Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
File:                     sEsc31Bs5emTfnf4Jj7PbdslWwU.mft (raw, json)
Hash identifier:          BjCRxqeG2QdKimzPrUMtktKG9dGWiHdbMiKwmCZRXK0=
Subject key identifier:   11:FC:A9:7D:7E:09:2F:4F:E2:AC:75:A5:20:97:E3:E1:1D:EA:C0:36
Authority key identifier: B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05
Certificate issuer:       /CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
Certificate serial:       01A12B7B430FFB9714B222FE4847C4C46342
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
Manifest number:          18F7
Signing time:             Sun 11 Oct 2026 15:01:00 +0000
Manifest this update:     Sun 11 Oct 2026 15:01:00 +0000
Manifest next update:     Mon 12 Oct 2026 15:01:00 +0000
Files and hashes:         1: cQEbH0ReeL9KuFjUuYtxv0LNUA8.roa (hash: P6+BrvlEZ0ARWwChG27uoTYHL5ICmgRnw4a5c1gKOxk=)
                          2: sEsc31Bs5emTfnf4Jj7PbdslWwU.crl (hash: rBtSA4f4B22A7QnMORlBQtpM3d3ZrrAVfCYOjNPfEaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 15:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:7b:43:0f:fb:97:14:b2:22:fe:48:47:c4:c4:63:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b04b1cdf506ce5e9937e77f8263ecf6ddb255b05
        Validity
            Not Before: Oct 11 15:01:00 2026 GMT
            Not After : Oct 12 15:01:00 2026 GMT
        Subject: CN=11fca97d7e092f4fe2ac75a52097e3e11deac036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e2:6b:d6:e7:cc:44:79:cf:b1:1d:53:5e:3c:
                    77:ff:e0:d2:8b:4a:14:40:ff:11:16:24:23:18:3a:
                    5f:36:bb:59:40:81:50:36:e0:17:92:4d:02:d2:59:
                    a3:e8:28:a7:d0:ff:60:8e:f6:bd:e3:f8:22:37:a0:
                    bc:9f:f9:45:c1:8c:a2:f5:35:66:81:9e:ef:65:b8:
                    79:d9:a9:f9:3b:ba:83:9c:75:06:f3:b3:60:36:61:
                    16:03:fb:c7:f6:3a:6f:a4:b9:44:ae:6e:4a:64:cd:
                    71:10:e7:3e:1f:99:9a:98:da:96:67:c4:7f:26:15:
                    60:51:b4:a6:58:46:f5:4d:47:81:33:1e:4e:50:03:
                    1d:4e:a6:a9:ca:c4:52:eb:68:d5:5f:0a:33:2c:0a:
                    94:51:da:60:b6:9f:d9:60:55:09:a7:fd:e5:2b:db:
                    74:77:21:e3:0a:06:df:b7:d3:65:24:ef:f5:dc:89:
                    4a:ad:04:c7:a6:d3:f2:eb:14:1e:aa:0b:03:c3:92:
                    42:ed:c9:87:00:3a:f2:84:39:31:2e:ee:e3:2a:4c:
                    fe:34:db:57:52:0c:48:b8:b3:e1:4f:df:2e:f5:46:
                    be:17:d5:23:fb:05:c3:7a:62:ae:1c:08:9f:29:5b:
                    09:f3:2b:8a:3e:cf:32:0c:0c:3f:f9:cb:d5:ba:3d:
                    b0:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FC:A9:7D:7E:09:2F:4F:E2:AC:75:A5:20:97:E3:E1:1D:EA:C0:36
            X509v3 Authority Key Identifier:
                keyid:B0:4B:1C:DF:50:6C:E5:E9:93:7E:77:F8:26:3E:CF:6D:DB:25:5B:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sEsc31Bs5emTfnf4Jj7PbdslWwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/839b34-3529-438b-87d0-ce5019264895/1/sEsc31Bs5emTfnf4Jj7PbdslWwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:58:14:92:4e:07:d9:cd:28:a3:dd:38:71:b1:d5:e1:a3:b2:
         9f:bd:04:9b:83:c7:d4:75:37:33:d8:17:06:49:f0:d8:ad:31:
         ca:0b:74:61:d0:60:0d:53:d2:8d:c3:57:4e:0e:ea:ce:66:9e:
         d6:79:8a:5d:1b:0a:20:b8:88:8f:37:7c:ff:ae:a3:72:b8:8d:
         a7:2a:5d:49:c5:9c:3b:10:c6:28:43:9f:23:ae:85:30:c8:89:
         49:82:c7:df:24:5c:fe:69:03:9a:2e:73:82:63:56:1a:e4:bf:
         1f:53:13:08:6e:66:40:24:d1:70:2b:37:51:12:68:42:34:cf:
         f8:08:88:a5:6e:cd:9e:bc:0b:2d:f0:ac:39:f8:ee:89:07:ad:
         92:96:a6:c8:69:a2:97:30:0f:e7:13:95:fe:4d:e1:f7:d8:b2:
         02:52:05:ad:96:98:bc:0d:f6:c2:26:9c:54:f9:01:cf:a8:a3:
         10:b4:31:fd:87:8a:dc:c9:48:81:dd:e2:9e:e6:c2:53:53:02:
         21:35:17:6c:ab:cc:ba:9b:04:41:62:e9:a3:e5:42:43:3c:c7:
         4e:34:fd:0a:5b:a6:bb:95:7c:b7:13:58:03:e4:31:b8:0b:d9:
         4c:67:08:bb:cf:07:fa:0e:29:ef:5c:d6:a6:cc:c9:56:ce:1b:
         80:25:73:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:08:58 2026 by rpki-client