Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
File:                     _jecWObPq6RMIIdrfVmMCFBLUws.mft (raw, json)
Hash identifier:          WkRHKSfj8de7T2c1e+7iAyAe6/kO7ebhrXMA2qmFtkg=
Subject key identifier:   65:CE:ED:70:E1:33:CC:9F:FE:B9:17:5C:F9:9C:E5:50:2D:B5:1C:4C
Authority key identifier: FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B
Certificate issuer:       /CN=fe379c58e6cfaba44c20876b7d598c08504b530b
Certificate serial:       01A1781633E3A0C9B71303D07732C479366A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
Manifest number:          013C
Signing time:             Mon 26 Oct 2026 12:01:23 +0000
Manifest this update:     Mon 26 Oct 2026 12:01:23 +0000
Manifest next update:     Tue 27 Oct 2026 12:01:23 +0000
Files and hashes:         1: 1f3chHH8Vzxj3ocJFNDQRkHByxM.roa (hash: Yj5a6Anj2XGpmwiiCO9eJxIVZQ77+YUsqu5JfZN+lyo=)
                          2: 3M6LA-oo_M8iW0WHMWzqNuawrXI.roa (hash: mbA8j0JMCwuQFEr3+eq0m532/7RxJbUAb2My/6/L17o=)
                          3: DC6F0mfYavqmIkVWp9CoS3ORJPY.roa (hash: H/N8+lVCJsVtR4s7AZv6JX/uXYchHAlYepuRHlvMSmQ=)
                          4: DqGXOOpUBDyIo6-xMv0lfI01neI.roa (hash: cY+avgvPvcXEHIu9Wj7BmeU7KYCi5ZbN7lhO24Q9+hg=)
                          5: _jecWObPq6RMIIdrfVmMCFBLUws.crl (hash: Hj5FHXjrglAm4FXo90EjvDSmxJtBvDXx54doE3I9OuA=)
                          6: bIqQRYp65ffuhEfiWgURnnYmOLA.roa (hash: 2t1dhMXRId6Ep0qRGdrx3Oonk4YhaxQhU/sq1I6fhLA=)
                          7: ixHLgv4HQ_wAiB8H1aG1cnHYC0U.roa (hash: Q6evZsXBO9hhV+6BK2xuyToyVzZwGNdUppGvsisAOWo=)
                          8: mQgZ_aeQizevYwNKMCfXAMQNacA.roa (hash: zBq8HYNkmYsx3l9a089U7aq9li/mu5uJZF8m8sHR/3U=)
                          9: wsLBMp1xRJgr69K7X57Is-5d0GE.roa (hash: mpGX3UZzDQtu714gFa7DML2FgzYlJk2cK8dfIFZYaDk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:16:33:e3:a0:c9:b7:13:03:d0:77:32:c4:79:36:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe379c58e6cfaba44c20876b7d598c08504b530b
        Validity
            Not Before: Oct 26 12:01:23 2026 GMT
            Not After : Oct 27 12:01:23 2026 GMT
        Subject: CN=65ceed70e133cc9ffeb9175cf99ce5502db51c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ab:22:8d:e9:9c:5f:63:cd:82:93:ff:83:c0:
                    ee:93:6b:f4:87:47:29:8a:98:91:dd:b5:b0:31:0d:
                    d8:f1:ec:bd:3a:69:3a:33:df:a1:4d:48:6e:42:fa:
                    0b:b8:1e:70:05:97:2b:d9:3c:6a:4b:fe:3d:1b:60:
                    30:f7:31:51:57:b1:b1:4d:24:72:e4:80:61:f2:4b:
                    b8:85:3f:92:15:db:cc:7b:2c:ea:d5:ec:3e:a1:9c:
                    f3:13:0b:b6:1d:5f:60:5c:9d:8a:82:03:b3:64:bc:
                    36:25:bd:73:ca:ed:10:a0:37:e4:85:53:dc:4a:d7:
                    d5:35:6a:7e:ae:80:53:4c:b6:89:23:cc:36:26:bf:
                    ed:d3:8a:14:81:3f:0e:5d:c2:bd:4b:2d:52:a7:d2:
                    d7:0d:b9:a3:b5:c4:9b:46:1a:51:cc:eb:91:07:2f:
                    1f:86:cc:cb:ed:71:c2:bc:44:e1:89:01:80:dc:8c:
                    90:da:ab:9a:56:aa:82:94:12:fb:9e:5e:b9:83:38:
                    b2:04:7a:e9:3f:40:e9:d0:30:03:de:1c:08:86:43:
                    45:d2:3f:16:88:8d:66:07:88:ad:57:f0:88:08:bd:
                    5c:66:e5:7f:97:16:3b:5d:75:15:53:5e:3a:8a:ec:
                    55:a4:e1:f1:08:f2:39:a6:11:ea:9c:5c:2b:3a:2f:
                    43:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:CE:ED:70:E1:33:CC:9F:FE:B9:17:5C:F9:9C:E5:50:2D:B5:1C:4C
            X509v3 Authority Key Identifier:
                keyid:FE:37:9C:58:E6:CF:AB:A4:4C:20:87:6B:7D:59:8C:08:50:4B:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jecWObPq6RMIIdrfVmMCFBLUws.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d7300f-de06-4f7b-a909-6598b4ceb069/1/_jecWObPq6RMIIdrfVmMCFBLUws.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:85:72:cb:ff:c0:e1:23:7d:00:19:f2:6e:17:3f:c4:0d:51:
         96:73:c1:48:64:d6:bb:b6:95:0d:c6:f5:3f:59:26:59:86:5b:
         b2:76:3b:4c:ea:6b:4d:54:83:e2:ef:a2:44:4e:e9:0a:27:23:
         bd:2d:df:e4:04:f7:5e:d1:29:10:13:2d:5c:2e:20:e6:1a:17:
         49:b9:be:ca:13:45:79:b0:e9:8c:6d:fb:ba:a7:dd:10:28:b0:
         ae:bd:58:9f:d5:76:22:ed:5f:b2:f7:eb:b8:2a:70:c2:44:bf:
         c9:3f:40:d1:91:4d:65:eb:70:ff:ee:d6:95:31:ed:dd:01:ef:
         72:50:9b:23:67:52:b8:65:fe:69:bc:60:12:3b:a1:9f:ba:65:
         73:4e:8e:88:dd:d5:19:27:57:42:41:21:32:c5:1f:85:f4:9b:
         c4:2c:7c:a3:3b:ac:b4:a1:d0:b1:32:62:85:54:bf:43:0c:5e:
         83:12:8c:1e:c9:8a:c9:ad:af:65:5b:af:48:c2:37:94:f2:9c:
         13:6b:b6:14:8f:ba:36:8c:2a:76:00:d1:c2:41:7c:11:76:eb:
         8c:f4:f2:18:60:6d:30:d5:a9:60:f4:2a:53:c3:3e:6f:9d:17:
         a2:1d:a1:3d:84:ce:3a:50:24:53:c5:d0:94:7b:50:93:e1:a5:
         60:09:8d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:51:09 2026 by rpki-client