Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
File:                     m3pi514OySux3vHhlV90n_1FUHI.mft (raw, json)
Hash identifier:          FZguFPHzzB55yrJw0nzSUL5iYMVehbo4AciKyzX7CJA=
Subject key identifier:   84:2E:29:D3:0E:F8:E4:91:4E:56:C3:08:D0:96:C1:41:25:68:D7:0C
Authority key identifier: 9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72
Certificate issuer:       /CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
Certificate serial:       01A13CDC11FDFABC11D5D3B88653AB5F6767
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
Manifest number:          10A5
Signing time:             Thu 15 Oct 2026 00:00:17 +0000
Manifest this update:     Thu 15 Oct 2026 00:00:17 +0000
Manifest next update:     Fri 16 Oct 2026 00:00:17 +0000
Files and hashes:         1: D4KKAq0ahmeZ20BwgX9kW7RnziE.roa (hash: ZoGSRKDSzROcjYhMYpND74w5OQoC/iSALsUjVAn5Y+U=)
                          2: m3pi514OySux3vHhlV90n_1FUHI.crl (hash: oZnIEUuc7EJVzManrmgOxYVwNSZIOX+V8+aNiq8SMEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:dc:11:fd:fa:bc:11:d5:d3:b8:86:53:ab:5f:67:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7a62e75e0ec92bb1def1e1955f749ffd455072
        Validity
            Not Before: Oct 15 00:00:17 2026 GMT
            Not After : Oct 16 00:00:17 2026 GMT
        Subject: CN=842e29d30ef8e4914e56c308d096c1412568d70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:98:c3:90:e6:ca:f3:dc:14:6c:2e:34:8c:f0:
                    fe:b0:67:8b:70:5b:6c:a2:f7:0e:8b:17:cf:03:ed:
                    ec:5e:70:fd:5a:e5:c3:ff:86:4a:d6:bf:01:9e:42:
                    fd:20:62:fb:80:d8:7c:61:99:91:b5:0e:2f:60:b5:
                    90:56:bb:06:77:fa:4f:a0:91:e6:94:2d:a0:17:c0:
                    e8:39:79:2a:33:72:fe:df:7d:d5:82:2a:4e:81:5f:
                    10:26:93:a5:04:e9:bd:e9:43:9d:12:55:b8:77:d1:
                    1a:2b:4a:fa:e2:ad:6c:bf:8e:52:a8:f8:86:b9:30:
                    49:72:3f:57:5d:53:e2:ea:24:5a:ff:55:1a:1a:ce:
                    0b:40:ba:38:c2:e5:ad:24:2b:db:79:42:84:8f:14:
                    f9:1a:bb:2a:7b:5d:4c:6c:f9:f8:81:6d:e9:44:79:
                    dc:c1:a5:63:7c:f3:a6:d1:81:dc:6f:f9:9c:d1:46:
                    0e:d6:3f:5d:a1:f8:60:2e:c7:ba:25:2d:9e:55:b9:
                    90:b2:09:50:f8:22:70:89:7c:97:bd:c4:b5:af:01:
                    dc:49:ed:44:6a:66:c3:96:76:2e:44:90:bc:e0:b4:
                    1b:3d:4b:03:49:7f:01:0d:5c:8f:24:d9:ce:90:78:
                    80:5e:bc:b9:f2:db:e8:e7:5f:ba:a8:9c:45:a2:06:
                    12:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2E:29:D3:0E:F8:E4:91:4E:56:C3:08:D0:96:C1:41:25:68:D7:0C
            X509v3 Authority Key Identifier:
                keyid:9B:7A:62:E7:5E:0E:C9:2B:B1:DE:F1:E1:95:5F:74:9F:FD:45:50:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3pi514OySux3vHhlV90n_1FUHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/be1cc1-8286-44f7-98a2-020fc6813121/1/m3pi514OySux3vHhlV90n_1FUHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:3e:57:f3:ad:ea:6f:a8:63:5e:0b:0e:31:93:79:23:5e:0f:
         f3:94:f6:9d:1e:17:69:e6:18:d5:ff:3e:e9:e6:79:7d:25:3a:
         67:7c:f2:91:99:a9:60:98:6b:5c:72:0a:ca:1a:34:17:12:d2:
         74:75:da:76:5f:7c:8c:6a:4d:de:ef:f1:d9:bf:8e:63:ab:57:
         9d:df:e4:96:08:dd:d2:21:cc:59:8e:ac:30:6f:15:88:4f:69:
         08:9a:f4:05:18:d1:4a:80:51:8c:6f:2e:3d:00:5a:c6:fc:47:
         4b:21:f0:91:a7:68:b7:b8:63:2c:a5:19:45:8e:50:36:3b:82:
         61:09:01:b0:d3:ed:46:6d:45:d6:41:a1:40:a0:93:97:0b:77:
         4f:9c:f3:be:3d:e4:14:7a:aa:79:7a:e1:b2:cf:96:15:49:f3:
         35:49:f6:cf:f6:6d:33:66:e7:f8:79:c9:b2:64:01:ca:e3:d0:
         86:13:6e:ff:6f:15:f4:6a:fe:86:5e:8d:6c:72:56:dd:ec:c2:
         1d:dd:0f:4c:9e:c3:a8:23:b7:87:22:21:84:33:a8:b7:ca:0c:
         fe:ed:02:2f:9e:0f:81:52:c1:0b:41:9e:23:34:81:95:63:ea:
         b2:5f:2c:f1:99:36:fd:4d:5c:7f:4b:69:a7:65:7c:b5:e1:7b:
         e9:ae:bd:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:58:57 2026 by rpki-client