Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.mft
File:                     1OodcM1C51E6wjM51h241Ap--tg.mft (raw, json)
Hash identifier:          F45pzpL4y/nTBo1DXpC1uJ77RIVDVwPQE/zmlyZXckg=
Subject key identifier:   CE:7D:EA:C1:E3:62:05:85:52:05:A0:A8:71:8D:79:B6:EE:59:68:ED
Authority key identifier: D4:EA:1D:70:CD:42:E7:51:3A:C2:33:39:D6:1D:B8:D4:0A:7E:FA:D8
Certificate issuer:       /CN=d4ea1d70cd42e7513ac23339d61db8d40a7efad8
Certificate serial:       01A0CF35F02E21CE8612A9231A16CFC5FBEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1OodcM1C51E6wjM51h241Ap--tg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.mft
Manifest number:          E4
Signing time:             Wed 23 Sep 2026 17:00:13 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:13 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:13 +0000
Files and hashes:         1: 1OodcM1C51E6wjM51h241Ap--tg.crl (hash: xRCXv3dfnpdM368UEBd68GOXcO5ORrEoWNT1CBJ3UDQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1OodcM1C51E6wjM51h241Ap--tg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 17:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:35:f0:2e:21:ce:86:12:a9:23:1a:16:cf:c5:fb:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4ea1d70cd42e7513ac23339d61db8d40a7efad8
        Validity
            Not Before: Sep 23 17:00:13 2026 GMT
            Not After : Sep 24 17:00:13 2026 GMT
        Subject: CN=ce7deac1e36205855205a0a8718d79b6ee5968ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cf:e1:64:bf:32:0d:46:10:85:cb:f6:6e:a1:
                    57:76:45:57:d5:52:97:64:7b:ec:09:f4:a9:3e:78:
                    32:a0:0c:d9:4c:92:8c:bd:0c:f2:6b:e7:23:42:c8:
                    42:04:86:2a:28:08:b8:b4:5f:b3:79:fa:1c:cf:c2:
                    bc:4d:eb:63:1e:fe:0c:e3:71:89:18:01:55:1d:46:
                    87:35:b1:17:06:9e:ca:b0:06:b4:60:ab:05:1b:60:
                    de:a0:1f:c0:a8:2a:7e:69:7c:4a:ae:2c:00:76:66:
                    5c:36:0a:6d:47:4c:ba:96:41:86:cf:e0:4e:1d:b5:
                    24:b4:57:7f:e1:4a:7a:77:97:39:58:e4:63:92:7d:
                    d4:51:9a:4b:33:c2:20:48:6f:97:84:91:85:4f:cb:
                    78:89:5a:1b:70:a8:d3:61:70:93:c8:07:d0:5a:78:
                    bb:2b:01:cd:0a:22:94:ca:ce:05:25:76:b2:5e:1c:
                    09:59:55:56:85:8d:3f:e8:c0:c2:a6:5c:19:56:65:
                    f6:85:b8:fd:5b:a4:08:86:e6:ee:f1:80:d6:46:c5:
                    04:9f:bf:34:59:66:b5:e8:a7:86:44:0b:4c:bb:fa:
                    27:e4:ec:1b:55:a5:10:70:c2:47:2b:00:19:92:fb:
                    56:49:42:d1:f2:d3:f9:42:2f:e2:c6:0e:33:f2:74:
                    4d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7D:EA:C1:E3:62:05:85:52:05:A0:A8:71:8D:79:B6:EE:59:68:ED
            X509v3 Authority Key Identifier:
                keyid:D4:EA:1D:70:CD:42:E7:51:3A:C2:33:39:D6:1D:B8:D4:0A:7E:FA:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1OodcM1C51E6wjM51h241Ap--tg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/6bfb8f-3c46-4cc2-acfd-4f9e895631fe/1/1OodcM1C51E6wjM51h241Ap--tg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6f:30:88:01:91:8e:0e:14:1b:09:77:7e:a6:b2:4f:cd:06:
         d4:d4:53:63:03:81:f8:f3:03:30:0a:cd:74:68:66:6d:b5:cb:
         7f:39:a7:d4:02:e9:57:18:f6:f1:95:80:e0:68:20:65:81:1a:
         ff:b7:81:1f:83:5a:a0:16:fc:7b:3c:3e:35:da:ac:73:7d:14:
         9d:b0:81:10:4b:7e:8c:f0:12:8e:ab:26:c2:9f:58:59:fb:03:
         08:c4:0e:4c:da:58:66:05:01:26:57:4e:d9:ce:8a:bf:9e:df:
         c9:37:8e:2d:7e:9f:7a:ac:2f:a1:b8:2b:c9:80:31:48:5e:6d:
         51:4a:d3:75:97:35:da:97:de:3e:ea:92:a0:42:81:7c:43:36:
         45:74:09:22:d1:3f:75:66:81:7f:96:37:27:2e:72:1c:e9:e4:
         df:d2:34:8c:df:17:e2:5e:40:c0:8b:68:24:26:14:97:ea:89:
         9d:54:d9:00:97:82:ed:a1:8c:9e:1e:90:44:8b:09:a4:02:69:
         f9:35:72:8a:66:dd:60:1c:6f:34:b6:78:c5:57:97:de:06:20:
         07:16:bb:4d:6e:87:7e:ab:d1:0c:e2:01:75:b7:f9:c3:b4:f1:
         09:4c:06:44:01:04:a0:da:77:a8:c6:04:98:f0:b3:7f:ff:ea:
         19:e4:78:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:08:33 2026 by rpki-client