Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
File:                     90fq0fqaE1xlBXykEtiTu4LpFCk.mft (raw, json)
Hash identifier:          B8NiuKvuyOwxW1+0wkEk7jTnJbiCIcjbbbAopKrWw3I=
Subject key identifier:   D6:38:9B:90:A9:D6:CF:F5:D9:C2:6C:66:CC:A5:08:E7:F9:D5:97:68
Authority key identifier: F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29
Certificate issuer:       /CN=f747ead1fa9a135c65057ca412d893bb82e91429
Certificate serial:       01A112608648E335FA348958A613E3628976
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
Manifest number:          034B
Signing time:             Tue 06 Oct 2026 18:01:17 +0000
Manifest this update:     Tue 06 Oct 2026 18:01:17 +0000
Manifest next update:     Wed 07 Oct 2026 18:01:17 +0000
Files and hashes:         1: 90fq0fqaE1xlBXykEtiTu4LpFCk.crl (hash: 3M4p8ADsaTEFpTWcavPKYfU6LTD3ecIJWmBsI13wp3g=)
                          2: pQ6OpLF--IiLA278NBvgvoHUl3M.roa (hash: VkzfPnVTMik02z1Xq0NMpSlwyjKpDs0ddq2OYGEMu4o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 18:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:12:60:86:48:e3:35:fa:34:89:58:a6:13:e3:62:89:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f747ead1fa9a135c65057ca412d893bb82e91429
        Validity
            Not Before: Oct  6 18:01:17 2026 GMT
            Not After : Oct  7 18:01:17 2026 GMT
        Subject: CN=d6389b90a9d6cff5d9c26c66cca508e7f9d59768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:28:1d:d8:d8:80:f7:79:14:6b:4a:11:1d:18:
                    00:36:01:e6:2d:ae:8d:6b:6e:7c:56:35:82:94:3d:
                    79:20:c2:55:12:96:56:72:31:27:6a:ff:18:b0:e3:
                    c9:d7:0b:01:b7:f9:17:68:9c:3b:06:20:5c:ed:1b:
                    df:8c:a3:8b:8e:9c:4f:b0:6f:02:e9:54:66:d5:30:
                    1f:d1:95:5f:e3:16:b3:c4:7a:3e:cb:e8:5b:e4:96:
                    20:3d:65:1f:b6:2e:d5:40:8f:49:a1:5b:2f:c2:8d:
                    1b:c0:f5:27:62:32:29:ca:eb:1a:29:87:b4:08:f6:
                    6c:ec:18:4d:94:3d:e9:81:2d:be:b9:39:47:8d:a3:
                    bb:0a:93:c4:f4:a1:f6:a0:ae:3a:de:f1:2d:87:d7:
                    33:43:cd:8e:89:c7:0b:23:fe:80:2a:43:72:05:27:
                    f6:fe:ff:ab:25:f5:e7:fc:c2:03:88:11:b3:46:49:
                    88:ad:d0:b3:93:d5:fa:c4:48:33:82:96:93:04:39:
                    06:e8:d0:8d:28:6f:c2:4f:3f:a1:50:21:7d:c2:74:
                    40:a7:f2:e5:b5:c4:e7:ac:2c:ca:71:8f:f3:e5:26:
                    69:a2:96:d5:bb:47:37:93:6b:da:df:9f:32:38:1c:
                    98:f9:15:e9:16:9f:21:db:1d:c1:58:9d:73:12:f2:
                    5b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:38:9B:90:A9:D6:CF:F5:D9:C2:6C:66:CC:A5:08:E7:F9:D5:97:68
            X509v3 Authority Key Identifier:
                keyid:F7:47:EA:D1:FA:9A:13:5C:65:05:7C:A4:12:D8:93:BB:82:E9:14:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/90fq0fqaE1xlBXykEtiTu4LpFCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/04789c-ae04-4b98-909c-b917f83f1e8c/1/90fq0fqaE1xlBXykEtiTu4LpFCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:cc:bf:2e:08:34:1d:40:d5:07:38:c8:12:d1:c9:dc:72:da:
         d4:0f:5d:3b:05:b3:c4:d2:0b:55:42:5b:57:a1:da:d2:84:5d:
         93:e8:f5:ed:60:d8:8b:fc:a3:29:1c:c7:ac:56:bb:cd:2d:19:
         66:55:83:98:9d:8e:27:b9:4a:f6:5e:44:9b:48:af:ac:d8:23:
         58:24:af:1c:41:b5:7f:f2:17:50:e1:4e:17:86:51:21:01:5e:
         8a:a1:48:33:0d:bb:5b:75:fe:69:dc:4a:64:7d:ba:8b:4b:39:
         31:85:6a:07:95:e3:f6:f8:70:9e:a4:4a:6a:db:3e:f0:5a:0f:
         0c:8d:61:39:be:6a:8b:50:d0:0e:45:90:e4:12:45:9e:a2:8c:
         74:48:a4:65:cb:c9:61:9e:73:1d:90:f5:d7:b6:8e:6b:b8:5d:
         eb:ee:d1:1f:3a:8a:2e:4e:2d:e0:c0:76:74:19:87:cc:d9:79:
         b2:f2:5b:c1:08:64:aa:d6:3d:5d:21:04:4a:69:e9:2d:9e:aa:
         e4:de:3f:ed:dc:84:f0:5a:4f:89:cd:ea:41:7a:d5:94:5a:b8:
         66:d4:4a:df:bc:5f:5a:9c:a6:9c:87:c2:d5:c7:e5:47:ae:39:
         fc:13:4a:51:50:22:c6:55:14:af:ed:c7:2b:88:ea:3e:48:42:
         ea:e0:b8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 00:32:40 2026 by rpki-client