Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
File:                     _tf4F9fm3tVu3txESIzUHAUqDcU.mft (raw, json)
Hash identifier:          /u0yRGMDDf9qAclbfqID4e6kNcoCQvSbeeR/B5BMIQo=
Subject key identifier:   1D:BE:E5:CF:51:EB:08:72:81:5C:A2:AB:0B:84:5E:26:55:C9:01:F5
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Certificate issuer:       /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial:       01A14C1996B15D81B1DBE314A79EE5A0E0A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
Manifest number:          1A3C
Signing time:             Sat 17 Oct 2026 23:01:47 +0000
Manifest this update:     Sat 17 Oct 2026 23:01:47 +0000
Manifest next update:     Sun 18 Oct 2026 23:01:47 +0000
Files and hashes:         1: _tf4F9fm3tVu3txESIzUHAUqDcU.crl (hash: ekyyrS3uPADbuh1uZyB5MxQ7mkyYy17tp1CzKAte308=)
                          2: ebTSPPyg-VVW95sh4YIFTx9KFNM.roa (hash: fvczqgkgOmhs5e7zYAZCGPaXspjsXrHeEw67/C/U03I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:4c:19:96:b1:5d:81:b1:db:e3:14:a7:9e:e5:a0:e0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
        Validity
            Not Before: Oct 17 23:01:47 2026 GMT
            Not After : Oct 18 23:01:47 2026 GMT
        Subject: CN=1dbee5cf51eb0872815ca2ab0b845e2655c901f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:97:93:a2:e5:79:08:3b:30:74:ef:d1:5d:4a:
                    53:69:b0:ce:89:9c:d6:0b:14:9a:39:6c:08:8e:1d:
                    98:8a:31:c5:ea:6f:c4:bc:36:96:ee:b4:82:05:ed:
                    7a:33:3f:45:88:98:e7:bb:fc:24:04:f7:72:21:55:
                    54:17:90:37:07:b3:95:a2:fe:58:56:f5:f5:49:54:
                    c4:af:7d:cb:3c:35:c1:00:8d:8c:78:df:a7:fb:fb:
                    00:ef:63:42:e2:3e:76:fe:81:94:42:74:30:4e:89:
                    d3:2e:d2:ea:ae:dc:b8:5f:89:2f:fe:bf:da:11:65:
                    76:00:9e:d5:9b:42:7c:ff:f3:4e:0e:68:e6:b0:4c:
                    2e:67:06:13:1b:61:8f:65:66:f0:9b:88:d3:0c:39:
                    e5:fa:31:a8:c0:0c:81:b5:03:ef:fc:bc:ea:5b:90:
                    f4:47:3f:2b:a4:24:b8:1a:70:bd:22:69:48:be:c8:
                    47:71:c3:03:8c:bb:fb:a2:2b:58:b7:5d:b2:2e:5c:
                    18:ce:b4:08:7f:a7:95:00:8d:ab:78:94:28:a9:07:
                    23:09:a0:da:41:76:46:a4:c1:9f:2b:06:a5:32:46:
                    3a:50:69:55:25:03:17:7d:55:03:9e:cf:af:07:8b:
                    22:79:f8:ef:44:44:03:97:cf:17:cd:13:e7:a2:2a:
                    61:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BE:E5:CF:51:EB:08:72:81:5C:A2:AB:0B:84:5E:26:55:C9:01:F5
            X509v3 Authority Key Identifier:
                keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:c9:31:63:f3:35:ad:bb:ba:5a:87:d6:de:83:c7:9e:73:0b:
         7b:df:d1:ec:5e:2e:11:a5:3c:b5:56:e0:df:a6:8c:16:7e:4a:
         bc:c4:94:52:96:7f:54:d4:93:27:67:36:3e:44:de:c5:39:6c:
         68:7c:1a:70:2f:71:0f:59:7b:16:76:af:62:f5:bf:17:66:d4:
         a1:6e:70:d1:02:46:2d:0b:2b:c4:b6:25:48:1e:b8:85:0d:cf:
         12:76:89:cf:77:7f:5a:5c:5a:d9:c6:d8:a4:73:a7:7f:58:a9:
         e6:e7:f1:28:4f:12:9e:34:66:d4:4b:5b:c9:c3:94:b9:c4:ec:
         d9:0b:1b:2f:54:dc:d1:21:94:88:93:c9:8f:ee:f9:5b:f7:ab:
         4a:3a:a0:7c:75:7a:aa:fa:42:2f:0e:36:73:00:89:85:a1:14:
         84:86:1c:61:8c:51:57:2d:ff:ca:9e:a8:47:5b:78:95:a3:49:
         62:44:ed:d3:ff:06:c4:13:ed:fe:f5:2c:92:cd:9d:d9:5d:15:
         dc:8f:3c:fc:9e:46:e8:8c:25:72:15:ad:07:e3:25:22:8e:76:
         a3:47:41:8e:10:fc:95:25:ed:ff:1f:58:d2:80:ef:62:f5:1c:
         4c:88:cb:38:7c:4f:19:09:a7:82:65:2d:a1:32:21:27:7e:d3:
         13:ce:b3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 03:20:23 2026 by rpki-client