Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
File:                     w3Q8id807HcKZZc_EAUUa_sysPI.mft (raw, json)
Hash identifier:          ARkaSwvcciBmETPyU7xpOVaikMVopx32YUxUV2hRczY=
Subject key identifier:   4E:76:37:2F:B5:6A:F3:7E:BD:59:3D:45:BB:3E:DD:60:18:75:46:90
Authority key identifier: C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2
Certificate issuer:       /CN=c3743c89df34ec770a65973f1005146bfb32b0f2
Certificate serial:       01A14BE26BF95AA079DB255C06077DEA9190
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
Manifest number:          118D
Signing time:             Sat 17 Oct 2026 22:01:32 +0000
Manifest this update:     Sat 17 Oct 2026 22:01:32 +0000
Manifest next update:     Sun 18 Oct 2026 22:01:32 +0000
Files and hashes:         1: w3Q8id807HcKZZc_EAUUa_sysPI.crl (hash: yL583pDNNCnfPrdl0E2VVyBgiIkG8JcxYe/T7RSmocw=)
                          2: wUc3S_D16XdipknJCTPDOkYeAwY.roa (hash: 0ohTvuZNcLXWt6aaBFxx4qj0TlX4E91Ut4sGjwIPaz4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 22:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4b:e2:6b:f9:5a:a0:79:db:25:5c:06:07:7d:ea:91:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3743c89df34ec770a65973f1005146bfb32b0f2
        Validity
            Not Before: Oct 17 22:01:32 2026 GMT
            Not After : Oct 18 22:01:32 2026 GMT
        Subject: CN=4e76372fb56af37ebd593d45bb3edd6018754690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ba:a3:de:7d:12:04:c0:19:5b:ac:f6:62:8d:
                    2d:51:52:ab:63:b8:1c:f3:ef:87:fa:b4:29:0a:ad:
                    72:5d:2c:b5:d7:99:33:25:4b:a8:fa:41:f8:d8:18:
                    0a:bc:2b:9a:25:0d:01:f3:a1:38:80:f3:91:26:1b:
                    aa:69:26:26:11:6d:ea:57:bd:ea:b1:40:a7:29:2e:
                    30:7c:ae:36:d5:3b:72:9b:f3:1f:bd:0a:e8:e2:bb:
                    cc:5e:66:21:25:f0:0d:ab:f4:db:94:46:38:89:a9:
                    b2:a0:43:8b:8a:db:a1:74:fa:1c:71:13:d4:ed:ed:
                    51:e4:9b:af:d3:ac:87:d3:75:7c:00:e4:10:68:aa:
                    86:5b:28:d0:ad:a0:3a:d9:eb:65:a9:e2:52:cd:36:
                    76:41:5b:f6:82:b6:59:45:14:40:ce:af:2f:4e:ac:
                    15:3a:83:a3:c4:be:64:c1:55:24:a9:05:7e:66:63:
                    06:9f:8a:71:0e:34:2b:89:5b:13:68:50:4d:09:78:
                    60:d6:2b:00:01:e7:2d:08:7e:a3:a5:2d:9d:81:36:
                    7a:63:7c:e7:50:78:d8:5a:7a:b0:6e:65:46:2e:e6:
                    c4:da:b1:9c:df:c0:88:d8:90:4f:74:77:a9:27:bb:
                    39:d3:5e:3e:f4:61:42:c6:64:8d:ae:11:ec:71:01:
                    17:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:76:37:2F:B5:6A:F3:7E:BD:59:3D:45:BB:3E:DD:60:18:75:46:90
            X509v3 Authority Key Identifier:
                keyid:C3:74:3C:89:DF:34:EC:77:0A:65:97:3F:10:05:14:6B:FB:32:B0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3Q8id807HcKZZc_EAUUa_sysPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f99db4-987e-43b1-a0ca-20f27e870d01/1/w3Q8id807HcKZZc_EAUUa_sysPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d6:a1:24:24:c9:19:35:cf:9e:48:72:40:ec:4e:c2:94:7d:
         e6:63:b5:95:5b:55:c2:70:4d:11:4c:a8:d6:02:63:95:f6:7a:
         cd:30:03:24:85:ba:31:ff:ec:45:02:3d:53:e1:cf:77:00:d6:
         a8:2b:81:01:02:ec:80:1d:85:a8:8e:e3:55:16:f7:c1:6d:54:
         35:58:58:26:ca:48:64:a3:b9:13:c3:d4:6a:82:85:49:73:b0:
         8e:bc:4b:09:8a:aa:ca:8b:8f:95:e0:ac:07:c5:d3:5c:45:cc:
         ce:8b:92:1d:95:b0:29:7a:23:5f:a3:43:94:88:72:52:d3:ba:
         ba:17:43:23:41:4b:b1:60:c3:32:7a:29:98:b9:6e:44:af:6b:
         a5:c2:1a:89:d8:a1:2f:e0:93:77:21:ce:14:95:17:65:cf:b8:
         35:19:5f:30:3a:00:72:db:34:91:7d:5d:99:7d:28:f1:32:0b:
         27:82:ff:a0:ec:87:17:4c:fa:05:59:0b:b9:56:37:f0:5b:10:
         83:14:d0:9e:26:2e:ba:85:b7:f9:6b:17:46:58:d6:35:05:76:
         e6:34:ed:b3:a9:0d:8b:ee:71:75:9c:69:3c:b7:4f:01:08:86:
         34:52:84:03:9b:88:f9:de:8d:ac:b9:7f:b5:e8:97:da:bd:c0:
         4f:0c:46:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:34:45 2026 by rpki-client