Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.mft
File:                     eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.mft (raw, json)
Hash identifier:          sxUwi3dbTKA/a64Gkyt1KmX7WehsHEhlQb0Nb6gtqWw=
Subject key identifier:   EC:A7:C7:74:88:9A:03:DE:56:79:32:98:5E:7D:01:D6:10:6E:2C:AF
Authority key identifier: 78:31:C6:91:2F:11:C2:DF:E9:2F:EE:14:93:53:AA:8E:6D:98:09:BD
Certificate issuer:       /CN=7831c6912f11c2dfe92fee149353aa8e6d9809bd
Certificate serial:       01A0E43EF55004B52733BCD15D577E44E802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.mft
Manifest number:          0126
Signing time:             Sun 27 Sep 2026 19:02:06 +0000
Manifest this update:     Sun 27 Sep 2026 19:02:06 +0000
Manifest next update:     Mon 28 Sep 2026 19:02:06 +0000
Files and hashes:         1: eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.crl (hash: 5Vq2ydWNrLuxZ1ihvgueJpFf2IeOFh/9xtehmv0TgR4=)
                          2: fOw93NQ54fHKmnOokgNp9f_FGR8.asa (hash: C4FmaMhFhqwSsxNQqIZDGYzhfTxD/l6bXS+k4pCf9WM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:3e:f5:50:04:b5:27:33:bc:d1:5d:57:7e:44:e8:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7831c6912f11c2dfe92fee149353aa8e6d9809bd
        Validity
            Not Before: Sep 27 19:02:06 2026 GMT
            Not After : Sep 28 19:02:06 2026 GMT
        Subject: CN=eca7c774889a03de567932985e7d01d6106e2caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:76:89:f7:a9:63:8a:e0:c0:89:3f:65:0c:
                    9f:11:21:76:06:0a:95:51:db:cc:dd:29:9b:ba:d3:
                    1d:7b:be:13:24:4a:7b:1d:a3:df:66:9b:26:a4:5b:
                    2c:d5:60:e0:8f:15:18:e7:1d:d9:69:50:85:2c:6d:
                    47:01:0c:21:e6:f1:61:08:26:1f:69:df:46:bc:62:
                    d0:a4:8f:82:a6:b9:0b:3e:6c:d0:d3:4c:3d:13:b1:
                    99:29:48:15:e4:4a:61:31:a6:29:9a:17:46:55:e2:
                    3f:59:c8:2a:fc:dc:1e:8b:f8:d1:eb:46:6a:64:2d:
                    ce:4c:87:10:87:5e:08:08:e6:ff:24:bc:23:44:b4:
                    e8:66:65:0a:73:df:5f:fe:f3:b2:08:8b:55:8c:37:
                    77:b1:1a:24:05:67:b7:58:e5:f0:9c:d9:d4:d4:f4:
                    9b:95:5f:31:09:8e:0d:66:16:e2:7c:00:e6:6d:f9:
                    84:d8:b2:3a:37:84:4c:11:6f:67:a3:c3:fe:77:17:
                    88:92:07:a0:79:4c:80:03:3d:a3:5e:82:3d:4a:07:
                    ec:28:74:10:4c:14:d0:6b:ca:7e:45:ea:8f:bf:1b:
                    b7:ca:77:60:33:5c:7c:8c:e8:db:89:ec:ed:25:96:
                    4e:22:ee:4d:17:87:04:e0:4d:96:49:c2:d7:69:03:
                    43:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A7:C7:74:88:9A:03:DE:56:79:32:98:5E:7D:01:D6:10:6E:2C:AF
            X509v3 Authority Key Identifier:
                keyid:78:31:C6:91:2F:11:C2:DF:E9:2F:EE:14:93:53:AA:8E:6D:98:09:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/9276c8-94ba-4ae1-ac52-bc1ba0a48140/1/eDHGkS8Rwt_pL-4Uk1Oqjm2YCb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:97:61:3b:9a:50:2e:d4:82:b9:2e:85:79:53:2a:d9:d7:5b:
         ad:37:55:c2:b6:36:db:bf:fb:cb:81:11:44:d0:a0:a5:ea:32:
         6b:7e:61:03:52:f9:e9:21:b6:98:1a:44:0d:e2:3c:d7:a8:fc:
         31:14:92:03:b0:9f:77:27:0c:a6:99:bc:4b:51:26:a1:8e:a6:
         c3:36:30:ce:81:52:59:f2:78:ea:b4:d8:bd:73:4f:17:0d:86:
         5e:09:91:ae:54:b3:15:85:95:4d:79:93:fd:2b:39:02:29:69:
         7b:84:fe:f4:b1:14:02:7d:be:55:9d:9f:f4:7f:30:76:02:51:
         84:dd:da:47:eb:68:54:70:61:ab:d3:d7:02:d9:c0:e5:57:b7:
         49:f0:4f:80:0c:01:17:c1:a2:e9:7b:06:7b:75:65:eb:a5:ce:
         45:31:09:fe:ff:f4:a3:d7:ec:45:c4:fa:b4:3a:c9:65:ef:77:
         10:e3:44:f5:82:4b:c3:9a:92:c7:0d:06:5f:55:c5:0f:97:89:
         c1:39:ca:0e:c0:23:60:78:4a:ad:05:a9:dc:1b:3b:3d:4b:1a:
         e5:8c:06:63:ce:9e:43:4a:00:94:69:73:f9:1e:6f:7f:57:01:
         42:03:ff:0a:84:e2:c2:70:64:e9:a2:c5:90:96:f9:f6:e1:c9:
         6f:99:73:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 21:36:54 2026 by rpki-client