Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft
File:                     1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft (raw, json)
Hash identifier:          lVNkSyfoI+7KCVlJiyh70IqMcsxFR1yaAcb4EwQfkkg=
Subject key identifier:   EB:B4:B7:F8:B6:C9:14:05:F8:E4:99:F1:29:B8:FC:25:8C:3E:0F:E3
Authority key identifier: FA:E5:64:5D:9B:C4:98:A5:DD:8D:BE:E9:3F:17:7C:02:F9:A6:12:6A
Certificate issuer:       /CN=fae5645d9bc498a5dd8dbee93f177c02f9a6126a
Certificate serial:       01A0CE236F580756D687571D26FE0933AB87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft
Manifest number:          E4
Signing time:             Wed 23 Sep 2026 12:00:23 +0000
Manifest this update:     Wed 23 Sep 2026 12:00:23 +0000
Manifest next update:     Thu 24 Sep 2026 12:00:23 +0000
Files and hashes:         1: 1-uVkXZvEmKXdjb7pPxd8AvmmEmo.crl (hash: kg1hhNPb/VM5sViSjzdBzi3G49Re5gpYYvFMF9gBF14=)
                          2: uwzxrH7NIE-q1j_lxiuYaoOWd50.asa (hash: tiF0BpVFfc++mp+oDIIX0YXSnNLzkExC3lldvN2c2+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:23:6f:58:07:56:d6:87:57:1d:26:fe:09:33:ab:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae5645d9bc498a5dd8dbee93f177c02f9a6126a
        Validity
            Not Before: Sep 23 12:00:23 2026 GMT
            Not After : Sep 24 12:00:23 2026 GMT
        Subject: CN=ebb4b7f8b6c91405f8e499f129b8fc258c3e0fe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:d3:df:9a:a8:5e:be:96:49:3a:bf:a7:b9:
                    3e:80:27:bd:bc:a4:85:3f:51:9d:ce:35:79:b6:f3:
                    a6:bd:da:b6:94:4d:f0:1c:59:9e:ee:d5:b9:71:3c:
                    6d:00:2c:d9:2b:f8:92:5d:34:51:c5:c7:8f:e0:89:
                    79:0f:48:5b:05:c6:3f:e9:a9:61:58:c2:5b:ee:3a:
                    cf:79:f2:d1:5a:02:b0:5d:fc:55:95:16:48:a1:4f:
                    12:19:4a:f2:d0:62:9f:c3:40:55:39:d3:fd:94:6a:
                    1b:72:24:c7:1e:f0:6a:c2:58:76:eb:a5:88:9e:35:
                    26:94:74:05:67:a7:80:9c:79:32:df:59:58:05:fe:
                    9b:a1:7d:fa:bc:51:f3:cd:01:05:f3:04:ed:33:c5:
                    d9:42:f2:7f:49:00:f5:9e:5c:81:f1:bc:fb:f9:9d:
                    b2:06:f6:f7:3b:53:f6:69:8e:e4:bf:34:d9:f8:5e:
                    44:a5:ad:95:f0:35:c6:cb:c6:25:53:f3:01:75:3f:
                    ff:4c:dc:6b:ea:e6:4e:f2:a2:ca:a4:51:75:b5:6f:
                    39:66:db:ba:33:78:32:8f:af:f0:de:51:76:99:3c:
                    12:b7:f9:f7:1d:d5:83:33:f8:9f:e4:c4:99:76:80:
                    b0:f6:7e:8e:4d:b9:83:7f:e2:66:d4:89:2a:e7:27:
                    4d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B4:B7:F8:B6:C9:14:05:F8:E4:99:F1:29:B8:FC:25:8C:3E:0F:E3
            X509v3 Authority Key Identifier:
                keyid:FA:E5:64:5D:9B:C4:98:A5:DD:8D:BE:E9:3F:17:7C:02:F9:A6:12:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0a56ce-ffef-49e4-aefc-6593c641a320/1/1-uVkXZvEmKXdjb7pPxd8AvmmEmo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:f3:aa:a2:fe:ff:bb:86:db:c9:98:1d:b7:c0:0a:f7:95:5e:
         80:dd:e5:d4:ca:cd:2f:72:d9:98:8e:19:b1:f1:26:bb:52:06:
         f5:90:e4:5c:b8:29:8a:79:c2:ea:3c:bc:87:63:29:09:61:14:
         51:d1:b8:9f:ac:58:57:14:90:1c:92:0a:94:25:c1:fd:44:ec:
         20:b2:9b:cd:bf:38:85:43:d7:9e:90:84:1c:80:e1:34:64:f9:
         15:12:c7:9b:04:7d:3a:cb:69:3f:ff:07:3d:46:f3:dd:02:c9:
         cd:bb:2c:18:e4:76:50:24:5c:4e:27:d5:4b:f4:87:df:b7:d5:
         19:d4:10:73:05:39:59:e3:e3:23:71:6a:db:04:d4:9f:90:c9:
         8d:0c:14:bf:bb:69:b8:dc:b8:73:90:85:85:b5:2e:15:49:76:
         50:b6:be:89:4d:56:61:e5:37:0f:dc:37:e2:54:2d:34:1c:68:
         0e:66:06:45:4d:6a:9f:09:e1:a1:d5:e2:4f:42:68:a0:28:e8:
         f6:12:c5:44:52:35:98:6e:4c:79:02:07:83:2f:24:cf:31:68:
         7e:cb:e4:d0:c6:7c:9c:09:18:25:71:fd:65:ae:01:9f:4c:ee:
         17:f8:d4:5a:21:24:cd:5d:f1:dc:fb:53:c4:e5:39:28:f3:62:
         42:d4:33:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:24:12 2026 by rpki-client