Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
File:                     86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft (raw, json)
Hash identifier:          hCC7pqlkCyLqUqgqkHi0Wi05cJdXFWt7mgt6PWwBbWc=
Subject key identifier:   C3:E3:44:3C:67:FE:0F:E5:60:26:29:B0:AB:A2:21:5F:CD:24:BF:55
Authority key identifier: F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C
Certificate issuer:       /CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
Certificate serial:       01A0C25669B7541E2109B862C98090AF55FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
Manifest number:          07A7
Signing time:             Mon 21 Sep 2026 05:00:37 +0000
Manifest this update:     Mon 21 Sep 2026 05:00:37 +0000
Manifest next update:     Tue 22 Sep 2026 05:00:37 +0000
Files and hashes:         1: 86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl (hash: uguNlvl8Co2rM9mZk9NBTx+OfoGFWsuCMPlBL237F2s=)
                          2: XuITUG_nXLtJk8wz6ifMhssSuak.roa (hash: 5aV6yd72Tpn0oei/wl6ltB44f+OFtaPnyUmZaPxlolc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:56:69:b7:54:1e:21:09:b8:62:c9:80:90:af:55:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3a80c48337bf27db2fd083c172c6a1cc5d1d17c
        Validity
            Not Before: Sep 21 05:00:37 2026 GMT
            Not After : Sep 22 05:00:37 2026 GMT
        Subject: CN=c3e3443c67fe0fe5602629b0aba2215fcd24bf55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e3:0d:c0:65:26:8b:4a:40:c2:97:e7:1b:9c:
                    26:ca:87:bc:d9:f4:12:8b:9e:82:8d:c5:72:57:99:
                    cd:c1:11:ac:2e:18:de:9a:f4:77:0f:a7:91:02:fd:
                    4d:79:10:d6:95:50:af:a9:95:82:6c:fb:f7:b3:c2:
                    2b:e7:5e:7a:a7:cd:51:27:4c:a1:e3:2f:31:8f:9f:
                    51:17:ad:ae:0f:1a:b3:8c:f7:27:ed:8c:9c:fa:aa:
                    ad:0e:95:78:82:e5:92:87:9e:bb:a5:0b:1f:4e:12:
                    cb:f9:8a:16:d9:05:fc:be:8d:5f:67:9e:fc:59:71:
                    82:2f:ac:f4:ef:3e:3b:68:63:aa:a4:09:a9:23:ff:
                    c6:b8:70:7f:16:0d:09:7f:fc:5c:bf:9e:9c:29:95:
                    cf:5a:dd:f6:d0:17:25:51:ed:9e:30:44:3b:37:db:
                    ed:7e:6d:44:ad:fa:49:45:0e:6b:65:a0:92:7e:76:
                    dc:88:66:7b:a2:38:74:e9:b9:d0:f6:51:6c:99:35:
                    4f:34:73:7a:98:af:b7:5c:05:85:a1:1d:a2:ca:5d:
                    40:e2:75:79:bf:0e:9a:50:1b:f8:7b:31:dc:a0:7f:
                    fe:5b:d1:51:5b:1a:4f:b7:27:4f:bd:81:87:c6:56:
                    96:f1:d2:98:83:25:a1:bb:8c:6d:b0:b2:e1:10:d1:
                    d0:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:E3:44:3C:67:FE:0F:E5:60:26:29:B0:AB:A2:21:5F:CD:24:BF:55
            X509v3 Authority Key Identifier:
                keyid:F3:A8:0C:48:33:7B:F2:7D:B2:FD:08:3C:17:2C:6A:1C:C5:D1:D1:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/86gMSDN78n2y_Qg8FyxqHMXR0Xw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6e17dd-b483-4e7a-acf9-2664dace9580/1/86gMSDN78n2y_Qg8FyxqHMXR0Xw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:70:25:e9:69:64:7b:d2:51:a5:be:f0:9f:5c:bf:40:b1:a2:
         d2:b8:3b:9f:cc:cc:a5:ca:bb:01:16:a4:2d:21:cc:14:94:b6:
         36:81:88:f2:4c:5f:be:6f:8f:8d:85:f7:8b:fb:a4:09:c8:fe:
         7a:d6:bf:4c:fd:a9:5b:c0:96:ad:d1:42:cb:95:e4:e0:d2:cd:
         64:22:53:72:59:a7:6d:13:df:10:70:11:11:2b:88:db:33:7d:
         c7:c3:0a:c6:0b:d9:62:cb:35:a7:1a:82:8a:90:05:9e:a8:f5:
         0e:d4:25:5c:23:58:7b:67:11:23:40:aa:8b:aa:2c:7e:7d:e2:
         63:5a:73:b9:08:41:7a:10:d1:2b:d4:52:e8:f5:f2:3d:9c:0a:
         d7:da:c5:fc:70:22:43:66:93:d9:3e:e9:19:40:61:62:c8:da:
         d7:15:c3:9e:00:d6:9e:d9:00:7b:e1:dd:08:22:bd:9d:df:1c:
         f4:6c:d0:02:ec:cc:99:3d:75:b1:0e:e8:c5:57:8c:5e:24:82:
         a0:6f:aa:3b:e1:ae:48:7d:73:14:7f:66:0b:fb:be:46:55:af:
         12:4b:19:03:ba:f7:72:27:de:a7:25:1a:a2:bb:87:8f:61:cb:
         c1:d9:e3:a4:d0:70:b8:17:b7:56:ad:fb:33:7f:90:6a:5d:c2:
         af:dd:e9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:04:32 2026 by rpki-client