Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File:                     irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier:          m6ex3ZaNYcB8P+jb3rbV6CNEGEY1ys3qWDQJ5nygIjY=
Subject key identifier:   E2:46:BD:6F:4E:01:0C:9C:F9:36:6C:B8:99:17:96:09:17:98:D0:69
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer:       /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial:       01A10CCC35F868A2FA471C007C4AD59724B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number:          1A1F
Signing time:             Mon 05 Oct 2026 16:01:12 +0000
Manifest this update:     Mon 05 Oct 2026 16:01:12 +0000
Manifest next update:     Tue 06 Oct 2026 16:01:12 +0000
Files and hashes:         1: 9JA9nwwgveuhbehf1dbMMMd0pbA.roa (hash: K4544NSAPZx14RkA7PqqI9Lc4q1KFc9amOrIQYgacIo=)
                          2: A8c1PBpIFSLztF75JZ-1ZvSJ42c.roa (hash: S0wvsX3ezkojN9v+ptRSu6L3oxr6C1sg4BZfv0cK4DY=)
                          3: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: kxljac6Qrn9OdR92NtJ/omV0Z0hyXmKqtO9LkrPkKhQ=)
                          4: rh3h4DSUZf09eS3PD7_xT0pSUtw.roa (hash: AOUMEPrwbSgS3JJ+7BtVEwM9p+VQ+160OntQ7q3cUso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 16:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0c:cc:35:f8:68:a2:fa:47:1c:00:7c:4a:d5:97:24:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
        Validity
            Not Before: Oct  5 16:01:12 2026 GMT
            Not After : Oct  6 16:01:12 2026 GMT
        Subject: CN=e246bd6f4e010c9cf9366cb8991796091798d069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:73:2a:37:e6:f2:e2:a5:22:95:57:b7:62:5f:
                    18:b6:71:5c:f6:af:4b:c5:49:eb:19:3e:35:86:f8:
                    29:2a:46:25:3b:88:46:09:0b:78:2d:29:e9:52:98:
                    c6:06:3c:1f:27:88:c7:7c:fe:5d:e0:ff:47:b4:4c:
                    ce:a7:bf:6b:73:8b:f7:30:15:ea:9e:97:83:32:4d:
                    2a:29:c3:d7:0f:a5:0a:88:d8:45:21:54:98:5a:ba:
                    6d:d9:28:fc:e5:fd:6e:0d:eb:80:46:c8:f0:05:f7:
                    36:dc:3e:b1:02:11:8b:b6:2e:53:e9:dc:08:64:a9:
                    55:c6:1f:e4:d7:05:2f:d5:67:31:b4:10:43:42:74:
                    74:05:ca:4d:60:60:1f:01:ff:ce:f2:cb:d0:b1:66:
                    d4:ef:dd:a1:32:65:07:83:56:c8:3d:4f:e4:ce:04:
                    34:79:23:45:2a:65:f7:82:47:e2:42:3e:30:09:9a:
                    dd:53:48:da:bd:15:25:0c:80:26:6a:83:68:53:d8:
                    0f:8a:c0:68:73:ed:e9:b0:b5:f9:b0:71:28:d1:39:
                    b7:c1:64:03:91:81:85:a5:20:ac:37:fa:64:15:a6:
                    cc:90:b4:e7:11:54:aa:a7:19:71:9c:8e:7a:72:a2:
                    9e:df:8b:26:6a:42:1a:fa:11:6e:ab:b2:8d:09:75:
                    5a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:46:BD:6F:4E:01:0C:9C:F9:36:6C:B8:99:17:96:09:17:98:D0:69
            X509v3 Authority Key Identifier:
                keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:96:63:03:9c:46:53:8f:37:e8:9d:23:db:d9:42:9d:15:b4:
         90:04:c6:9d:50:76:e2:75:4c:fd:b4:bd:a6:1e:33:af:a2:14:
         9c:b0:66:64:06:e9:5e:66:79:ab:77:1b:37:e1:20:7b:c5:4e:
         b2:83:c3:08:6b:8c:36:b8:89:20:eb:38:de:98:1e:46:33:4a:
         ae:91:4b:de:99:f8:ab:70:d6:41:5a:03:c5:b9:96:c4:33:de:
         34:a7:9a:60:21:0c:4c:28:79:8e:e2:16:bf:a1:4d:24:64:87:
         11:9c:aa:5f:7f:59:31:a9:ef:5f:4a:56:b4:89:b7:83:11:b3:
         23:fd:4a:1e:52:69:dc:cb:b0:9c:07:3a:0c:07:b2:9c:3a:4c:
         b2:2b:4a:f5:30:52:80:77:ca:af:f6:ea:fa:6c:48:55:5b:38:
         6f:b9:a4:61:a0:5a:2e:11:b1:c9:56:cc:2d:e5:a3:3a:6b:70:
         4b:e5:ce:9e:20:63:1b:50:b0:51:54:63:7b:e0:70:17:ba:71:
         81:4f:7e:66:bc:e8:4e:a7:e4:c4:ac:b1:28:81:6f:78:a6:51:
         52:b5:34:44:12:20:e4:13:84:c0:de:da:ac:2d:9c:37:21:5c:
         40:1e:eb:a2:14:43:78:d7:64:70:56:5b:0d:d4:ec:7b:89:7f:
         5b:9e:f1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:15:44 2026 by rpki-client