C:1E:12:07:E7:B4:38:3E:91:8D:4D
            X509v3 Authority Key Identifier:
                keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:dd:b0:7e:1f:5c:0f:8d:18:5c:74:95:53:98:b6:e0:c3:94:
         b0:c8:a2:2b:37:53:3a:6f:a5:1c:ea:51:f9:90:3c:1d:c0:d6:
         86:ea:d5:3f:78:94:32:27:36:26:d5:b4:54:e2:ec:48:51:d6:
         76:a3:cd:9a:eb:f7:47:c9:c5:f3:88:b5:61:ba:0e:17:4c:1e:
         de:6c:ef:d0:1e:df:f1:37:5e:9d:3d:9b:87:61:a7:9f:0a:d9:
         1b:72:51:41:6a:ae:08:0a:42:39:c7:61:7b:06:4c:02:23:ae:
         e4:70:b4:51:cc:67:25:e9:61:cf:01:d9:42:12:8d:4c:0c:0d:
         65:17:1a:ae:58:27:6e:a5:a3:61:7b:b0:88:5f:c1:e4:f2:4b:
         bc:e9:b8:74:1b:5d:cd:d9:02:60:69:b7:b8:b6:d3:09:2b:9f:
         74:36:86:d3:e5:1e:64:a1:b3:68:65:19:e1:f7:02:11:f5:ef:
         d3:8f:bf:91:2a:7f:58:ea:d2:b8:d2:3c:d1:34:27:a1:28:f9:
         e7:04:26:d7:27:9f:fd:3c:b4:6a:4d:c9:ff:11:7a:67:fb:c6:
         e8:48:34:4d:25:5b:75:c8:ed:23:43:ee:79:38:c9:e1:03:64:
         5b:e6:d0:c0:a9:21:56:60:4f:dc:4e:35:b3:e3:d8:4d:2c:04:
         77:f2:eb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 21:08:37 2026 by rpki-client