Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
File:                     p0j74dfTpqpHTeQ_qIXOLQkcUps.mft (raw, json)
Hash identifier:          Pba20Kqlrbz/NdSi2KmmRHe5or/X66RCQRst+VL89fU=
Subject key identifier:   BD:C4:43:60:62:3D:65:87:21:C7:AF:27:4B:CF:DF:E3:DF:28:2B:6D
Authority key identifier: A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
Certificate issuer:       /CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
Certificate serial:       01A166100DDBD8FE5CC0BD4E00A806066C31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
Manifest number:          180B
Signing time:             Fri 23 Oct 2026 00:01:30 +0000
Manifest this update:     Fri 23 Oct 2026 00:01:30 +0000
Manifest next update:     Sat 24 Oct 2026 00:01:30 +0000
Files and hashes:         1: X2Acde_AXJbiIzf4WSQxKTMikWM.roa (hash: BQtrWQacm7ByC/7TCno2qFJsSN/6VxyfhO1qrX07bW4=)
                          2: p0j74dfTpqpHTeQ_qIXOLQkcUps.crl (hash: iMRUNobEKCHaZgILNyfd0p+dWLv0iaSE8/m12fDcDDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 19:43:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:66:10:0d:db:d8:fe:5c:c0:bd:4e:00:a8:06:06:6c:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
        Validity
            Not Before: Oct 23 00:01:30 2026 GMT
            Not After : Oct 24 00:01:30 2026 GMT
        Subject: CN=bdc44360623d658721c7af274bcfdfe3df282b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:27:35:d0:c7:21:cb:b3:4e:a2:df:c6:db:83:
                    15:e5:f5:93:a4:e4:81:83:cd:cf:5a:c4:b9:ee:53:
                    5c:10:7e:c1:81:c6:1a:c1:f3:33:4b:6e:57:38:4a:
                    61:26:4a:bf:fb:60:3d:e9:b7:37:8f:79:35:ce:84:
                    90:95:0c:fc:b9:1b:e1:c2:e9:d4:79:20:25:1c:c5:
                    ff:56:9c:30:ec:dc:8f:65:70:7f:e3:41:0e:5f:46:
                    ad:3a:d1:10:d0:36:ff:a6:20:f2:31:8c:7e:79:ea:
                    46:9b:61:0d:21:7e:19:c1:b6:57:39:67:dc:25:bf:
                    1d:db:b0:df:a8:f0:15:bc:15:ac:87:f5:0c:1e:b3:
                    7b:57:7a:51:31:1a:88:b2:7e:e0:b2:a4:3b:f2:9c:
                    c9:76:83:95:02:a2:51:cc:76:67:05:3b:be:cf:79:
                    46:d9:71:23:62:63:6b:24:af:65:b3:48:bd:a8:a4:
                    e7:83:ed:da:f2:51:f3:49:d7:79:e6:5e:36:2a:c3:
                    ee:0f:f8:b5:f2:0a:34:f9:25:13:73:c0:bb:f7:78:
                    cf:7f:aa:fd:d9:e7:a4:61:f7:ec:2c:ad:7b:27:ff:
                    d6:a1:27:ff:04:e8:97:94:d9:18:cc:80:6b:8c:e9:
                    36:35:a3:04:28:e4:7b:b8:41:70:07:85:c3:a2:f5:
                    65:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:C4:43:60:62:3D:65:87:21:C7:AF:27:4B:CF:DF:E3:DF:28:2B:6D
