Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
File:                     0ur89N6SC5zmRdbmlt8IqosFUZs.mft (raw, json)
Hash identifier:          oob9UjdQneVV7rviTpAfSx1Xj2fineCG5k12PDzywGM=
Subject key identifier:   54:4E:08:36:B7:35:C7:36:C2:11:64:34:6A:A5:0C:25:EA:3F:58:F0
Authority key identifier: D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B
Certificate issuer:       /CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
Certificate serial:       01A0CE916CE444697C71176EE1FD7AFFFBAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
Manifest number:          176C
Signing time:             Wed 23 Sep 2026 14:00:32 +0000
Manifest this update:     Wed 23 Sep 2026 14:00:32 +0000
Manifest next update:     Thu 24 Sep 2026 14:00:32 +0000
Files and hashes:         1: 0ur89N6SC5zmRdbmlt8IqosFUZs.crl (hash: aTt+grxbjLvDNKI5JMTtVFC1cKI6Bs1KDtellGSwUbk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:91:6c:e4:44:69:7c:71:17:6e:e1:fd:7a:ff:fb:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2eafcf4de920b9ce645d6e696df08aa8b05519b
        Validity
            Not Before: Sep 23 14:00:32 2026 GMT
            Not After : Sep 24 14:00:32 2026 GMT
        Subject: CN=544e0836b735c736c21164346aa50c25ea3f58f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c3:10:6a:1a:9b:ee:ba:11:22:b6:5c:cb:86:
                    a2:65:f3:52:b6:12:cb:a3:2f:ca:37:7d:c3:5f:dd:
                    80:6c:a2:f3:94:bf:29:60:96:ea:8a:fd:0c:cb:37:
                    8c:7f:bc:7f:08:9d:91:57:06:42:cf:95:f3:43:1e:
                    a4:8a:a7:5f:9c:ab:a8:7b:5c:5a:d8:69:86:56:25:
                    57:58:2a:50:d3:ea:9b:2d:fa:bc:04:71:a0:15:c1:
                    b5:c3:9e:0a:3c:75:2d:dc:dd:68:e3:7e:93:47:c1:
                    c2:ea:a4:65:cd:7c:a1:cd:c9:00:b9:c9:da:de:f6:
                    65:72:ff:9f:6d:17:8d:c7:d6:6f:2a:0e:1a:32:53:
                    df:47:0b:cf:47:0e:d6:63:2c:2c:6c:98:a3:58:71:
                    70:4d:29:7d:c8:16:cd:d7:35:a9:bb:c9:cd:14:6e:
                    af:48:51:ad:dd:cf:e1:76:7e:ac:0a:cf:e2:54:e1:
                    c7:0f:9f:05:13:c3:ba:3b:f4:bc:43:80:b0:b1:26:
                    59:68:74:57:ff:f3:ac:bb:15:fd:26:b5:b5:70:75:
                    3f:5c:59:ae:08:d2:5c:93:51:d6:3e:9b:83:8d:9e:
                    be:e9:d0:92:6a:67:51:2f:6a:7c:d1:f3:54:5c:9d:
                    d2:9b:74:6b:68:51:96:5b:d7:cd:88:df:c6:5c:f8:
                    a8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4E:08:36:B7:35:C7:36:C2:11:64:34:6A:A5:0C:25:EA:3F:58:F0
            X509v3 Authority Key Identifier:
                keyid:D2:EA:FC:F4:DE:92:0B:9C:E6:45:D6:E6:96:DF:08:AA:8B:05:51:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ur89N6SC5zmRdbmlt8IqosFUZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/82785f-f0c5-4313-91a1-6dfd8bbadfe9/1/0ur89N6SC5zmRdbmlt8IqosFUZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:3d:3c:4d:ef:17:82:ae:ce:d5:d3:c4:b6:21:d9:3e:75:94:
         fc:c6:0c:c0:23:e3:90:83:9f:06:cc:a0:cb:da:0d:9e:06:35:
         b7:35:13:08:7e:23:2a:99:5c:f6:67:78:2b:70:2a:96:ea:6a:
         e6:f9:fd:d5:ab:59:ae:53:41:0b:83:31:c9:10:f0:8c:c0:68:
         a7:e2:98:bc:3a:c7:c3:94:b8:0c:fd:fc:ca:2e:22:cd:9f:5e:
         b6:26:40:d8:6a:59:42:90:79:a7:21:bc:e0:25:13:72:90:62:
         5d:15:aa:dd:a3:88:7b:d9:f6:0c:c6:4c:5b:46:ab:51:8c:4e:
         32:79:d3:5e:ba:1f:bb:d0:9d:4a:37:e8:df:16:15:15:78:ba:
         52:9b:0d:87:9f:c3:29:ca:3c:dc:44:98:85:33:90:f7:58:db:
         02:57:8a:4a:e0:62:47:9b:12:cd:c7:84:ba:83:76:eb:db:dd:
         1d:3c:68:47:c4:7c:3e:4d:93:cd:9a:0b:a9:5e:44:bd:08:98:
         74:33:3f:2b:41:90:3b:ec:d1:e8:ca:84:da:5a:24:9a:58:3f:
         3c:22:b3:0f:62:08:81:80:da:43:05:69:ec:47:03:f4:ec:0e:
         69:2d:0c:fd:0c:ac:db:37:68:ac:9f:19:2c:ca:4d:06:68:e3:
         89:86:6c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:07:11 2026 by rpki-client