Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
File:                     EDQGi16fcxQnfivpcmxzITGxdWw.mft (raw, json)
Hash identifier:          uYYareaaHyWAZFT2jrFqllErZIkI5NOChwlu0DZ3bjg=
Subject key identifier:   94:17:82:F6:17:2B:59:4C:76:2E:3B:51:63:5E:09:64:4E:3A:50:9B
Authority key identifier: 10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C
Certificate issuer:       /CN=1034068b5e9f7314277e2be9726c732131b1756c
Certificate serial:       01A0DE73124A44EDE07E8B17A917DB0F9F9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
Manifest number:          14E8
Signing time:             Sat 26 Sep 2026 16:01:18 +0000
Manifest this update:     Sat 26 Sep 2026 16:01:18 +0000
Manifest next update:     Sun 27 Sep 2026 16:01:18 +0000
Files and hashes:         1: EDQGi16fcxQnfivpcmxzITGxdWw.crl (hash: e34c3zxWMsWb5SUB4EGzNJGsuHykk1z7oDWcIJN0PM4=)
                          2: cXWQ-OpF5MSEV9XXbIDzHhHfbiM.roa (hash: Zd/md0ukR3Ww6duMAFycBCzHzVmUmkCQrekRunAgt5g=)
                          3: jC1UMhzd3h1Q3atKjtTnlNFdpsA.roa (hash: NFrj/OLNRqiAhcTOxCMOPhXsniRxRJ7HRzSqYahvwnI=)
                          4: rJcSZ2D0s2iTwA97_y3IWyqAlsY.roa (hash: fGgv7Dt+siySO1H2RwtBQWaqClyQGS0M1U0fzVnFQ3s=)
                          5: rsawLrO96jwzQrzzu3CfFkKtYnw.roa (hash: HQ1fM2wpncL4ax6ClPUzOmxESKKTwCgtFlm5YWlXFgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:73:12:4a:44:ed:e0:7e:8b:17:a9:17:db:0f:9f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1034068b5e9f7314277e2be9726c732131b1756c
        Validity
            Not Before: Sep 26 16:01:18 2026 GMT
            Not After : Sep 27 16:01:18 2026 GMT
        Subject: CN=941782f6172b594c762e3b51635e09644e3a509b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:99:c8:70:89:9f:52:6e:30:c4:5c:9e:c1:cf:
                    c7:9c:1e:a4:78:f7:b2:7e:09:fc:ac:07:20:d7:a0:
                    66:96:ff:ea:51:ac:19:ff:99:f1:61:cc:b2:8b:e0:
                    ed:2a:a1:e0:79:87:f8:16:22:69:d8:ee:df:f0:7a:
                    a0:2c:4c:88:8f:d7:d0:8c:62:5d:d8:aa:e5:ad:a6:
                    0a:3d:3d:7b:d0:a8:bd:b3:f6:6a:06:db:9b:5b:97:
                    33:2e:d4:1e:02:b5:44:d5:6d:5d:77:40:e7:24:38:
                    12:5c:f1:80:42:b9:8b:77:8b:c8:c9:b6:b3:5c:5f:
                    58:47:85:f9:77:3e:f3:a0:54:c2:c3:e7:c3:72:00:
                    a0:01:e0:53:5e:d1:ec:15:9c:55:10:1b:01:0f:59:
                    23:64:c9:6f:ab:41:52:e0:3b:25:77:d6:c4:1d:c1:
                    15:3e:c1:c5:44:2c:41:1c:f6:25:9b:2e:47:f8:24:
                    56:3e:2e:14:79:b9:1b:77:45:8e:9b:cb:1b:f0:8e:
                    22:ca:c9:ef:d4:f9:fa:8c:4e:89:e4:38:01:c0:e9:
                    73:80:f8:38:d2:6d:59:59:b9:99:e3:10:00:4f:a8:
                    50:50:80:18:7d:ea:89:23:42:53:0f:3b:3b:c8:c7:
                    53:0a:54:57:a0:a0:da:0b:30:f9:6e:9e:9d:fe:77:
                    f2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:17:82:F6:17:2B:59:4C:76:2E:3B:51:63:5E:09:64:4E:3A:50:9B
            X509v3 Authority Key Identifier:
                keyid:10:34:06:8B:5E:9F:73:14:27:7E:2B:E9:72:6C:73:21:31:B1:75:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EDQGi16fcxQnfivpcmxzITGxdWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a0450e-5634-458d-918f-103d93d251ab/1/EDQGi16fcxQnfivpcmxzITGxdWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:aa:20:71:09:55:32:31:62:f5:9e:67:51:81:11:cd:14:70:
         7e:9e:b5:96:8b:59:85:74:62:13:f2:0d:2d:f1:7b:dd:77:91:
         e5:ba:f9:97:ce:a6:7f:2f:23:c4:29:d0:a5:1d:6c:ae:29:fe:
         58:bf:7f:49:da:bc:9a:dc:70:3c:64:6a:29:8d:e5:c9:01:74:
         84:e9:93:51:22:3e:1d:f1:7c:f9:c6:f1:57:67:05:a5:dc:97:
         34:83:b4:e6:5e:31:2f:c6:02:5d:05:f9:e6:f3:63:07:bd:ce:
         0a:71:5e:d0:a4:52:44:56:56:ce:a8:cc:e4:22:32:f5:b5:b1:
         14:71:54:c7:57:50:b6:3e:48:9f:6e:e9:8f:a3:88:ff:40:14:
         ac:44:f2:e2:a0:73:c0:bd:6a:cc:d7:fb:d7:ef:70:a1:b7:0a:
         64:cd:ea:ef:23:71:61:85:8d:2b:b8:41:7d:a9:bd:6f:86:d7:
         ef:31:2b:3d:32:12:f0:aa:41:27:ae:b3:05:38:9b:94:69:42:
         49:83:30:dd:11:19:07:22:bf:fb:9e:5a:46:d8:30:c2:4d:ff:
         b1:f9:b8:55:2b:06:31:e5:12:7b:9a:f7:f9:ee:a5:92:18:0b:
         dc:e8:98:d8:09:16:35:b3:2e:30:41:56:dc:2f:b9:0b:8b:7a:
         ce:08:2b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:43:16 2026 by rpki-client