Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft
File:                     4xw9EfQ8dCp9AIVC3079O7ANLXc.mft (raw, json)
Hash identifier:          rfjB2ShTwHRjKFmBrPfqvH8tPS/rvnMmlI9Wu2/MwRQ=
Subject key identifier:   75:6B:76:81:1A:B2:10:A1:16:13:F6:15:6A:77:84:B5:FE:AD:17:33
Authority key identifier: E3:1C:3D:11:F4:3C:74:2A:7D:00:85:42:DF:4E:FD:3B:B0:0D:2D:77
Certificate issuer:       /CN=e31c3d11f43c742a7d008542df4efd3bb00d2d77
Certificate serial:       01A0D9BBB8D0C8547EFAF009CD7E49F18998
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft
Manifest number:          0360
Signing time:             Fri 25 Sep 2026 18:02:33 +0000
Manifest this update:     Fri 25 Sep 2026 18:02:33 +0000
Manifest next update:     Sat 26 Sep 2026 18:02:33 +0000
Files and hashes:         1: 4xw9EfQ8dCp9AIVC3079O7ANLXc.crl (hash: Bl7PB0TO1IRI+41tMvl7hMJZEk2QryPoGpXaMMPKnoI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:bb:b8:d0:c8:54:7e:fa:f0:09:cd:7e:49:f1:89:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e31c3d11f43c742a7d008542df4efd3bb00d2d77
        Validity
            Not Before: Sep 25 18:02:33 2026 GMT
            Not After : Sep 26 18:02:33 2026 GMT
        Subject: CN=756b76811ab210a11613f6156a7784b5fead1733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cd:5d:ac:67:66:c7:26:da:e8:c6:e4:ff:90:
                    e8:24:7e:2b:7a:29:83:05:f9:e6:62:df:81:f5:b0:
                    96:ce:c1:20:ea:cf:ee:22:f6:1b:8b:2b:b0:f7:8f:
                    ea:71:b0:af:88:26:1d:45:03:e7:ef:79:c9:20:83:
                    94:de:47:20:63:4d:60:f9:85:a9:35:ee:4c:28:71:
                    9f:52:3b:4a:d4:5c:ef:ad:ad:30:2b:12:44:eb:6b:
                    72:11:df:c8:76:5a:c6:7f:86:08:b7:9d:81:65:15:
                    17:73:0e:a6:43:07:02:dc:8d:98:e3:d0:68:0f:9f:
                    42:7d:bd:e2:c3:c1:79:3c:d0:31:0a:2d:94:9c:3a:
                    e2:10:06:51:c8:99:dc:8d:f1:95:76:97:d7:ef:dd:
                    29:a1:d2:35:90:6d:1e:21:82:55:ca:16:44:7c:77:
                    ce:18:6c:88:31:b3:94:75:dc:fd:1f:88:72:aa:f6:
                    6d:41:7b:11:0b:cf:b4:6e:a8:d7:0c:d2:60:be:ad:
                    dd:01:4d:87:2b:bb:d8:ec:53:38:4d:a8:2e:19:bf:
                    f5:52:b0:95:ba:03:33:48:d0:ef:33:61:67:82:a4:
                    c6:63:1d:99:e0:d1:5f:ce:56:ac:28:b3:a9:e3:fb:
                    89:66:1f:29:e3:dc:9b:ba:63:c7:2c:b5:24:7b:d5:
                    6b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:6B:76:81:1A:B2:10:A1:16:13:F6:15:6A:77:84:B5:FE:AD:17:33
            X509v3 Authority Key Identifier:
                keyid:E3:1C:3D:11:F4:3C:74:2A:7D:00:85:42:DF:4E:FD:3B:B0:0D:2D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:e5:ed:97:f3:0d:fe:ef:75:be:92:77:7d:fd:00:37:30:b4:
         e8:a2:62:75:f2:d2:51:1c:c1:87:60:b4:59:08:91:8e:96:94:
         00:6f:69:1d:24:a7:4a:65:24:ba:4e:91:a3:d8:70:5b:35:78:
         30:a5:4e:d4:3a:ff:74:40:1d:87:25:6a:13:2c:c2:87:04:4a:
         a4:20:ea:bf:5e:9f:2a:49:45:37:a6:47:8d:86:f7:15:46:69:
         1e:59:55:55:91:d8:22:91:41:5e:e3:f6:66:99:d1:4e:85:7a:
         60:f0:3e:43:66:63:50:e9:c0:10:0f:1c:22:32:78:26:f0:3b:
         ef:21:b8:c5:1d:81:b0:3f:51:eb:98:76:32:cb:93:57:2d:40:
         f6:6d:97:80:b7:b3:c3:2e:b5:04:6f:65:c5:8e:93:ee:f6:c2:
         f7:41:d5:7a:92:74:ae:f7:4a:c1:a0:53:12:37:51:22:2b:a8:
         f9:ea:83:71:5f:6d:89:5d:5f:7d:2b:bf:91:af:17:02:36:f2:
         a2:29:8e:3c:a0:0a:7e:f5:ff:2a:56:05:59:d6:8d:55:72:f0:
         35:b2:86:a1:a7:a6:a2:eb:39:eb:95:f9:5a:8c:1d:e2:f5:65:
         cf:24:a5:df:03:a9:ab:ec:a4:99:08:52:28:83:cc:66:90:1b:
         ed:eb:01:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:48:38 2026 by rpki-client