Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
File:                     Cn4rBHu6-WxHybJyFbobEOYav28.mft (raw, json)
Hash identifier:          9XZD/YHpIfxeTJoy+mul0LF0+JqAt61uhW6eSKWHRgM=
Subject key identifier:   6E:72:49:CF:97:EF:14:91:9D:17:5F:12:1D:14:FB:51:A9:DA:A3:5D
Authority key identifier: 0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F
Certificate issuer:       /CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
Certificate serial:       01A0D8DF1BB98E44AACAEBA29CD38AB6BE08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
Manifest number:          0215
Signing time:             Fri 25 Sep 2026 14:01:35 +0000
Manifest this update:     Fri 25 Sep 2026 14:01:35 +0000
Manifest next update:     Sat 26 Sep 2026 14:01:35 +0000
Files and hashes:         1: Cn4rBHu6-WxHybJyFbobEOYav28.crl (hash: 5GG3XHyErvUawWtQ0fFWLF2v69fL4YXqc5/6B0fm2a4=)
                          2: Y4Gyzg4W6akHejirl6HnZ5QGdGc.roa (hash: qK3xm6Kuv/YRcthZV7gfsusrohvZRdkJr0GOyaQzsIg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:df:1b:b9:8e:44:aa:ca:eb:a2:9c:d3:8a:b6:be:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7e2b047bbaf96c47c9b27215ba1b10e61abf6f
        Validity
            Not Before: Sep 25 14:01:35 2026 GMT
            Not After : Sep 26 14:01:35 2026 GMT
        Subject: CN=6e7249cf97ef14919d175f121d14fb51a9daa35d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:8f:ac:47:fb:23:95:a5:98:a7:b8:23:9d:
                    21:f4:1a:03:58:33:f3:69:42:cf:a0:d7:9c:92:dc:
                    49:41:95:1c:a7:f2:97:58:80:b2:4a:27:08:1c:f7:
                    e0:e1:b4:c7:f7:c9:6d:5f:9b:76:62:d1:e6:59:5b:
                    46:89:6a:f2:35:19:ca:90:47:44:5d:9e:17:0e:e1:
                    46:e1:24:f5:9b:53:86:45:1b:76:a0:af:4e:cc:9a:
                    4d:10:82:83:51:36:42:d4:85:a5:ac:55:63:10:0d:
                    20:ac:ab:00:3d:e2:dc:71:bd:75:e5:aa:34:e8:24:
                    a3:b7:09:45:52:2d:dc:b9:a3:bd:1a:52:30:1c:18:
                    37:ff:52:bc:27:f2:f2:97:5d:65:67:02:87:85:24:
                    5a:ae:c6:93:ab:64:1b:ea:32:32:ba:46:90:8b:32:
                    b4:45:e8:7c:33:17:d9:b0:95:18:dd:ae:aa:21:80:
                    45:23:48:bc:6a:cb:af:d6:fd:7e:9f:c3:00:c7:80:
                    0d:0e:5f:62:ca:75:65:87:09:a2:5f:dc:50:13:73:
                    47:1a:33:b8:bf:ca:ee:98:c2:f6:2d:f0:6c:03:43:
                    e5:60:60:e8:6a:8c:1c:cd:95:90:59:d5:b9:b7:1d:
                    1a:5d:c2:a1:22:06:d5:f0:3b:82:da:a9:01:45:22:
                    ce:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:72:49:CF:97:EF:14:91:9D:17:5F:12:1D:14:FB:51:A9:DA:A3:5D
            X509v3 Authority Key Identifier:
                keyid:0A:7E:2B:04:7B:BA:F9:6C:47:C9:B2:72:15:BA:1B:10:E6:1A:BF:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cn4rBHu6-WxHybJyFbobEOYav28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93dd3d-d53b-4e21-b241-6ddeecb428a6/1/Cn4rBHu6-WxHybJyFbobEOYav28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:a9:41:e1:4d:08:63:6c:4d:29:92:fe:f8:00:1a:25:61:e1:
         a1:eb:78:6e:48:1c:79:82:a9:7c:49:5a:7a:0d:ee:c3:36:b1:
         7b:a7:94:b3:48:d8:7b:42:f8:70:60:ec:62:ee:5d:b8:fa:77:
         ce:42:ee:cc:33:73:fc:e0:a3:69:a0:72:d6:06:28:3b:51:52:
         10:71:61:37:4b:46:f9:44:d0:01:d1:00:74:7c:57:68:7b:0a:
         ad:9d:a5:f7:68:cc:9c:a9:ba:05:47:c4:fc:f0:8b:55:bf:66:
         19:49:9a:53:53:75:39:76:1d:f1:9d:cd:ab:f6:1b:6a:e1:82:
         6b:4e:27:7b:fc:86:a8:c2:7f:7f:01:85:d3:2c:05:11:ee:8b:
         c1:c7:25:f3:05:93:f8:5d:5b:2f:3f:ac:5a:e4:23:49:e9:e7:
         29:53:f4:c5:c1:66:2b:96:d4:9d:77:d9:85:d5:6e:29:83:28:
         39:24:9b:36:e2:ea:3b:f0:50:64:d3:18:db:a7:09:d4:4b:1e:
         4b:f5:7e:9a:9d:6d:3f:19:ad:4a:9b:14:2c:48:07:5d:69:ce:
         32:fd:fe:cc:20:4e:ce:c4:48:d8:a3:65:63:e2:99:56:ae:18:
         13:9c:f2:98:b0:37:4d:2d:86:6f:0a:21:2b:7b:86:ca:f3:98:
         61:84:3c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:37:25 2026 by rpki-client