Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
File:                     mBPi9jUdO00eYapAFvGyz6YtfN8.mft (raw, json)
Hash identifier:          AdOarZtNaP6H7UEupdMzIb2ZsPcwH3rgrbKDnyv6hBQ=
Subject key identifier:   7A:15:1F:FD:12:21:7E:9C:24:54:59:0A:12:CC:4F:CF:89:C5:0D:78
Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF
Certificate issuer:       /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
Certificate serial:       01A1837520F53D24CC06342B8E6910D5B347
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
Manifest number:          078D
Signing time:             Wed 28 Oct 2026 17:00:53 +0000
Manifest this update:     Wed 28 Oct 2026 17:00:53 +0000
Manifest next update:     Thu 29 Oct 2026 17:00:53 +0000
Files and hashes:         1: NfO8TWIkaxE4DaKwNuYvhzbmi90.roa (hash: 07eBVlhSt2pE8VL0qAd29LqwR9jHDzCkLPkg8sdeyGk=)
                          2: UoWE9x7yjFZiDaO-MudWtt7j5v8.roa (hash: JDYuDSxsb8TqP1khTo+IPnsAnYGiJGphoDEBMwEfni4=)
                          3: WZLWasAJTJL4NuQLzsppN-RJdv4.roa (hash: xh9deKElrPJPAsuDDFcPUr8rOJKxDjEmgaGF1/UzKKY=)
                          4: mBPi9jUdO00eYapAFvGyz6YtfN8.crl (hash: 1HycbI5l6g4tZD6jlzv9H3tkFMXfn2i0S+DAetYmQ7o=)
                          5: xWwqlVqWd0iRwMTuQO8eVNoCWHU.roa (hash: yQKukILLOQx8xluWCSSZQ2VF3E7ijyBr1SeiIVBdBeU=)
                          6: xulzqcYhIs7PWGHWVfL4YmNhVq8.roa (hash: WAG1ujb3pAhI/q7UcuSpjvhOpci45QogtqTPG/JOxEE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 14:14:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:83:75:20:f5:3d:24:cc:06:34:2b:8e:69:10:d5:b3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf
        Validity
            Not Before: Oct 28 17:00:53 2026 GMT
            Not After : Oct 29 17:00:53 2026 GMT
        Subject: CN=7a151ffd12217e9c2454590a12cc4fcf89c50d78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:53:f6:06:8f:97:f0:12:48:d7:7a:e9:1b:4e:
                    62:63:60:95:65:44:f7:26:cf:71:2a:17:86:8e:17:
                    e3:9b:80:4f:8f:3f:49:cc:6b:8f:2c:e3:a8:70:75:
                    89:b1:ba:99:44:c6:5e:36:70:54:5f:7a:2a:ad:b0:
                    63:ac:ed:7e:74:73:ea:5e:c7:b8:54:ad:0f:26:1d:
                    44:f2:2a:49:b1:65:90:d6:c4:7e:23:c5:58:82:95:
                    84:38:5c:c2:fb:36:2e:23:2a:17:63:9d:1e:54:67:
                    34:e7:3e:64:52:fb:64:a2:65:64:6c:01:0e:7b:07:
                    cf:31:e5:07:a5:a8:a9:83:b7:2e:0a:a5:06:32:ae:
                    e6:d1:59:a8:65:14:56:7f:76:84:87:09:a7:b1:35:
                    03:2c:4e:d8:60:24:02:73:9e:7c:55:f7:91:5e:59:
                    d4:8c:0f:68:c5:73:50:82:c7:13:07:ad:ba:c5:bc:
                    f2:df:db:96:21:28:38:8d:ed:52:91:91:9a:a6:54:
                    ad:86:da:62:81:07:b8:78:00:f0:e4:bb:d1:f9:67:
