Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File:                     Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier:          lU8K5lT+GTJFxSKa+1Vy/YJlVrzZXGHxN5O6/nDrpCg=
Subject key identifier:   6D:8F:CF:90:C3:75:40:FB:46:2A:EF:0E:6F:4A:2A:42:BC:DA:D1:A6
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer:       /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial:       01A11C07FCD07D9D392A6063ACE541C0DD53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number:          09C7
Signing time:             Thu 08 Oct 2026 15:00:47 +0000
Manifest this update:     Thu 08 Oct 2026 15:00:47 +0000
Manifest next update:     Fri 09 Oct 2026 15:00:47 +0000
Files and hashes:         1: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: j0/1CL1+VbYEBbn8Ta3VzRshl67oAH/mkEH9M4t9HcI=)
                          2: zWU-Qy4G8iGTz8MTeqz8dHClz-s.roa (hash: 8KOZgKpI/1oW0YXilP2w8pzWvf8E4JdNQvX0Tq7OYNE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 14:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1c:07:fc:d0:7d:9d:39:2a:60:63:ac:e5:41:c0:dd:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
        Validity
            Not Before: Oct  8 15:00:47 2026 GMT
            Not After : Oct  9 15:00:47 2026 GMT
        Subject: CN=6d8fcf90c37540fb462aef0e6f4a2a42bcdad1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:2f:eb:1f:bf:c2:e2:df:19:1b:90:a7:74:3d:
                    d4:2c:89:11:0a:d4:81:c4:9f:8f:ba:19:0f:ca:f5:
                    99:ba:28:21:35:02:f1:61:2e:4b:b1:9d:7e:4b:c7:
                    19:59:51:01:4b:fa:87:d4:56:8f:71:ad:df:2e:a9:
                    44:83:d8:af:2e:f7:95:f6:a4:09:72:a8:9c:21:fc:
                    91:4b:ac:98:9f:7a:96:e3:b4:b6:7a:d0:31:76:90:
                    45:7e:5e:01:e7:7a:03:ad:22:9a:6f:73:86:5e:b0:
                    4c:49:67:d5:79:da:24:14:eb:a9:2f:ac:0b:d4:de:
                    80:a1:38:b3:4e:c7:0a:96:e0:4b:81:25:e2:41:ad:
                    e2:a9:da:e7:a4:6e:31:3b:3a:f1:70:b6:70:da:43:
                    46:ec:9e:f3:aa:21:7b:1b:5d:05:c7:b7:1f:39:64:
                    fc:1f:48:72:0f:17:0e:a1:f5:c3:8a:0b:15:e0:8c:
                    b6:50:e7:18:5f:8b:0a:5d:62:cf:a0:ac:f4:c9:75:
                    0d:7e:af:38:ca:c6:56:84:62:cb:4b:76:3b:fe:66:
                    68:88:1b:77:f0:92:a2:d1:ce:bd:35:0e:ae:b7:af:
                    07:d5:a5:59:4e:92:dd:56:da:fb:d9:a4:86:ae:41:
                    49:ca:0d:b3:29:88:e6:e8:26:cb:28:5c:d2:52:0b:
                    ad:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8F:CF:90:C3:75:40:FB:46:2A:EF:0E:6F:4A:2A:42:BC:DA:D1:A6
            X509v3 Authority Key Identifier:
                keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:77:1d:a1:0e:39:82:f9:b3:12:4d:17:37:6f:af:24:58:da:
         c5:e0:51:61:81:26:7f:3d:02:4b:cf:e8:2f:aa:ad:ec:cd:7b:
         02:f3:c3:4b:11:b7:3a:60:cc:56:f3:a4:1e:19:57:ea:f2:1f:
         7f:86:a7:cf:b2:84:dd:eb:7c:7f:6e:ef:cf:1e:4d:bf:df:c4:
         0f:9b:43:ee:64:1d:c6:38:34:29:40:e9:39:0b:00:8f:65:52:
         8d:c8:08:f5:c9:33:8c:e9:00:e0:91:51:12:fc:7c:1e:43:b5:
         2e:f5:e3:d3:8c:c4:c2:9d:b4:00:2f:d0:9f:ff:cb:3c:a3:b8:
         d9:08:46:e1:00:f9:56:5b:84:b8:fb:82:38:db:84:bf:4a:2e:
         fb:e1:6c:38:14:ac:df:53:8f:a0:75:f2:c7:c1:62:34:f3:ee:
         be:90:c9:75:43:6c:ba:b8:9b:ec:15:7f:e2:26:38:ea:c2:d9:
         4c:69:02:23:a0:96:42:20:e3:14:52:9b:29:13:65:b5:b1:b8:
         68:15:37:ce:39:eb:fb:93:89:5a:b6:2b:aa:e4:bf:b6:ff:02:
         22:aa:ca:a5:5d:a7:b4:d1:f9:67:92:aa:85:bd:47:a6:38:0c:
         55:07:03:0c:bf:31:53:a6:64:d9:2e:87:2e:53:d3:87:19:3d:
         f7:32:eb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:31:47 2026 by rpki-client