Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
File:                     3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft (raw, json)
Hash identifier:          AyVibusU2D5xCCl5Q8+bm0kfftgoYaP0znvx7lBO8Lo=
Subject key identifier:   E1:0B:3D:51:DF:1D:F8:A6:31:74:BB:B1:85:B8:5D:DE:CE:C8:11:64
Authority key identifier: DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D
Certificate issuer:       /CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
Certificate serial:       01A13DEF4E889E2AD46C090C66F66023EBCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
Manifest number:          1AA5
Signing time:             Thu 15 Oct 2026 05:00:55 +0000
Manifest this update:     Thu 15 Oct 2026 05:00:55 +0000
Manifest next update:     Fri 16 Oct 2026 05:00:55 +0000
Files and hashes:         1: 3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl (hash: r7oBXSApXVMW0ZymxAeAV29UzjnK/kGHVYKaTQ2PZqw=)
                          2: mgzdOFd8B2ya1Xohy6YCT8xW7b0.roa (hash: /7uRJWT90D6J/lwYKLHfljOz+L9OgupUQYidcbYQ5rU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:ef:4e:88:9e:2a:d4:6c:09:0c:66:f6:60:23:eb:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddd5708f429adadba1b4a38c94dd77654afaf97d
        Validity
            Not Before: Oct 15 05:00:55 2026 GMT
            Not After : Oct 16 05:00:55 2026 GMT
        Subject: CN=e10b3d51df1df8a63174bbb185b85ddecec81164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:25:73:1c:d7:21:1e:e4:f5:9c:fd:16:3a:a3:
                    32:d1:6f:1c:dd:e0:34:ab:4f:75:dd:41:a3:d3:b9:
                    1a:f4:54:e6:41:6d:a3:9a:6f:37:57:96:bf:de:25:
                    1a:6e:7e:85:96:f0:3a:13:03:6b:50:5d:47:88:9f:
                    6d:45:25:33:73:3c:d0:f6:78:74:c8:f2:ad:41:86:
                    44:dd:82:3e:09:bb:f9:b5:e1:70:90:ff:d1:ac:5b:
                    06:b7:e7:d8:84:d7:81:ac:ce:dc:23:e0:6e:ec:e4:
                    1f:b7:66:b6:d6:59:a3:28:77:c9:60:ee:0a:77:79:
                    8f:42:f0:89:39:85:bc:a5:43:e5:5f:5d:15:8c:91:
                    1f:4f:68:5f:0f:8f:ee:f4:b5:87:a2:49:d4:c9:51:
                    8f:32:ac:03:e2:06:9f:30:d2:03:2d:bd:1b:2a:1e:
                    de:5d:7a:cb:e3:9a:d9:ba:c5:b4:59:fa:58:c4:20:
                    9b:7b:f2:89:d5:a1:02:e1:7a:b8:44:8f:ad:1d:7b:
                    93:96:8c:0f:0c:20:d3:5b:06:7e:52:c7:fa:53:05:
                    c2:1d:a2:c6:72:9f:32:c3:52:76:3c:96:a6:3c:b7:
                    4b:2e:76:12:85:49:1d:be:e3:80:5c:88:f2:79:72:
                    d7:96:6c:b7:6d:8a:8d:8b:cb:ec:0d:6f:4b:9a:7d:
                    f8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0B:3D:51:DF:1D:F8:A6:31:74:BB:B1:85:B8:5D:DE:CE:C8:11:64
            X509v3 Authority Key Identifier:
                keyid:DD:D5:70:8F:42:9A:DA:DB:A1:B4:A3:8C:94:DD:77:65:4A:FA:F9:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d794a3-f3ae-4fbe-98ea-20e1c3e3f8e2/1/3dVwj0Ka2tuhtKOMlN13ZUr6-X0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:3b:e0:47:f2:2a:10:74:af:03:24:ce:1c:6c:5c:ad:04:c7:
         48:55:6a:3d:98:40:f1:a1:82:68:e2:db:e0:00:5c:c7:08:9a:
         82:30:52:20:d3:c6:16:58:0f:0f:6c:13:35:08:f4:ac:02:77:
         ad:ee:31:aa:9b:f7:26:3a:9d:12:b5:ff:59:e0:ed:03:c8:b6:
         a5:3e:44:44:db:4e:5c:05:03:81:8f:e7:75:92:cb:62:2f:2a:
         5f:9a:ef:8a:ce:d8:39:63:3c:55:85:72:e7:e0:2a:ba:7d:81:
         ed:8f:07:94:ab:18:42:c0:c1:88:1c:15:c8:60:16:ae:fd:4a:
         9b:6e:a7:56:1c:28:93:a2:c6:80:78:24:1c:99:14:00:db:bc:
         a7:a9:38:76:82:48:f7:fc:6b:63:17:26:0f:eb:75:bd:3c:0f:
         e9:6e:d8:84:de:48:95:db:c9:88:bd:12:de:e3:0a:83:38:3d:
         b8:e6:8c:e8:3b:4d:42:cc:ad:5a:91:6b:12:84:d9:36:eb:ef:
         c3:70:00:52:0d:a4:d0:6f:bf:29:ef:71:ba:b1:1d:d5:96:eb:
         34:b0:1e:f5:c4:7d:84:10:b5:f2:7f:1f:cd:7c:05:4b:a4:c5:
         86:0d:2b:d6:da:b6:50:d5:13:0d:6f:78:19:1e:aa:a9:8d:c8:
         cb:4c:7e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:21:00 2026 by rpki-client