Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
File:                     Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft (raw, json)
Hash identifier:          O2Bw/Wfx46NvnW/Y7WAbKjNqd3/WRcQfzQztotzaAG0=
Subject key identifier:   23:B8:4A:D3:F2:95:79:E1:65:3C:EB:46:AC:2A:4B:31:51:B2:31:01
Authority key identifier: 11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85
Certificate issuer:       /CN=11fe3900e141c3b169a3cccb3557bccef2895e85
Certificate serial:       01A0E287202E00D1EA2AB386D58B4711816F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
Manifest number:          19F5
Signing time:             Sun 27 Sep 2026 11:01:41 +0000
Manifest this update:     Sun 27 Sep 2026 11:01:41 +0000
Manifest next update:     Mon 28 Sep 2026 11:01:41 +0000
Files and hashes:         1: Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl (hash: LmSHdlsEpkEuI7p267OX6IOGNMlszmRsLMNoTLfO/X0=)
                          2: XTqrU8Fe3dyCsrhN-j7VCGJxXio.roa (hash: f4c8Huch2WTliXq5MFgPvjqV6741k9rGMrHBDUOfaY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 10:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e2:87:20:2e:00:d1:ea:2a:b3:86:d5:8b:47:11:81:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11fe3900e141c3b169a3cccb3557bccef2895e85
        Validity
            Not Before: Sep 27 11:01:41 2026 GMT
            Not After : Sep 28 11:01:41 2026 GMT
        Subject: CN=23b84ad3f29579e1653ceb46ac2a4b3151b23101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:35:46:7c:d9:4c:0c:02:ce:3b:54:21:bb:25:
                    9e:09:fe:d0:5a:87:aa:54:ba:89:60:f9:d2:ec:62:
                    b9:af:b6:84:ee:89:5c:89:b4:07:d7:34:d0:63:75:
                    0b:84:7b:4e:3e:07:75:09:9a:85:7a:1f:9a:8c:1b:
                    37:9e:3d:5f:bc:bf:1d:50:33:b8:cf:a4:e5:44:d1:
                    2e:09:ae:91:7d:cc:35:4f:04:60:bc:ba:1b:7b:90:
                    63:eb:1c:00:ca:1b:24:10:6d:83:19:a4:9e:48:45:
                    f7:83:dd:5a:6c:f3:07:b9:70:68:bc:4d:d2:1a:87:
                    64:03:9c:2e:bc:3c:8b:ab:c0:40:bc:dc:16:53:f3:
                    98:40:ae:96:14:fa:5e:35:67:85:c8:72:fe:aa:2a:
                    2f:c7:6f:8f:44:fb:87:ff:a5:b2:d2:97:83:a5:4e:
                    68:d7:e5:2d:26:15:74:dc:6e:24:93:d1:56:4d:fd:
                    d1:4c:72:e7:ee:d9:c4:66:fb:aa:62:29:bb:a1:2f:
                    19:ba:b4:0c:4a:a0:76:40:bb:c7:01:85:02:6c:8a:
                    42:9c:77:f7:2b:0c:f4:49:00:f4:49:b0:a0:ca:5d:
                    40:8f:85:c2:b0:2f:f2:77:b2:95:5d:9f:04:c7:03:
                    dc:f1:67:01:1c:ef:fa:cc:47:22:4e:03:09:1a:e5:
                    77:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B8:4A:D3:F2:95:79:E1:65:3C:EB:46:AC:2A:4B:31:51:B2:31:01
            X509v3 Authority Key Identifier:
                keyid:11:FE:39:00:E1:41:C3:B1:69:A3:CC:CB:35:57:BC:CE:F2:89:5E:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7ee981-0d7c-4a53-ada1-ce1a8dc94048/1/Ef45AOFBw7Fpo8zLNVe8zvKJXoU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:e4:1d:7f:41:85:96:45:5c:93:2c:06:f0:4b:d4:e2:14:17:
         88:d4:4b:e3:d2:03:75:77:8c:c7:21:ef:bd:5c:76:97:0f:d5:
         cb:94:a7:93:a9:61:78:a3:a6:3c:68:74:5d:db:78:72:c0:9e:
         6c:54:a5:cf:1a:1b:6d:e0:71:e3:6b:e3:39:3f:90:46:3a:b2:
         1e:bf:d4:ee:58:9c:e1:3f:f3:59:9c:b6:ab:0a:9c:3f:a6:16:
         02:cd:e3:fa:87:77:dc:38:68:b8:29:5c:e9:f5:b2:2f:ee:e6:
         c4:97:01:c3:1e:b7:77:fe:0c:d8:37:ed:71:31:6a:87:99:c7:
         40:b1:07:37:ed:60:f4:de:6e:b7:d5:05:b4:f5:17:c5:df:3d:
         34:69:3a:4d:ed:bd:79:f3:1c:46:39:ce:e4:ee:82:d7:6f:a4:
         32:7d:f0:c8:aa:cc:ff:1d:1b:18:fe:45:c6:95:88:55:4e:7d:
         e0:2c:72:94:b1:49:64:7f:d2:cc:74:89:97:d8:50:55:58:bc:
         39:3e:76:57:e3:75:49:85:99:0d:d7:ba:8d:05:41:9e:66:b6:
         f0:59:9f:e3:23:40:fb:d4:f7:4c:42:aa:99:6b:30:2a:86:7d:
         ae:4f:f9:4b:dd:2b:29:12:f9:c6:16:11:ba:1d:40:03:4a:1a:
         e7:c5:52:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:59:54 2026 by rpki-client