                    e8:f4:c9:93:5a:bd:d7:1c:5c:21:4f:ab:5d:92:44:
                    81:0c:f2:58:cb:6a:11:85:06:1f:d6:9f:43:18:57:
                    bd:c1:dc:c9:a8:27:1b:67:ce:37:eb:5e:c5:66:6c:
                    a9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:15:1F:FD:12:21:7E:9C:24:54:59:0A:12:CC:4F:CF:89:C5:0D:78
            X509v3 Authority Key Identifier:
                keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f0:96:3f:06:d3:6e:b3:ba:73:bf:74:35:c2:98:ed:0c:24:
         57:b1:23:88:7e:56:be:ba:05:fd:42:1e:d6:13:73:38:64:70:
         28:c5:23:b5:74:92:42:b0:5d:c2:16:ef:dc:22:0d:0a:1e:eb:
         65:cf:1a:1a:8d:ac:ae:b7:34:93:8b:9d:11:64:4f:50:28:83:
         67:ff:0e:80:03:03:35:c5:b7:e9:f6:cb:bf:68:70:43:96:92:
         45:d8:8c:9d:24:48:69:db:bc:8b:61:53:e2:9b:f0:04:cf:cd:
         96:c7:66:3b:69:fa:f2:b5:92:dd:ae:58:4a:81:ed:b2:12:05:
         b4:2c:6c:fc:68:36:37:17:f0:62:f8:3f:e1:eb:51:a8:39:c8:
         16:6f:7d:92:1d:b0:d9:34:c4:29:1f:d2:8e:dd:dd:ea:90:20:
         57:31:0b:07:b9:9a:d6:da:41:37:ce:cb:6a:b9:68:d6:a7:7a:
         fe:70:8c:eb:0f:1c:c5:c1:54:b4:65:4f:52:e7:8f:e4:a8:77:
         78:9d:d1:b7:c0:89:ba:8e:2d:24:d6:04:12:6e:89:f8:42:14:
         58:96:af:bf:fe:b0:4e:88:eb:af:ae:31:26:e4:03:57:e8:49:
         f8:d7:79:52:00:d6:9e:06:c7:e9:d4:20:ff:de:81:a6:34:1e:
         4a:78:65:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGDdSD1PSTMBjQrjmkQ1bNHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MTNlMmY2MzUxZDNiNGQxZTYxYWE0MDE2ZjFiMmNmYTYy
ZDdjZGYwHhcNMjYxMDI4MTcwMDUzWhcNMjYxMDI5MTcwMDUzWjAzMTEwLwYDVQQD
Eyg3YTE1MWZmZDEyMjE3ZTljMjQ1NDU5MGExMmNjNGZjZjg5YzUwZDc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVP2Bo+X8BJI13rpG05iY2CVZUT3
Js9xKheGjhfjm4BPjz9JzGuPLOOocHWJsbqZRMZeNnBUX3oqrbBjrO1+dHPqXse4
VK0PJh1E8ipJsWWQ1sR+I8VYgpWEOFzC+zYuIyoXY50eVGc05z5kUvtkomVkbAEO
ewfPMeUHpaipg7cuCqUGMq7m0VmoZRRWf3aEhwmnsTUDLE7YYCQCc558VfeRXlnU
jA9oxXNQgscTB626xbzy39uWISg4je1SkZGaplSthtpigQe4eADw5LvR+Wfo9MmT
Wr3XHFwhT6tdkkSBDPJYy2oRhQYf1p9DGFe9wdzJqCcbZ843617FZmypEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHoVH/0SIX6cJFRZChLMT8+JxQ14MB8GA1UdIwQY
MBaAFJgT4vY1HTtNHmGqQBbxss+mLXzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzIt
Mzk1MTM3OGFhNzY2LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzItMzk1MTM3OGFhNzY2
LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjvCWPwbT
brO6c790NcKY7QwkV7EjiH5WvroF/UIe1hNzOGRwKMUjtXSSQrBdwhbv3CINCh7r
Zc8aGo2srrc0k4udEWRPUCiDZ/8OgAMDNcW36fbLv2hwQ5aSRdiMnSRIadu8i2FT
4pvwBM/NlsdmO2n68rWS3a5YSoHtshIFtCxs/Gg2NxfwYvg/4etRqDnIFm99kh2w
2TTEKR/Sjt3d6pAgVzELB7ma1tpBN87Larlo1qd6/nCM6w8cxcFUtGVPUueP5Kh3
eJ3Rt8CJuo4tJNYEEm6J+EIUWJavv/6wTojrr64xJuQDV+hJ+Nd5UgDWngbH6dQg
/96BpjQeSnhlEQ==
-----END CERTIFICATE-----
Generated at Thu Oct 29 00:41:59 2026 by rpki-client