Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
File:                     10L6T7KPryihjordTBDJYzfDxMU.mft (raw, json)
Hash identifier:          QCLaw60dPSSd9P9PkfKZEHtm92RJu7L+puY6joCla1s=
Subject key identifier:   7D:B2:C7:B3:D0:C2:64:46:32:32:44:D9:5E:68:24:BD:60:CF:AE:E0
Authority key identifier: D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5
Certificate issuer:       /CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
Certificate serial:       01A13DB8B4BAACDD95F6BED5B519E1213DD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
Manifest number:          1AA3
Signing time:             Thu 15 Oct 2026 04:01:17 +0000
Manifest this update:     Thu 15 Oct 2026 04:01:17 +0000
Manifest next update:     Fri 16 Oct 2026 04:01:17 +0000
Files and hashes:         1: 10L6T7KPryihjordTBDJYzfDxMU.crl (hash: /3FrXJFNySkjvYjqM0V2ASm8QLDAocX9Fq3g21dL9MI=)
                          2: 3bAp3q_3awus_cxtdm3xlCp_Kro.roa (hash: MeFCYRnaLN9vGZ2yrhZuS6ZkusuOmCKGC/cofWy68Cw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 04:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:b8:b4:ba:ac:dd:95:f6:be:d5:b5:19:e1:21:3d:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d742fa4fb28faf28a18e8add4c10c96337c3c4c5
        Validity
            Not Before: Oct 15 04:01:17 2026 GMT
            Not After : Oct 16 04:01:17 2026 GMT
        Subject: CN=7db2c7b3d0c26446323244d95e6824bd60cfaee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dd:de:63:82:ae:56:3d:96:12:b5:a9:03:78:
                    dd:f9:b1:74:57:a0:c5:ce:bb:6a:6f:54:69:10:e2:
                    54:c0:50:0c:66:22:3b:1a:0d:e2:08:ef:82:a7:7b:
                    b5:fa:0a:25:46:f9:15:cb:a9:6f:b7:c3:e9:e0:5f:
                    ad:cd:eb:60:7b:62:ab:fa:03:f7:49:4f:dc:f1:a2:
                    7c:b4:8f:be:94:b3:9c:89:ea:80:c8:e9:69:53:a1:
                    6a:9e:1c:fa:37:8f:2c:e1:06:f1:41:e2:be:d2:d8:
                    de:c6:61:7f:02:e6:d9:e8:b9:62:93:d3:2a:24:21:
                    8b:20:b2:90:61:0f:38:b4:a7:9e:af:7c:f7:0e:d1:
                    55:06:77:23:30:3e:a4:da:ac:ae:56:1f:26:81:df:
                    e3:52:33:79:dc:52:18:3f:c8:0c:e0:c6:a6:85:50:
                    a5:25:3e:a2:d3:48:5b:b5:2b:44:ec:66:69:64:bb:
                    7f:ec:8d:c3:79:70:02:ce:e3:c7:f9:01:f5:f9:1f:
                    44:26:f8:0c:ad:a5:9d:71:ed:9a:9d:6e:8f:a8:f1:
                    51:94:5e:cd:4a:51:f5:0b:4d:68:15:0a:d2:46:67:
                    72:da:49:d2:2b:25:c7:01:f6:61:0e:b1:eb:b3:9e:
                    4b:d5:9a:f6:49:c3:cf:bc:e4:7f:a5:ca:c3:95:84:
                    52:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B2:C7:B3:D0:C2:64:46:32:32:44:D9:5E:68:24:BD:60:CF:AE:E0
            X509v3 Authority Key Identifier:
                keyid:D7:42:FA:4F:B2:8F:AF:28:A1:8E:8A:DD:4C:10:C9:63:37:C3:C4:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10L6T7KPryihjordTBDJYzfDxMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/703bd6-1b2f-4083-b1e7-7a5f60189c51/1/10L6T7KPryihjordTBDJYzfDxMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:87:a3:e9:a1:1b:ac:18:64:2f:fa:7d:32:45:cb:5b:b4:b8:
         68:93:3e:95:f5:e6:3b:90:b4:21:26:f8:27:73:61:ae:88:53:
         05:21:8b:d4:51:f0:78:ca:d5:61:cb:39:44:98:46:b9:fd:7c:
         6d:ce:fd:a3:81:25:e2:27:6c:b0:79:35:aa:6f:d2:fe:e4:1a:
         4b:01:3a:b4:da:0b:14:71:85:63:09:98:d0:be:1f:40:34:59:
         9e:79:2e:4e:78:71:df:9e:3c:5d:bc:6f:4c:25:01:95:b1:b9:
         68:93:b0:74:61:75:0e:a2:57:34:56:1d:7a:bb:cb:d7:78:1c:
         73:50:a5:2f:71:09:de:a8:9c:41:f7:81:5b:14:f2:87:83:5f:
         fc:ed:01:63:9b:85:14:1d:33:22:f7:b3:34:3a:77:9b:54:18:
         8d:1b:b6:e4:10:3c:ac:96:b7:4b:58:b0:d8:34:e4:ff:cd:06:
         e7:53:bf:a3:fc:a8:d2:70:25:31:34:ee:84:57:67:8f:2c:e1:
         71:89:f6:82:82:21:1c:35:23:34:c8:1d:20:b2:2e:0d:a2:5c:
         a1:06:aa:d6:b2:b4:e9:ce:e8:75:ed:42:e7:b3:58:33:05:82:
         90:66:91:b1:cd:da:d8:3b:cc:f9:9a:88:e8:64:c9:eb:c4:cd:
         fc:81:d7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:19:49 2026 by rpki-client