Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
File:                     E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft (raw, json)
Hash identifier:          8GL3b+DJ8cg6VygO3XJZG4QKNxXTjlnnDW0Xjh6skCM=
Subject key identifier:   70:EE:2F:DF:43:E0:F9:9F:98:2F:9B:9F:B5:6F:B3:45:FD:F8:1D:C8
Authority key identifier: 13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B
Certificate issuer:       /CN=13b89b80186332d441bb0515c47261c5ffa0616b
Certificate serial:       01A0D87285DAFA83ED9D6978F704816ED5E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
Manifest number:          17A3
Signing time:             Fri 25 Sep 2026 12:02:58 +0000
Manifest this update:     Fri 25 Sep 2026 12:02:58 +0000
Manifest next update:     Sat 26 Sep 2026 12:02:58 +0000
Files and hashes:         1: E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl (hash: fEVW9hBEVeBfHbQ5243XqLGiBoHS9XO5CEuELn951fI=)
                          2: ng9Xwpw4kTndq_afGB7nkkVST_Q.roa (hash: EnVisylVrMLRpq23iMqP/krYezkyFTHOer8sFdAaBdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 12:02:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:85:da:fa:83:ed:9d:69:78:f7:04:81:6e:d5:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13b89b80186332d441bb0515c47261c5ffa0616b
        Validity
            Not Before: Sep 25 12:02:58 2026 GMT
            Not After : Sep 26 12:02:58 2026 GMT
        Subject: CN=70ee2fdf43e0f99f982f9b9fb56fb345fdf81dc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:6d:c2:be:61:4d:1a:a9:1a:8d:5e:ab:66:
                    75:69:aa:7c:8b:57:62:f2:f0:c1:17:ec:cc:ab:97:
                    9b:b7:18:c5:9b:4e:25:d6:3a:90:ea:85:ae:94:c8:
                    f5:e4:ca:61:49:81:ab:50:b3:cf:35:fb:4a:fd:29:
                    7c:50:8f:5e:7b:d5:89:6e:e2:b9:4a:b4:9d:60:65:
                    e2:5f:50:93:48:eb:63:af:e3:8b:20:17:af:eb:54:
                    46:84:b1:e3:e2:3a:b0:1f:06:7e:48:3a:5a:bc:04:
                    40:c9:8f:9a:c4:9f:33:ac:7a:01:9e:ec:db:2a:51:
                    b7:0f:b0:3d:66:aa:b1:34:dc:77:97:28:35:93:6e:
                    83:5c:31:8e:39:2b:ab:8f:94:84:9c:e9:b5:1b:67:
                    ad:bc:c0:94:f1:ef:ce:8c:aa:56:c8:91:af:2e:99:
                    a9:3c:3f:17:c2:3d:04:ed:86:38:ff:40:32:0c:6f:
                    52:f3:5e:bc:ad:a0:2b:e8:27:0c:da:e7:0b:46:3f:
                    93:42:4a:a3:70:30:f9:c2:30:37:e5:2f:6f:3a:93:
                    f6:80:eb:09:24:b6:be:b9:a2:a0:8c:f9:42:11:a5:
                    05:6e:c0:a5:fc:69:21:02:46:6f:7b:a7:74:24:11:
                    f4:64:a8:44:3f:32:ed:0d:5c:e0:0c:df:87:c3:fb:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EE:2F:DF:43:E0:F9:9F:98:2F:9B:9F:B5:6F:B3:45:FD:F8:1D:C8
            X509v3 Authority Key Identifier:
                keyid:13:B8:9B:80:18:63:32:D4:41:BB:05:15:C4:72:61:C5:FF:A0:61:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7ibgBhjMtRBuwUVxHJhxf-gYWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/6e5dc3-c7fa-4d36-9095-c19232bda430/1/E7ibgBhjMtRBuwUVxHJhxf-gYWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:71:2b:d3:ad:3a:a5:0a:78:6f:1f:06:84:9a:d0:98:13:67:
         0d:20:fa:b9:dc:a4:47:a4:bd:6b:f0:4c:57:25:63:20:b6:28:
         5d:88:76:2f:0d:a7:73:06:0c:19:89:7f:60:24:e0:ca:a9:6e:
         4c:c0:ce:41:84:29:ae:35:0b:4e:4c:0a:84:6a:ae:81:c5:cf:
         f2:de:17:da:b9:85:cf:2f:fb:44:42:93:76:5b:a1:0f:05:26:
         c1:8e:bd:05:1f:f2:07:27:64:b3:33:10:a4:57:d6:30:da:5a:
         ba:0d:7e:0d:cc:95:7c:51:e9:c0:99:96:c1:54:b9:d2:0e:83:
         61:af:42:fe:04:ca:87:54:3b:1b:4b:4b:82:83:4c:d4:39:c6:
         f5:f7:41:c3:83:48:2c:e1:03:7e:1b:4d:df:4f:98:27:30:ce:
         85:f1:cb:77:f7:96:5d:21:60:63:40:a3:74:ef:9e:d7:80:56:
         88:9d:14:fe:99:41:90:15:f8:b3:c4:9e:a3:93:01:a0:a0:9f:
         1d:6e:ff:22:18:d9:9c:95:c3:43:df:37:01:c8:b4:32:00:c2:
         07:ee:12:ab:62:78:c1:8b:ed:1c:c3:dc:59:53:9b:5b:06:5e:
         15:a0:47:3f:cd:51:49:24:81:fb:32:3c:5a:5f:3a:19:e9:17:
         c1:b3:e5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:30:41 2026 by rpki-client