Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
File:                     3wuk9W5vA3clKGA3r8PBTCk7m4I.mft (raw, json)
Hash identifier:          owL+y9H+xdK40UN6mtSYFE770L8KR8ojsa5Fa4OE1y0=
Subject key identifier:   B3:68:C4:2C:F5:EF:51:CE:96:36:D4:2C:69:55:1E:92:1F:66:7D:9F
Authority key identifier: DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82
Certificate issuer:       /CN=df0ba4f56e6f037725286037afc3c14c293b9b82
Certificate serial:       01A10693AB8C7D64EF6C8FD51FB006AEA632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
Manifest number:          1A8E
Signing time:             Sun 04 Oct 2026 11:01:43 +0000
Manifest this update:     Sun 04 Oct 2026 11:01:43 +0000
Manifest next update:     Mon 05 Oct 2026 11:01:43 +0000
Files and hashes:         1: 3wuk9W5vA3clKGA3r8PBTCk7m4I.crl (hash: 6/iSqgYAGLqSlI8mv/9jHuSWv9FoAV9y9etZXh4CBqg=)
                          2: BMMff36mDnqefE-fi1QYcDeaUEk.roa (hash: Yky2cFQCYWcMLt5A2AE8QdQ1eB3p9PDevvqazUFMfX4=)
                          3: c1k5DpW670XTtOlEvTkIz9kZXlc.roa (hash: Y49a9m/TdUFutVOSA2rIEcmP18u8ki2BwGqjBT3Sy90=)
                          4: ncKH1YpuJk5-uciMg32syOz5Dh0.roa (hash: 8NVQeOlGQC5ZiQGFRi3sIRfLjXwS5UuTrVhAQo79EFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:06:93:ab:8c:7d:64:ef:6c:8f:d5:1f:b0:06:ae:a6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df0ba4f56e6f037725286037afc3c14c293b9b82
        Validity
            Not Before: Oct  4 11:01:43 2026 GMT
            Not After : Oct  5 11:01:43 2026 GMT
        Subject: CN=b368c42cf5ef51ce9636d42c69551e921f667d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:cc:b5:58:c5:ad:32:b3:77:85:95:4e:cf:85:
                    b1:e0:b9:9b:a5:ac:56:09:ba:42:0a:3f:2e:fc:c1:
                    3e:a4:9e:96:d4:4b:d7:ae:d0:ae:f2:51:8a:da:ad:
                    d3:66:e6:0a:da:a7:ec:cb:dd:c8:ce:f3:1f:d3:fc:
                    42:59:d4:5d:0b:56:77:57:8a:67:c6:b2:ef:74:30:
                    41:24:5a:a6:fb:30:ad:a4:5b:7f:1d:4f:f6:04:53:
                    11:7d:94:0e:80:75:c4:0c:69:a4:b6:4e:93:a2:26:
                    1d:c0:fa:37:7a:df:40:fb:83:b8:27:a4:70:be:bc:
                    53:61:02:a7:09:98:75:8a:16:b1:fc:ee:69:5c:1f:
                    f1:9f:61:71:40:47:d2:14:e5:7c:81:f7:e5:d8:bf:
                    fb:c5:74:1c:56:87:2a:7f:ec:9d:b8:d3:76:1c:b5:
                    9e:4d:a9:10:4e:cf:69:2f:95:76:fb:9a:56:7f:a1:
                    8b:b0:7d:6f:9c:af:3d:f8:c2:73:b8:6a:7f:92:ea:
                    cc:12:cd:f5:3e:af:05:c6:e8:19:03:1d:ce:53:b7:
                    50:d4:38:f7:92:fc:b8:63:d8:d0:a5:f8:d6:13:cb:
                    5d:6d:d6:17:be:5d:2e:ad:8e:94:90:90:21:25:73:
                    a7:1e:d9:46:10:28:a1:e9:e4:aa:0f:ff:e1:65:97:
                    49:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:68:C4:2C:F5:EF:51:CE:96:36:D4:2C:69:55:1E:92:1F:66:7D:9F
            X509v3 Authority Key Identifier:
                keyid:DF:0B:A4:F5:6E:6F:03:77:25:28:60:37:AF:C3:C1:4C:29:3B:9B:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3wuk9W5vA3clKGA3r8PBTCk7m4I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/a80bd9-ba11-458e-84e2-36c678900f79/1/3wuk9W5vA3clKGA3r8PBTCk7m4I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:3f:44:a1:10:1e:7b:bb:b5:9f:29:a2:1e:49:ce:41:91:21:
         3b:02:b1:5f:21:ca:10:97:29:4b:88:9b:f2:42:c1:b4:47:e6:
         e4:95:0e:aa:a9:ab:4a:e4:b4:61:5c:ee:03:b7:66:47:c7:2f:
         af:18:37:1c:1d:5d:2d:51:9f:e0:89:8c:0c:e0:6e:df:b6:36:
         f8:72:d3:cb:bd:cd:bf:4e:c1:73:c4:7c:d1:a3:89:20:6a:dd:
         48:6b:99:4d:0e:66:31:31:07:84:b6:d9:01:24:70:c8:22:51:
         c0:90:a4:8c:d1:a5:da:75:84:fa:f5:f3:b3:76:88:37:88:22:
         6b:5e:20:67:b6:21:a9:41:5c:c9:9d:e0:2e:d7:65:b4:96:0c:
         27:1a:a5:73:a8:6e:c2:c3:f3:9b:f9:be:46:6b:87:de:3d:07:
         78:97:cc:5f:1c:6d:47:b5:e6:d6:81:67:15:1f:43:6e:e4:14:
         0e:9f:74:d0:32:61:d7:f1:4f:d0:81:38:aa:92:20:60:9a:93:
         22:f5:f6:a6:72:f6:46:61:be:95:06:d7:5c:8d:d2:e9:25:f9:
         ee:94:a2:f3:a0:e2:f8:1b:78:88:74:4a:d6:4e:d0:18:ce:32:
         85:05:e2:0d:38:cb:4a:eb:9b:8e:26:21:60:75:fc:3b:bd:bc:
         86:77:50:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 16:57:35 2026 by rpki-client