Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
File:                     3vg4UDz7wFKD_erdRkSke_14P84.mft (raw, json)
Hash identifier:          Uim8VzKLjqq1l7n+2uxyAJDdADq233xc2HZ1fLh1HR0=
Subject key identifier:   83:76:C5:05:FB:13:86:AE:40:60:CC:37:E8:CC:93:CA:25:09:D0:92
Authority key identifier: DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE
Certificate issuer:       /CN=def838503cfbc05283fdeadd4644a47bfd783fce
Certificate serial:       01A0CEFFA345DC56B54C6C4B127ACC638ED9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
Manifest number:          0C94
Signing time:             Wed 23 Sep 2026 16:00:54 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:54 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:54 +0000
Files and hashes:         1: 3vg4UDz7wFKD_erdRkSke_14P84.crl (hash: YDcTjC68fZXOKkPr5hJWEVxZbbWBWElvx7etRQxQdnI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:a3:45:dc:56:b5:4c:6c:4b:12:7a:cc:63:8e:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=def838503cfbc05283fdeadd4644a47bfd783fce
        Validity
            Not Before: Sep 23 16:00:54 2026 GMT
            Not After : Sep 24 16:00:54 2026 GMT
        Subject: CN=8376c505fb1386ae4060cc37e8cc93ca2509d092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:15:50:fd:7a:09:d8:48:12:bd:a0:29:fd:86:
                    4c:b2:14:70:e9:0e:66:a8:b1:d4:9e:32:a9:75:0a:
                    ea:02:c7:d0:e8:35:00:87:4d:ba:bd:65:9f:cc:f4:
                    56:f0:6a:5a:f7:46:5c:b6:b5:17:fa:ed:47:e6:b0:
                    3a:fd:b6:91:03:d0:c3:19:e3:7d:98:ff:67:83:7c:
                    b2:f8:45:95:ba:40:1e:db:68:fe:e4:2e:6b:e5:de:
                    ec:89:82:be:eb:7d:a1:72:b1:5f:ce:e0:0a:d0:05:
                    64:16:96:44:17:c3:7c:a9:2b:a5:7e:7c:a3:5f:ad:
                    2b:f6:42:49:b4:5f:7c:07:18:18:b8:13:aa:bf:79:
                    52:ec:68:50:b0:e4:fd:0d:87:8b:6e:a8:50:25:dc:
                    1c:54:04:69:92:74:6b:84:90:2f:0f:f5:6c:07:ec:
                    69:43:ac:92:b3:be:58:e8:f1:44:4e:89:b8:b4:2f:
                    67:1a:76:8d:6b:70:12:74:f7:6b:4d:b6:07:b6:be:
                    bd:35:7f:78:75:ed:94:d1:d4:17:f2:53:b9:20:47:
                    3d:e0:e1:f0:3f:20:2d:8b:ea:39:0c:42:a4:52:96:
                    e1:cb:f6:80:01:2d:3e:48:77:5c:0f:1c:fe:d7:e7:
                    73:45:ae:bc:04:ed:11:da:9b:a7:e3:4e:a3:a3:2f:
                    e4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:76:C5:05:FB:13:86:AE:40:60:CC:37:E8:CC:93:CA:25:09:D0:92
            X509v3 Authority Key Identifier:
                keyid:DE:F8:38:50:3C:FB:C0:52:83:FD:EA:DD:46:44:A4:7B:FD:78:3F:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3vg4UDz7wFKD_erdRkSke_14P84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/a78551-00e5-477c-b712-971bb4a52b3f/1/3vg4UDz7wFKD_erdRkSke_14P84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:6e:0a:0c:2b:3d:62:7b:7a:ee:65:f9:49:ca:1d:11:c1:40:
         fc:47:58:f1:5a:39:3a:4f:d2:fa:e8:05:d3:70:ce:94:f4:30:
         d2:99:66:45:ae:d1:5b:74:29:c0:5a:a2:a5:5b:bf:44:aa:60:
         64:b7:6f:ea:98:9a:63:00:e9:d4:dd:84:b0:fa:40:12:11:7b:
         28:45:27:c8:b0:bc:2b:ac:9c:fc:09:5e:d5:bb:45:ad:e7:94:
         9c:de:fc:d9:24:4b:b6:ea:fb:8b:17:3b:a9:24:90:33:d5:72:
         8c:f4:d0:b0:53:13:a8:8b:8e:10:6b:0e:7c:78:8a:ee:1b:80:
         dc:64:96:c6:ce:81:97:3d:9c:e8:fc:c7:be:d1:d7:ee:fc:3f:
         d8:d8:ab:e8:bd:30:d5:63:bc:e2:4b:54:a3:4a:4b:63:8e:75:
         1b:3f:54:19:20:9d:c3:ed:b3:d8:92:4d:73:c5:47:26:06:b9:
         bb:1e:89:97:97:04:e2:9a:01:cb:f7:f2:f2:a7:2b:be:c9:70:
         c2:67:f7:b7:0b:43:7d:86:02:a1:e0:1e:7d:4e:ad:09:fc:4d:
         5a:12:0c:f2:0b:a8:61:82:91:83:9b:ed:55:ae:b8:4e:d6:f5:
         6b:1d:7b:88:84:dd:13:2f:6f:c7:f7:9d:be:95:ae:4f:20:b6:
         16:a5:d1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:55:42 2026 by rpki-client