Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
File:                     P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft (raw, json)
Hash identifier:          +LcAT6EQIEVYZOOGh143dsF9btf7yI9rAUbU5R6pRSs=
Subject key identifier:   50:52:70:6D:4C:BD:93:A8:63:D9:30:66:E4:F6:13:42:A2:CA:F9:92
Authority key identifier: 3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90
Certificate issuer:       /CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590
Certificate serial:       01A0F230F4B1046D7EC5F8A2A19ECB511C2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
Manifest number:          033F
Signing time:             Wed 30 Sep 2026 12:01:29 +0000
Manifest this update:     Wed 30 Sep 2026 12:01:29 +0000
Manifest next update:     Thu 01 Oct 2026 12:01:29 +0000
Files and hashes:         1: P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl (hash: Twlm5MKjsjkZWjW1wz5dcK1OT1TF+eQaYhSCt6Jl5Z4=)
                          2: wiCmzHMmJI0asghERNxqN-MynS0.roa (hash: bcmBxTUeR+yh0Zn1PK7SL7wVYZreCWWh7r4c30KwASE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f2:30:f4:b1:04:6d:7e:c5:f8:a2:a1:9e:cb:51:1c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f4bfe92de10e660ddf45cc2d1f5ffb636ef3590
        Validity
            Not Before: Sep 30 12:01:29 2026 GMT
            Not After : Oct  1 12:01:29 2026 GMT
        Subject: CN=5052706d4cbd93a863d93066e4f61342a2caf992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a6:ce:f1:8f:d3:57:25:d0:2b:dd:0c:cc:b0:
                    4d:9f:ba:9f:36:8b:e5:3d:8b:29:11:1b:bf:04:3a:
                    48:f3:05:af:83:d7:85:6e:31:80:69:25:fb:2b:a4:
                    6f:13:32:90:b6:af:f6:e5:d6:c6:df:4f:50:26:e0:
                    bb:05:9f:69:c8:63:46:13:b9:ba:2a:ae:fc:bd:00:
                    6a:29:a1:1d:b2:43:01:cd:db:00:6c:49:c5:c7:f6:
                    eb:0f:04:7a:5f:a7:4e:56:aa:c9:e1:76:67:f8:9c:
                    61:f5:99:19:03:ce:6b:fb:b2:82:a7:6c:4f:ce:32:
                    71:e9:13:b3:36:a9:03:44:54:b7:d3:51:eb:5d:a3:
                    bc:5f:bb:8e:fe:73:4e:cd:90:c9:2d:62:fe:8c:e8:
                    6b:18:e8:d9:db:5e:8d:69:53:a8:71:87:f2:4a:c7:
                    3f:80:a6:8c:47:91:6a:f9:7e:60:1e:e0:49:cb:1b:
                    a7:11:40:73:0a:4a:d1:df:40:d2:57:1f:92:c0:b6:
                    26:50:20:3c:a9:df:43:64:1c:b3:4c:cf:59:da:a6:
                    0a:5f:57:41:7e:fe:75:39:cb:b9:de:7a:cd:1b:75:
                    7d:7a:93:77:9f:b5:e2:b0:8f:95:f7:ad:26:bd:98:
                    1f:0b:88:91:17:92:3e:38:f6:17:b5:20:79:91:40:
                    28:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:52:70:6D:4C:BD:93:A8:63:D9:30:66:E4:F6:13:42:A2:CA:F9:92
            X509v3 Authority Key Identifier:
                keyid:3F:4B:FE:92:DE:10:E6:60:DD:F4:5C:C2:D1:F5:FF:B6:36:EF:35:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/7eac4f-77dd-4077-ae3f-ce6482d0f1b6/1/P0v-kt4Q5mDd9FzC0fX_tjbvNZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:c1:8c:e2:a4:96:78:87:ca:68:dd:50:81:99:f9:34:47:ef:
         cf:f3:0e:25:81:e8:a7:96:67:8a:f8:f7:48:89:82:12:19:77:
         1f:77:ca:f4:21:86:83:cd:ef:55:ab:f3:63:20:e2:6a:62:a2:
         51:58:98:82:ce:c6:25:e0:11:b1:e5:a8:7f:a9:b6:08:ad:e0:
         03:c9:07:06:d9:3a:0f:08:69:13:02:9d:43:13:c4:63:40:d5:
         e8:b6:90:28:01:44:bf:63:e1:ed:38:93:07:fc:e4:3a:94:ae:
         ba:66:e9:bd:4f:7e:fe:43:bb:b3:e3:9a:4a:c1:68:c1:b9:32:
         20:43:95:00:b1:b4:fc:fa:2b:7f:3a:5d:fd:20:c8:6d:ad:ed:
         d6:29:04:62:b6:89:5c:ec:6a:a4:4f:7a:69:6d:59:0e:db:9c:
         01:e5:81:c5:e0:2c:87:42:5b:4e:40:44:26:59:7c:a4:8b:45:
         4e:22:cc:af:57:cb:36:36:80:2a:f1:ae:d5:2a:07:8f:76:39:
         16:3b:39:9a:b0:0b:84:47:2a:ad:ef:fc:e0:77:9b:c2:40:16:
         94:12:67:c9:71:94:c6:ec:9c:9c:a5:81:eb:11:9e:ad:44:a5:
         cb:ff:8e:87:35:15:4f:3d:46:cf:08:f4:f3:63:8c:0e:09:8b:
         8d:9f:a6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:53:05 2026 by rpki-client