            X509v3 Authority Key Identifier:
                keyid:A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:bb:f4:15:59:c4:b6:41:c9:b7:b6:70:44:e1:a2:eb:6c:30:
         d3:ad:09:e0:0f:81:b5:14:8e:ed:19:88:07:26:04:18:5c:85:
         a8:db:22:17:77:9e:a4:d1:b5:fd:12:76:51:5e:4d:71:02:df:
         41:99:0b:ee:5a:57:b4:e4:3d:d8:84:9c:fc:18:6e:b7:34:09:
         bd:98:dd:41:81:77:91:82:24:6a:e0:2d:73:bc:43:ee:74:8e:
         63:72:d4:b9:1e:ff:19:b0:55:76:9e:a0:e3:4c:b4:cb:1e:d6:
         09:ec:0a:d1:17:6f:42:bb:49:37:d8:77:fd:e4:3c:7d:be:f9:
         08:5d:fc:1c:e4:4b:7e:fb:59:95:14:74:54:cb:ba:dc:de:11:
         4c:ff:3f:7f:72:e5:fe:d0:99:92:ed:37:76:d3:c2:0b:e8:d5:
         50:6e:d4:67:0a:0d:2c:71:a5:55:51:ac:b2:f6:93:55:8f:7e:
         99:cd:40:2c:7f:72:49:09:a4:52:d7:e0:38:c1:18:11:a9:87:
         4a:a8:4c:fc:05:74:8b:f7:72:db:71:33:57:fe:18:7f:53:2a:
         06:c9:06:67:58:f1:d5:2d:7e:c8:4f:15:d8:39:6f:9b:db:f3:
         b5:fe:84:04:66:8f:5b:54:44:a1:42:4a:69:b1:38:57:38:70:
         8a:73:57:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFmEA3b2P5cwL1OAKgGBmwxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NDhmYmUxZDdkM2E2YWE0NzRkZTQzZmE4ODVjZTJkMDkx
YzUyOWIwHhcNMjYxMDIzMDAwMTMwWhcNMjYxMDI0MDAwMTMwWjAzMTEwLwYDVQQD
EyhiZGM0NDM2MDYyM2Q2NTg3MjFjN2FmMjc0YmNmZGZlM2RmMjgyYjZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Cc10Mchy7NOot/G24MV5fWTpOSB
g83PWsS57lNcEH7BgcYawfMzS25XOEphJkq/+2A96bc3j3k1zoSQlQz8uRvhwunU
eSAlHMX/Vpww7NyPZXB/40EOX0atOtEQ0Db/piDyMYx+eepGm2ENIX4ZwbZXOWfc
Jb8d27DfqPAVvBWsh/UMHrN7V3pRMRqIsn7gsqQ78pzJdoOVAqJRzHZnBTu+z3lG
2XEjYmNrJK9ls0i9qKTng+3a8lHzSdd55l42KsPuD/i18go0+SUTc8C793jPf6r9
2eekYffsLK17J//WoSf/BOiXlNkYzIBrjOk2NaMEKOR7uEFwB4XDovVlywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3EQ2BiPWWHIcevJ0vP3+PfKCttMB8GA1UdIwQY
MBaAFKdI++HX06aqR03kP6iFzi0JHFKbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWIt
NmM5YjVjOWJmYTc1LzEvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9hNzIzZDgtZDhjYy00ZTYwLTg1YWItNmM5YjVjOWJmYTc1
LzEvcDBqNzRkZlRwcXBIVGVRX3FJWE9MUWtjVXBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELv0FVnE
tkHJt7ZwROGi62ww060J4A+BtRSO7RmIByYEGFyFqNsiF3eepNG1/RJ2UV5NcQLf
QZkL7lpXtOQ92ISc/BhutzQJvZjdQYF3kYIkauAtc7xD7nSOY3LUuR7/GbBVdp6g
40y0yx7WCewK0RdvQrtJN9h3/eQ8fb75CF38HORLfvtZlRR0VMu63N4RTP8/f3Ll
/tCZku03dtPCC+jVUG7UZwoNLHGlVVGssvaTVY9+mc1ALH9ySQmkUtfgOMEYEamH
SqhM/AV0i/dy23EzV/4Yf1MqBskGZ1jx1S1+yE8V2Dlvm9vztf6EBGaPW1REoUJK
abE4VzhwinNXrA==
-----END CERTIFICATE-----
Generated at Fri Oct 23 06:05:02 2026 by rpki-client