Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
File:                     EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft (raw, json)
Hash identifier:          DXpTHpfuA/FFVMKghpnCnXmeCiAAO9PaXeo7iMyOjVs=
Subject key identifier:   A9:6B:58:9C:93:E5:34:9F:08:98:10:AE:1C:CD:D0:63:36:07:74:77
Authority key identifier: 10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77
Certificate issuer:       /CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77
Certificate serial:       01A0D5A69EF3708AD2B1068DBEA71F336C3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
Manifest number:          03D3
Signing time:             Thu 24 Sep 2026 23:01:01 +0000
Manifest this update:     Thu 24 Sep 2026 23:01:01 +0000
Manifest next update:     Fri 25 Sep 2026 23:01:01 +0000
Files and hashes:         1: 6XKN9mbXIZSOV6lIZCe171oGYFI.roa (hash: y46Uc83KEsrnQfYqTwtEh8WVRZS0uyMCAN5uYCStLoQ=)
                          2: EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl (hash: XA8MCoQznVHzrxDFOdvq6A9jBq0aNy0GwhWxvdQVL50=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:a6:9e:f3:70:8a:d2:b1:06:8d:be:a7:1f:33:6c:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10e05dabbcf14d53015ab8ff1e4bd7297acb0e77
        Validity
            Not Before: Sep 24 23:01:01 2026 GMT
            Not After : Sep 25 23:01:01 2026 GMT
        Subject: CN=a96b589c93e5349f089810ae1ccdd06336077477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ac:05:e2:dd:6a:be:2c:3d:9c:9b:db:02:a5:
                    50:6c:db:e4:ed:fd:f2:cb:a1:56:6e:f1:4f:3e:92:
                    e8:94:11:c8:8a:02:15:95:d2:e6:54:7f:07:6e:ae:
                    36:7c:12:34:b6:f8:01:f7:c9:63:6a:27:aa:c6:0f:
                    df:82:49:08:91:88:43:d9:3f:c9:9f:83:d2:8c:ce:
                    90:06:7d:4f:ca:4c:0d:57:94:57:41:e7:a5:ac:6b:
                    ea:4f:9a:46:27:3a:e6:e1:60:fa:8a:11:f4:d4:48:
                    9a:79:cb:80:bf:59:84:4a:87:8d:ce:7c:84:20:c1:
                    57:99:14:92:92:8a:e4:97:ff:a2:1f:ea:4d:1d:8e:
                    31:93:db:72:4a:7a:73:53:e2:f9:d5:96:10:bd:d2:
                    ae:8a:96:78:80:ce:95:e5:21:ea:8c:e9:5c:91:f4:
                    33:e0:e7:ca:43:87:6c:02:cc:8f:fc:07:de:9f:33:
                    f3:86:ed:c8:34:f3:70:6b:5b:ef:48:fe:85:28:6f:
                    a8:30:81:93:59:ac:52:83:2c:3e:54:1c:11:38:72:
                    59:c0:0f:74:02:00:68:51:0b:06:56:e6:87:fd:a3:
                    6b:d2:e4:26:b7:c7:b3:63:c7:dd:f7:41:0a:e6:71:
                    7e:68:33:a5:0e:ed:1c:91:0b:ef:0b:fe:91:92:32:
                    ca:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6B:58:9C:93:E5:34:9F:08:98:10:AE:1C:CD:D0:63:36:07:74:77
            X509v3 Authority Key Identifier:
                keyid:10:E0:5D:AB:BC:F1:4D:53:01:5A:B8:FF:1E:4B:D7:29:7A:CB:0E:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EOBdq7zxTVMBWrj_HkvXKXrLDnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/aa4f4e-2e01-46ec-81d1-e623d53f8bb1/1/EOBdq7zxTVMBWrj_HkvXKXrLDnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:35:3a:2c:94:43:a7:5c:39:25:07:54:60:6b:df:e5:6d:11:
         ec:c2:6e:c0:8b:0f:19:1c:da:59:87:34:77:38:74:16:e9:b2:
         20:62:0c:bb:00:9a:2e:da:23:79:b8:68:f0:fa:17:98:4b:4a:
         91:9a:e3:52:22:94:3f:e8:12:e2:98:1a:0a:da:8d:a8:f8:cb:
         fe:78:36:1a:ba:a9:06:2b:72:1f:7e:93:ae:67:e1:5a:e2:90:
         2f:80:83:d1:2c:c2:e5:23:6f:1e:ef:15:af:e1:53:a2:87:57:
         e3:50:82:02:5c:30:30:cb:4f:39:f6:2f:48:0c:07:25:bc:24:
         43:bd:8f:10:b1:38:01:39:25:59:4c:14:0a:f9:9d:a9:e2:35:
         b8:fb:ee:3d:a8:fd:ff:7b:7d:08:b9:fa:c4:6c:fb:a2:64:cf:
         ae:27:41:c7:f6:c8:96:25:e5:e8:ee:26:3f:1d:e5:1d:aa:eb:
         12:27:a1:b1:04:99:4e:65:3f:9e:58:6a:04:6a:5e:61:ec:19:
         d4:cb:3f:cc:ea:d0:ea:b1:32:dd:20:d0:5b:7f:77:87:b1:28:
         9b:92:0f:f1:81:fd:c9:ea:90:06:e5:62:76:d8:04:20:30:fa:
         b2:fb:b7:1f:6e:ce:06:f5:1b:03:58:bb:c5:7d:7a:25:ed:7d:
         ed:87:11:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:21:21 2026 by rpki-client