Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
File:                     fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json)
Hash identifier:          iZUOt1pcjQFOrMyK+OpVoQ+f1Vw6IQ+KKCVdnmgRqnA=
Subject key identifier:   E5:2F:0F:3D:05:D1:BA:C8:AF:1F:69:71:CA:F9:03:98:55:F3:14:5B
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Certificate issuer:       /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial:       01A14DD07E8DCBF8033411EF604FBFAEDBBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
Manifest number:          0A06
Signing time:             Sun 18 Oct 2026 07:01:11 +0000
Manifest this update:     Sun 18 Oct 2026 07:01:11 +0000
Manifest next update:     Mon 19 Oct 2026 07:01:11 +0000
Files and hashes:         1: 3fOCVpT-Lf6UOXcD5Nc80w9uuEI.roa (hash: Olnc6TsFMf/lto0XZ/IXXC3VCnMMv6kWoXMR1B4Qilk=)
                          2: 6MROEyhCnQoDzzzLgMuqSp8WWW4.roa (hash: U2ETKysUzgCpOSOJ/qWrrLMDT5gA1Ft4qr0viHcAPBA=)
                          3: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=)
                          4: DR9VqkVtbZff3gkUBcaPLf1vbp4.roa (hash: sIqhfmAWjnSCKWQ8+ZuDooV52eSu6wgQtTvetBcOvWQ=)
                          5: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=)
                          6: FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa (hash: Lia6Niow9mvTIEp6IZQLMa57V883PVRlmqrb94CP8h4=)
                          7: IyHLg3suZFaQuVarnDT09yy0X2o.roa (hash: 6+BW/hTb1umKDUBp2nCuMYA44iYB5QhDbwWwEQM2hgQ=)
                          8: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=)
                          9: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=)
                          10: WOqoJu5t09R3Cekgx_2O0sa6-Hc.roa (hash: 1qEbFKCQOOiO55/Z1NIx4D98L9A9xFqq+s2fxS0t2Dk=)
                          11: Y71JSOza9l99m2LkV-uZBA1qT4k.roa (hash: uUv6/DaQOMG287F0xQdwh94hSrXdbb62+qEzPa5p0o4=)
                          12: ZyKwbccyVfxFWStWGmNBds2K9AE.roa (hash: C74fBVKBp8P7zkaen+ft55vIs/92CO4DbwapwB4BQdE=)
                          13: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=)
                          14: alomw2OsWHbd8tHr8rQUVSaTf48.roa (hash: /SgtQ+hB/USe7wR/Kp74UDlxjPB2bz9JIMvjDNTyblY=)
                          15: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=)
                          16: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: E/CSjik1FOq85QtC5ZSTa9JFqfJmHTrF43qboSjDY3A=)
                          17: hElXO4jKei6eIioTYSRMuOo2tUQ.roa (hash: 9Afji0izgzI/c8xd125iBWAIgGantscuH5lpVBS/wmo=)
                          18: kpma4xqgzEEytLfdE-9LrfzAf44.roa (hash: vgqc9IvueEpWlOduqOn71G/7ZnxuYFS4IHbsYXqcCYM=)
                          19: mE5DN157XZf7igs7Qp5o_mpfYoY.roa (hash: OK0s5oWuJ3ewBiMYcBCwgUB2nCoplpS+aaStS616Tlc=)
                          20: o6aWDaWLtgSw0yJqWoQY-eXoND4.roa (hash: 7Qa4eT/ei1RS6VIpX+STSPoJ4j3+B1WFU+LfkEGMwlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 19 Oct 2026 05:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4d:d0:7e:8d:cb:f8:03:34:11:ef:60:4f:bf:ae:db:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
        Validity
            Not Before: Oct 18 07:01:11 2026 GMT
            Not After : Oct 19 07:01:11 2026 GMT
        Subject: CN=e52f0f3d05d1bac8af1f6971caf9039855f3145b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:3f:7c:a3:8b:5e:ce:ba:b6:63:6d:74:56:13:
                    2b:bc:ed:82:d0:f8:a1:1f:79:f2:e1:51:e9:76:7c:
                    1d:7f:ac:02:5a:e1:b7:41:06:b0:16:ca:94:21:b2:
                    fe:c8:79:ca:a5:76:6f:91:58:29:cc:d8:08:1e:0d:
                    56:2e:0f:55:8b:a1:39:0b:30:06:ce:58:1b:dc:5f:
                    d0:eb:86:91:a8:5a:2d:be:1e:f2:22:99:81:e9:2e:
                    0c:d5:b0:9b:73:2b:5e:06:94:f8:98:e5:de:14:67:
                    a1:6e:aa:e6:52:c3:e1:89:2d:09:5b:00:09:8e:24:
                    2a:ce:34:fc:06:29:6e:f5:20:12:41:3e:2c:11:1f:
                    c4:ab:9d:49:f3:e4:72:73:ad:55:e7:85:c1:90:98:
                    cd:c0:a7:0b:2d:ea:9c:4d:13:9b:cd:2e:b0:dc:fb:
                    62:ff:80:7a:f3:29:f3:c9:b6:b3:b6:a9:e2:97:34:
                    86:29:26:7c:4b:e5:a6:5d:52:52:52:1e:c2:bf:0c:
                    7b:22:ce:ed:29:a5:67:51:ad:b4:2b:64:8f:bc:27:
                    97:06:f6:a8:c5:98:fc:d2:2d:5d:d9:75:b3:e3:81:
                    af:7c:d7:3a:0b:f3:5d:5c:a4:a4:8c:b8:03:e8:bb:
                    2b:95:b7:70:0e:31:2c:a4:5b:20:ad:2d:ad:67:b2:
                    90:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:2F:0F:3D:05:D1:BA:C8:AF:1F:69:71:CA:F9:03:98:55:F3:14:5B
            X509v3 Authority Key Identifier:
                keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:3d:80:56:20:ea:41:5e:8c:11:4e:66:63:82:30:d2:a9:9e:
         dd:ac:7e:b3:b6:bd:c8:e2:6b:d2:53:8c:06:94:4e:6c:54:12:
         fe:44:6f:f9:ef:fb:a6:ab:04:5c:dd:94:ba:c4:3a:9b:1e:0a:
         68:25:1a:c9:76:19:24:db:61:43:e9:dc:a2:2a:95:aa:9e:99:
         b9:d9:ca:c7:01:26:73:ac:bc:73:a6:1e:27:38:f2:f9:e3:d6:
         52:56:a7:c3:21:94:92:0f:94:b9:45:a2:89:68:b0:ec:ab:61:
         40:cd:f8:5a:b2:37:0d:db:8e:da:14:eb:ed:79:e4:ca:da:9d:
         67:2d:5d:91:1b:4f:60:c6:de:d0:2c:8c:8f:07:c2:b4:b7:82:
         4b:54:64:c1:e0:49:9d:f3:2c:19:9b:cf:d9:fc:4d:2c:a0:25:
         7d:97:b4:9e:3b:53:ba:ae:3c:bb:b1:89:c0:c3:bc:f2:9b:1b:
         bd:f8:50:df:95:4c:20:bb:30:01:5d:37:fb:97:cf:e5:e0:f1:
         36:33:c0:aa:2f:21:90:71:6f:37:40:7c:6d:c3:f1:18:32:0a:
         14:8b:2d:c6:56:df:ae:6f:f1:c1:23:07:79:53:96:e2:c7:89:
         fd:57:c7:1e:d9:d2:b3:3c:bf:33:6d:0b:cf:5d:2c:d3:8f:b7:
         df:fa:31:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 13:19:39 2026 by rpki-client