Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/0mwoC8_Lzi5kvL7cv86-VhvqCc4.mft
File:                     0mwoC8_Lzi5kvL7cv86-VhvqCc4.mft (raw, json)
Hash identifier:          wb+4GraQHVaINTVNRizOjm1PWzDTtDS0kel6oKN5+/k=
Subject key identifier:   21:47:40:56:29:F1:3D:E9:5F:4F:66:FA:7C:81:E1:98:C3:E3:43:FF
Authority key identifier: D2:6C:28:0B:CF:CB:CE:2E:64:BC:BE:DC:BF:CE:BE:56:1B:EA:09:CE
Certificate issuer:       /CN=d26c280bcfcbce2e64bcbedcbfcebe561bea09ce
Certificate serial:       01A0D4CB8DAC00CB66DA5F95963333AB74E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mwoC8_Lzi5kvL7cv86-VhvqCc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/0mwoC8_Lzi5kvL7cv86-VhvqCc4.mft
Manifest number:          E7
Signing time:             Thu 24 Sep 2026 19:01:44 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:44 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:44 +0000
Files and hashes:         1: 0mwoC8_Lzi5kvL7cv86-VhvqCc4.crl (hash: S6I6TmHDX8TXstD7RWgSSyMPQ79bbHv23Dt5Wk1baYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/0mwoC8_Lzi5kvL7cv86-VhvqCc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/0mwoC8_Lzi5kvL7cv86-VhvqCc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mwoC8_Lzi5kvL7cv86-VhvqCc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 19:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:8d:ac:00:cb:66:da:5f:95:96:33:33:ab:74:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26c280bcfcbce2e64bcbedcbfcebe561bea09ce
        Validity
            Not Before: Sep 24 19:01:44 2026 GMT
            Not After : Sep 25 19:01:44 2026 GMT
        Subject: CN=2147405629f13de95f4f66fa7c81e198c3e343ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:20:48:10:c9:a2:6b:0c:9a:f0:f2:3d:3d:b7:
                    22:52:b7:a8:ed:92:41:48:09:e4:43:43:21:2e:f6:
                    05:11:b0:0e:d7:5c:dc:76:d7:e7:8b:f5:c2:c5:89:
                    ad:28:5b:27:98:f1:ec:37:f8:a0:38:1f:fe:6e:68:
                    ae:5f:82:c6:17:d6:a2:fd:df:69:c3:55:dc:b6:8e:
                    b4:98:07:fb:ab:7f:e5:ec:e8:36:a8:9c:0c:b3:d9:
                    7c:74:8c:43:96:67:8d:7f:a7:81:2f:f3:90:c4:59:
                    ff:8f:67:d2:59:c4:57:3a:99:14:58:fb:4a:3b:11:
                    15:2b:de:6c:44:93:e3:3c:b7:5d:12:ed:7f:8d:f7:
                    63:87:b6:48:53:83:d5:3a:20:74:a7:3a:4e:33:c2:
                    ba:62:39:b2:b1:d7:18:79:1c:64:5a:70:3b:de:e7:
                    11:78:bb:45:ae:b5:5d:c4:d2:60:71:55:22:f9:fb:
                    e5:9e:16:f2:21:d5:a8:8b:90:9c:34:5f:1b:b7:2d:
                    69:06:cd:bd:6e:9d:f5:07:ee:d1:36:d4:15:22:84:
                    7f:27:ab:18:89:6b:7d:65:54:dc:e6:38:d9:c5:e4:
                    ce:7b:f0:69:73:2b:14:e4:91:25:86:db:69:ff:26:
                    34:d1:ab:f2:48:45:c4:ec:b7:9e:c3:1d:83:44:6e:
                    ec:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:47:40:56:29:F1:3D:E9:5F:4F:66:FA:7C:81:E1:98:C3:E3:43:FF
            X509v3 Authority Key Identifier:
                keyid:D2:6C:28:0B:CF:CB:CE:2E:64:BC:BE:DC:BF:CE:BE:56:1B:EA:09:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mwoC8_Lzi5kvL7cv86-VhvqCc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/0mwoC8_Lzi5kvL7cv86-VhvqCc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3edb8c-1850-488f-afdf-5c2abe5394e6/1/0mwoC8_Lzi5kvL7cv86-VhvqCc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:91:ba:f1:bb:48:3f:60:85:09:65:22:29:25:eb:49:6b:45:
         c3:cc:bf:5d:30:dd:e7:5e:85:5e:b2:bd:0a:9c:aa:16:bd:90:
         fe:3f:84:05:37:ce:14:db:07:c6:7e:4e:06:cc:69:d6:59:9e:
         74:43:00:db:d0:27:af:22:e8:ec:23:6c:a6:f1:83:e5:45:70:
         b4:4e:19:cd:5f:7b:d4:72:33:37:0a:27:91:3d:a8:48:db:20:
         da:90:ae:7e:70:3f:e9:62:dc:a3:29:dc:a4:70:a1:f5:40:39:
         d5:55:2b:ba:f6:fc:3b:84:23:b5:9e:ae:64:16:5d:e4:18:af:
         99:9d:9a:ee:5b:c6:94:06:23:77:52:14:97:71:48:8a:20:f3:
         dc:d3:4f:77:d3:eb:70:2b:49:9a:5c:92:ac:5e:83:63:26:78:
         1a:c2:79:d8:9c:38:ca:e0:b2:a6:10:4a:29:be:26:ba:1e:23:
         7d:81:32:9b:0f:6d:fa:f0:a3:07:04:9d:db:d5:5f:ac:f2:4b:
         7f:3f:b6:75:c5:c5:52:2e:22:7e:42:a8:da:a5:72:30:22:bd:
         73:b4:26:e1:36:26:89:47:ef:cb:41:9e:1f:3d:c9:ff:97:c9:
         50:f0:a7:5f:23:bc:56:c8:25:f5:e1:8e:93:bd:1a:81:f8:e5:
         17:9e:20:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:18:06 2026 by rpki-client