Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
File:                     _tf4F9fm3tVu3txESIzUHAUqDcU.mft (raw, json)
Hash identifier:          rk/KegZq0RqVlxppNAQDAWHUJpQaB1WXU9WDU7jZiiQ=
Subject key identifier:   EF:83:06:53:C9:98:EB:DC:C2:DF:B1:8B:1B:57:0F:E5:3E:A3:23:E2
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Certificate issuer:       /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial:       01A14A2A83A8CAB407BE1D4D98C7D3AEC3F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
Manifest number:          1A3B
Signing time:             Sat 17 Oct 2026 14:01:02 +0000
Manifest this update:     Sat 17 Oct 2026 14:01:02 +0000
Manifest next update:     Sun 18 Oct 2026 14:01:02 +0000
Files and hashes:         1: _tf4F9fm3tVu3txESIzUHAUqDcU.crl (hash: ZYQJwzPpCxeTY1N5//in4JJiLvUzQAnwualfbwMmxAQ=)
                          2: ebTSPPyg-VVW95sh4YIFTx9KFNM.roa (hash: fvczqgkgOmhs5e7zYAZCGPaXspjsXrHeEw67/C/U03I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 14:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4a:2a:83:a8:ca:b4:07:be:1d:4d:98:c7:d3:ae:c3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
        Validity
            Not Before: Oct 17 14:01:02 2026 GMT
            Not After : Oct 18 14:01:02 2026 GMT
        Subject: CN=ef830653c998ebdcc2dfb18b1b570fe53ea323e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:83:b2:c8:1e:7d:0d:82:03:e1:13:9e:e6:cb:
                    87:04:4c:7e:69:35:7c:b1:48:4b:18:8d:65:9a:de:
                    81:d1:7f:27:1c:98:84:d0:66:6e:09:6d:17:84:f9:
                    50:2e:48:3b:48:12:71:5f:01:a3:2a:41:bc:5a:48:
                    6f:38:cb:54:31:bd:8d:f3:de:fb:fa:3a:2c:7b:b3:
                    b0:5a:3a:7a:bc:80:fd:53:df:9c:7a:15:84:42:28:
                    df:95:4f:7b:51:8d:18:c3:d3:43:30:a1:bb:60:50:
                    14:65:53:61:a1:2a:83:68:1a:ce:82:97:65:35:8e:
                    60:6a:31:c1:59:e0:c7:70:d0:90:88:ab:19:ed:35:
                    b9:bc:f1:61:ba:7c:c8:62:5b:33:95:1e:b9:8a:87:
                    d5:91:c8:2b:e7:86:48:c0:5a:b9:2a:38:45:fc:e5:
                    57:3c:27:2b:59:ad:40:36:c4:82:68:46:44:1a:4b:
                    15:15:b9:8f:ca:fc:f4:d8:d4:bf:c7:6e:0f:f6:6b:
                    87:48:d6:85:2c:dd:12:da:05:bb:61:11:ca:61:15:
                    33:73:37:99:90:a5:f6:36:9d:c5:6f:65:c9:a2:66:
                    31:31:f7:ab:51:c7:bd:f1:bc:fa:a0:3d:7f:46:7c:
                    f9:20:50:7e:e8:12:e0:45:3a:c9:0b:30:a4:5e:5a:
                    5a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:83:06:53:C9:98:EB:DC:C2:DF:B1:8B:1B:57:0F:E5:3E:A3:23:E2
            X509v3 Authority Key Identifier:
                keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:96:75:81:56:49:62:ab:0c:71:78:82:eb:44:7b:6e:77:56:
         46:ba:6d:9c:ff:e4:af:09:25:b6:62:b7:8e:c9:ad:5c:11:d2:
         fc:9f:5a:65:cc:67:af:d4:05:44:dd:34:ae:05:11:c7:e4:2c:
         71:13:fc:fa:a7:87:78:3a:ed:7a:a1:29:21:ee:8e:1e:4c:98:
         48:5a:04:3d:29:2f:32:e0:09:75:76:31:47:27:ee:97:ae:ce:
         48:ce:94:e0:da:c2:62:6a:71:76:31:a0:d5:34:e8:54:ab:c8:
         b6:75:09:93:c7:8f:26:31:87:7f:46:b2:ff:98:37:da:55:26:
         76:be:55:bb:d1:de:10:81:54:d0:b7:7c:a7:5e:7f:71:84:23:
         4b:28:3f:68:be:8e:7b:83:b3:05:5d:42:e8:95:4d:39:c2:a0:
         08:d0:2d:25:24:26:05:80:af:41:b3:f6:59:df:20:30:28:18:
         5a:63:29:79:63:17:f8:0c:ae:75:bc:3b:ae:03:c5:97:c5:49:
         fd:5c:2a:82:d8:ba:f3:e7:31:f3:c1:f7:a5:c4:2a:90:8d:b7:
         a1:c7:57:5e:cc:cc:20:c4:93:5c:a0:30:12:46:e6:a5:3a:33:
         44:64:b0:4c:34:d5:a3:38:6f:aa:39:ec:3f:63:20:c6:d4:a9:
         ee:3e:f9:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 19:27:49 2026 by rpki-client