Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.mft
File:                     _RuNPQUHZm87sDyaWGV9xSl1fZc.mft (raw, json)
Hash identifier:          Dj6wy4wJate7Oso4WKsudWcz9S8q5e5QbounjScKBAU=
Subject key identifier:   D4:BC:A6:74:C7:2A:7C:A0:4A:10:21:95:A2:1E:44:41:25:54:58:E8
Authority key identifier: FD:1B:8D:3D:05:07:66:6F:3B:B0:3C:9A:58:65:7D:C5:29:75:7D:97
Certificate issuer:       /CN=fd1b8d3d0507666f3bb03c9a58657dc529757d97
Certificate serial:       01A102EDB65ACA280AC3A5D1398AAE224CE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_RuNPQUHZm87sDyaWGV9xSl1fZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.mft
Manifest number:          AE
Signing time:             Sat 03 Oct 2026 18:01:35 +0000
Manifest this update:     Sat 03 Oct 2026 18:01:35 +0000
Manifest next update:     Sun 04 Oct 2026 18:01:35 +0000
Files and hashes:         1: RvRvHV0x6ysxbxULvf_1qstGWqs.roa (hash: s2EDZjdZarn3X1PV3ipDQ4y//AUVQJ/pruUyN3ZV/wo=)
                          2: YzbLZF0ToPAtbjdb8tZtZBy88eM.asa (hash: JTDOa4hjtdL8/oyK4yg0Bv7JcRJT+zrdH0ws+s0/EA8=)
                          3: _RuNPQUHZm87sDyaWGV9xSl1fZc.crl (hash: QhXRx9kuY3y+fgdDXo/I/ut59eAaovcuQJmDdfc0x6w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_RuNPQUHZm87sDyaWGV9xSl1fZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 18:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:02:ed:b6:5a:ca:28:0a:c3:a5:d1:39:8a:ae:22:4c:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd1b8d3d0507666f3bb03c9a58657dc529757d97
        Validity
            Not Before: Oct  3 18:01:35 2026 GMT
            Not After : Oct  4 18:01:35 2026 GMT
        Subject: CN=d4bca674c72a7ca04a102195a21e4441255458e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:48:12:5d:18:2c:46:c4:38:50:48:14:b2:
                    26:cb:92:82:16:f4:0c:ea:00:2d:f9:c3:06:05:da:
                    ab:f9:4d:52:b5:02:c9:51:bb:a2:59:c3:94:d8:0f:
                    01:ad:a5:9d:5a:ca:04:54:89:f7:bf:e2:00:ac:1a:
                    ad:b6:2c:a4:2d:e9:44:79:32:ff:95:f4:99:ee:c4:
                    bd:73:fb:c3:4c:ad:e8:b4:98:53:f0:77:ea:23:21:
                    ef:ab:79:ba:a3:14:92:91:7a:d5:f7:9d:c5:f1:f2:
                    82:03:32:28:78:5a:b7:f3:f1:11:ca:40:a4:f8:90:
                    73:50:21:4d:71:ba:03:a6:a6:2e:3c:07:9e:6e:86:
                    85:63:8b:a5:c3:a9:e2:d8:cd:04:93:67:ec:73:8a:
                    04:3f:2b:10:48:06:2c:ac:d6:69:74:c0:fb:a4:4b:
                    81:68:37:cc:5a:06:91:b8:92:91:3d:db:76:0f:0f:
                    b1:f6:a6:08:19:15:bf:84:94:94:7d:9b:85:4c:1d:
                    87:32:f3:c7:58:e5:d6:fe:b1:1a:03:a3:1b:11:da:
                    3b:64:42:f7:2d:69:13:92:c1:bf:15:c8:a6:bb:50:
                    c1:56:dd:50:24:86:82:9c:eb:e5:7c:2c:53:a8:ea:
                    d9:e4:11:7b:72:d6:c6:da:f1:1a:44:42:2e:4a:76:
                    96:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BC:A6:74:C7:2A:7C:A0:4A:10:21:95:A2:1E:44:41:25:54:58:E8
            X509v3 Authority Key Identifier:
                keyid:FD:1B:8D:3D:05:07:66:6F:3B:B0:3C:9A:58:65:7D:C5:29:75:7D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RuNPQUHZm87sDyaWGV9xSl1fZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68ab12-dd52-481e-86a6-5b88bde528ff/1/_RuNPQUHZm87sDyaWGV9xSl1fZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:56:72:d0:b7:42:4a:97:4f:fd:17:b7:d5:e8:45:eb:4d:0d:
         ec:af:36:99:4a:31:e2:5c:c5:13:5e:cd:67:50:c5:1b:e5:e0:
         a0:3c:bb:15:d5:bd:bf:45:c3:78:ac:28:2d:09:9c:a1:d9:cf:
         59:0e:85:3a:6f:89:63:62:cd:8f:bf:6a:ca:3d:a0:38:09:1a:
         c1:04:78:96:b9:4f:20:f1:e3:52:dc:91:c7:0d:96:49:d5:4a:
         fc:fa:c9:59:df:c7:e4:f3:79:49:e9:4d:6e:3a:4e:8e:bc:9b:
         bc:aa:f0:4f:95:cb:1a:4f:61:25:37:28:67:2a:ba:b7:ff:df:
         b5:27:cf:98:b2:db:c8:33:2c:c3:59:65:57:75:29:7d:cb:b5:
         9e:39:e0:04:9a:68:9c:d6:29:1d:96:ab:43:cf:69:78:30:cd:
         11:b9:a0:8f:f4:6e:fb:24:42:b6:23:0b:49:a7:94:70:ae:e7:
         fc:d7:5b:4f:e4:98:ea:10:f1:1d:2e:96:e0:08:82:8f:68:1f:
         86:10:9f:50:2e:67:2c:a5:a9:43:ec:83:0a:d4:af:44:ff:c9:
         14:d0:b5:5d:a1:c2:fb:73:ce:4e:ea:7f:92:3f:c1:48:6e:df:
         70:67:49:20:9f:70:9d:4c:9e:7d:b7:58:48:d6:fa:0a:97:d8:
         72:df:a0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:47:04 2026 by rpki-client