Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
File:                     Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft (raw, json)
Hash identifier:          SiYAfYKCdsBWXhqW8+SSyjieNrTyDPZnnUkzNw9GLkU=
Subject key identifier:   77:79:43:DA:60:C9:40:E0:F9:E9:E6:22:53:95:91:34:59:B0:C2:94
Authority key identifier: 3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27
Certificate issuer:       /CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
Certificate serial:       01A131EBA30043F7E6CB6F421CC45DCF5A32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
Manifest number:          1A9D
Signing time:             Mon 12 Oct 2026 21:01:28 +0000
Manifest this update:     Mon 12 Oct 2026 21:01:28 +0000
Manifest next update:     Tue 13 Oct 2026 21:01:28 +0000
Files and hashes:         1: 6LPLfXRjPfIhjODnqMp3dSMQhpE.roa (hash: SwmREtsfcX2USnXEaEXyt246LdWmwOC0/X0ED+RKl5c=)
                          2: Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl (hash: Mev/R/eU0KnKuYZNLlCIjVAVAFr71I1WV5lvCbPShvw=)
                          3: kvgue6TS--DcN7HG6o1wL6cSaEs.roa (hash: FoFeIWZgKjpGFpo+unUKSXljq5ce3QE7qtWREotLcT4=)
                          4: qLhFmr4T7lmhKT8keUmQGB3IPPk.roa (hash: 2UcGL5CSyZb5XFh4zJbKoqd+DUw15c/cw5GBlQgBwdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:eb:a3:00:43:f7:e6:cb:6f:42:1c:c4:5d:cf:5a:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3def11bb8a8d480a0313e1f218a66bdf4e95f627
        Validity
            Not Before: Oct 12 21:01:28 2026 GMT
            Not After : Oct 13 21:01:28 2026 GMT
        Subject: CN=777943da60c940e0f9e9e6225395913459b0c294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c1:ef:11:95:59:65:8c:27:5a:5e:0f:ee:1c:
                    eb:99:4f:19:a9:55:0b:e1:73:bb:87:07:55:c1:59:
                    17:89:3d:8a:ef:a2:f6:23:53:de:f4:54:81:71:fb:
                    d6:20:d0:a9:93:e9:f1:a2:28:14:fe:ae:0e:20:cf:
                    b3:94:1b:4f:d4:72:c1:d7:50:d0:5a:71:b4:9a:86:
                    6b:9b:8d:47:f7:48:7a:c3:dd:03:fa:9e:04:e2:d1:
                    92:67:6a:ca:19:c9:81:f3:e0:6d:41:c9:f5:ae:e7:
                    07:26:4e:cd:a0:4a:fd:d1:2e:3b:f5:14:c2:9a:54:
                    b4:c5:3c:cc:cc:51:da:a9:8a:ff:e5:dc:da:67:8f:
                    47:77:cf:3d:cd:90:2b:ef:3c:8f:6b:1a:43:a4:54:
                    42:54:27:4c:28:0d:b9:ff:66:a3:4d:26:b2:b9:24:
                    c3:55:5d:e0:ca:85:49:38:ca:68:0c:07:cb:1c:ff:
                    69:ef:54:ff:92:b2:0f:95:89:cb:78:7f:e6:d6:a6:
                    ce:9b:ef:d1:4a:53:34:92:38:b4:ba:54:1e:65:90:
                    e3:cb:ff:49:32:02:2a:92:06:b2:99:67:a1:1a:cb:
                    82:4e:92:0c:d1:37:e9:92:a1:b4:07:11:e9:58:5b:
                    99:2b:32:d3:d9:05:33:d9:c0:86:17:25:ba:e3:33:
                    a2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:79:43:DA:60:C9:40:E0:F9:E9:E6:22:53:95:91:34:59:B0:C2:94
            X509v3 Authority Key Identifier:
                keyid:3D:EF:11:BB:8A:8D:48:0A:03:13:E1:F2:18:A6:6B:DF:4E:95:F6:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pe8Ru4qNSAoDE-HyGKZr306V9ic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/d1f172-2def-4797-805f-b494664724ad/1/Pe8Ru4qNSAoDE-HyGKZr306V9ic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:85:e7:4b:1b:06:ef:7a:3e:ec:7d:14:c3:0d:b6:03:13:42:
         af:f5:19:62:bf:50:ea:d4:f9:7e:4b:98:88:e2:61:63:2a:81:
         30:78:5e:06:17:bb:bc:e8:22:b5:f6:6c:54:d2:ee:30:fd:16:
         df:d8:c6:89:1f:07:56:e1:a4:d3:5a:b4:2d:11:70:0c:17:26:
         65:13:a0:2f:f3:88:6e:01:7c:43:c6:d1:2b:63:48:52:d0:82:
         ad:36:9b:1e:29:4d:da:e4:ef:c7:d6:2c:40:99:0b:5a:7c:d1:
         8a:a6:16:d0:08:b6:43:87:9e:18:c8:9a:cb:c5:95:e3:08:9d:
         f6:0e:29:25:91:1c:de:bb:ea:7c:34:b9:bc:cc:e7:a0:cc:47:
         b8:85:da:23:40:e6:10:de:59:bb:b6:a8:02:a5:58:bb:f7:68:
         c7:ee:cb:11:f1:26:24:c7:2b:09:eb:cb:d0:fe:f6:22:70:dd:
         71:72:6f:92:97:4f:e3:f7:7a:d9:c5:79:7f:a9:e5:4d:81:83:
         82:21:17:f9:22:70:5c:00:3e:f1:77:45:20:9a:9d:7c:31:d4:
         95:db:05:aa:7c:38:3e:a1:fd:85:04:2e:83:0d:08:3c:49:1c:
         d6:85:81:39:22:e3:0c:a7:f5:18:7f:a9:07:7e:3b:8d:b3:32:
         16:8e:0e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 03:27:36 2026 by rpki-client