Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
File:                     7xPpqiScWVAsDPi3hNQz-nUCBMs.mft (raw, json)
Hash identifier:          mz6CJd6FgrE9Y11OnXrB81qRs+CORi4NTqUkWqYL1zs=
Subject key identifier:   F5:BE:A3:02:B7:13:40:DD:08:9B:AE:7A:50:88:83:1C:5E:9A:9B:DB
Authority key identifier: EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB
Certificate issuer:       /CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
Certificate serial:       01A0DF182BED689BEC7C54699730CEBE4B98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
Manifest number:          0CE6
Signing time:             Sat 26 Sep 2026 19:01:38 +0000
Manifest this update:     Sat 26 Sep 2026 19:01:38 +0000
Manifest next update:     Sun 27 Sep 2026 19:01:38 +0000
Files and hashes:         1: 7xPpqiScWVAsDPi3hNQz-nUCBMs.crl (hash: lBNEEPBh4w5AVo0ltadnwe1D4AUoT8TCjXgQIXifZk4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 19:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:18:2b:ed:68:9b:ec:7c:54:69:97:30:ce:be:4b:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef13e9aa249c59502c0cf8b784d433fa750204cb
        Validity
            Not Before: Sep 26 19:01:38 2026 GMT
            Not After : Sep 27 19:01:38 2026 GMT
        Subject: CN=f5bea302b71340dd089bae7a5088831c5e9a9bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:83:1a:30:a4:4c:c3:12:bd:73:de:96:01:
                    70:7f:c3:c4:07:59:05:86:d7:87:f8:7c:19:32:f7:
                    9a:46:af:ab:e1:3a:42:cb:9b:6f:eb:80:db:a0:bb:
                    ab:d8:98:60:df:f2:74:8f:0a:63:30:56:5e:a2:fb:
                    96:1e:8a:9e:cc:00:05:e6:8a:6e:a1:53:8d:e7:e2:
                    d5:f0:9c:e5:03:83:5e:05:c3:09:da:04:85:73:dc:
                    1f:cd:68:69:84:19:74:71:2d:bf:68:91:0b:7e:f3:
                    68:da:b0:f5:fe:f7:48:64:f8:ce:a0:66:19:d5:43:
                    76:e1:43:07:0f:c2:7d:bb:5a:4a:95:17:6d:82:ac:
                    9d:9c:bf:18:56:50:77:e3:6c:35:fd:b5:83:1a:1a:
                    88:d6:89:3a:e3:4d:68:c6:93:fa:b7:24:fa:48:75:
                    fe:d3:1f:a8:3d:fd:2b:e0:f3:47:bd:5b:05:48:7f:
                    48:92:49:50:80:9b:8d:a0:2f:16:73:e1:70:e5:5b:
                    e0:38:3c:8e:ca:95:72:08:4c:ea:90:df:dc:23:28:
                    40:bd:1d:c3:82:78:09:35:a7:44:e7:f7:aa:3c:ac:
                    ab:81:40:f8:04:3e:4f:68:da:5b:fa:20:77:d6:4a:
                    4d:b2:15:8e:a9:2d:96:7d:7b:5d:42:e4:50:fb:48:
                    f1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:BE:A3:02:B7:13:40:DD:08:9B:AE:7A:50:88:83:1C:5E:9A:9B:DB
            X509v3 Authority Key Identifier:
                keyid:EF:13:E9:AA:24:9C:59:50:2C:0C:F8:B7:84:D4:33:FA:75:02:04:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xPpqiScWVAsDPi3hNQz-nUCBMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b3c522-f68b-4b98-a584-521b2587dd0c/1/7xPpqiScWVAsDPi3hNQz-nUCBMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:c4:5e:d0:fd:31:72:78:63:11:9a:f6:72:02:23:e0:3f:48:
         11:0e:4f:89:67:9d:92:b2:ff:4b:dc:dd:4e:5c:0a:63:70:c2:
         35:89:60:d1:d8:b4:3d:c4:36:43:a5:47:bc:48:fd:fe:ae:46:
         27:c2:a6:fa:78:3c:1f:27:22:e8:34:9b:36:75:d0:4f:be:6e:
         55:5d:e6:21:a2:9f:93:19:b6:8b:c1:e0:b8:55:d0:20:04:0f:
         1e:22:56:19:27:e0:06:1a:36:8b:a7:bd:f2:48:3e:2f:0b:5d:
         eb:5a:bd:9c:41:e4:d2:f5:df:f6:62:5e:7e:1e:8b:2a:90:26:
         6d:21:8d:a8:e4:77:d4:11:a6:a1:fd:88:46:38:a5:3f:c9:de:
         d4:b2:0b:64:4f:3a:df:c9:0c:cc:88:be:86:c2:c3:81:17:a9:
         c7:c7:b4:9a:46:80:7a:79:2c:95:b6:ec:8c:ca:1e:73:fb:ce:
         96:97:b7:62:5f:a7:48:34:f8:ee:db:9f:1e:25:7c:bd:3f:d4:
         c4:d1:7f:2d:e0:34:9b:62:13:f6:ea:5b:1c:31:38:fb:0a:6b:
         9e:33:e4:70:57:86:fa:58:b3:ac:c3:83:1c:bc:6f:13:c4:ff:
         ae:3e:19:ec:50:bb:ce:98:7d:cc:40:c9:9d:6d:18:62:46:ea:
         f7:1c:8c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:43:36 2026 by rpki-client