Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
File:                     70nKwVHbFY7WqFYzWFVVf0519yU.mft (raw, json)
Hash identifier:          WTfu1DbwM2VzbxpveptcDvM68G6MTgr/oxLnYJqohfo=
Subject key identifier:   A0:11:D8:18:78:20:68:4D:6C:0C:36:04:16:8D:FF:7F:6D:C3:E5:69
Authority key identifier: EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25
Certificate issuer:       /CN=ef49cac151db158ed6a856335855557f4e75f725
Certificate serial:       01A0D315D4A6B28B0DB3C4134A89DE2B06E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
Manifest number:          0E96
Signing time:             Thu 24 Sep 2026 11:03:38 +0000
Manifest this update:     Thu 24 Sep 2026 11:03:38 +0000
Manifest next update:     Fri 25 Sep 2026 11:03:38 +0000
Files and hashes:         1: 70nKwVHbFY7WqFYzWFVVf0519yU.crl (hash: vbDCTz/w4mN85Rv/Sq+rfA7q9alACR32Iz0itLWrcTw=)
                          2: T3CKp-T8-05dSPhptIfDdJr4NUc.roa (hash: UZu3gFZJZB37xGdAM4v9jg5Nhm3ASOdF6iSWCqmBPVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 11:03:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:15:d4:a6:b2:8b:0d:b3:c4:13:4a:89:de:2b:06:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef49cac151db158ed6a856335855557f4e75f725
        Validity
            Not Before: Sep 24 11:03:38 2026 GMT
            Not After : Sep 25 11:03:38 2026 GMT
        Subject: CN=a011d8187820684d6c0c3604168dff7f6dc3e569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1e:e6:d1:70:9b:6a:e8:8a:59:87:99:2f:e7:
                    0d:f4:da:70:9b:15:0f:b3:38:c3:83:9e:03:65:c1:
                    a4:3c:12:d7:7d:9b:14:b9:82:4a:10:57:88:73:65:
                    3e:91:1f:a8:5a:4b:be:0f:a1:fe:c7:4c:d1:a7:9a:
                    d5:d9:54:b7:03:ae:d8:84:7d:10:62:4a:74:bf:3f:
                    83:e3:8d:5e:8b:4b:00:02:7a:b1:b9:be:b3:61:c1:
                    55:90:fe:7d:e2:c8:18:76:19:c1:bf:92:5d:38:e2:
                    a7:f8:4a:7b:47:44:d5:eb:fc:d6:cb:39:5b:b6:de:
                    6d:d7:f3:0f:65:5e:98:9b:ae:84:bc:38:aa:ff:94:
                    c1:cb:ea:6f:87:f5:27:1b:7a:70:dd:c9:1b:5c:8e:
                    45:1e:e7:b1:8b:b9:82:f5:3e:09:55:cf:8e:73:cd:
                    1a:01:ed:2c:20:7c:eb:38:cb:0b:ae:8e:ca:1b:48:
                    c4:2e:48:40:8f:ab:4c:b0:f4:ae:38:02:a8:db:2e:
                    dd:b0:22:30:3d:cb:af:fd:84:05:48:7f:66:90:4c:
                    93:29:23:b8:be:29:40:52:51:3e:9d:16:d4:c7:f3:
                    37:92:d9:28:72:d9:24:8e:05:89:66:bb:36:27:c7:
                    b4:87:f3:d4:ef:f1:e3:f2:54:4d:10:b3:ef:72:c2:
                    e8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:11:D8:18:78:20:68:4D:6C:0C:36:04:16:8D:FF:7F:6D:C3:E5:69
            X509v3 Authority Key Identifier:
                keyid:EF:49:CA:C1:51:DB:15:8E:D6:A8:56:33:58:55:55:7F:4E:75:F7:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70nKwVHbFY7WqFYzWFVVf0519yU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/4d4e4c-d6a9-422d-bacb-d8a7a2cc873b/1/70nKwVHbFY7WqFYzWFVVf0519yU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0e:1f:b7:c8:e2:d0:43:94:31:3d:78:df:d1:0f:f8:0a:d7:
         7d:f3:fb:91:9a:e1:88:04:ac:fc:35:43:3a:90:e8:7b:81:8f:
         f1:d9:61:fc:de:35:31:ff:a2:bd:f6:17:80:29:b3:5e:ba:cc:
         a5:cb:72:60:c9:97:67:bf:47:b0:8f:a6:a2:20:c0:4c:14:03:
         ea:b0:e0:9c:a7:45:fd:71:58:fd:18:6c:e7:e3:12:da:81:11:
         2c:97:3b:43:79:1e:3f:e8:d3:86:6d:54:40:73:a5:57:e5:00:
         77:be:fd:9d:47:a6:85:17:d7:6e:20:87:32:16:c6:16:c9:51:
         84:ba:db:f8:2a:9f:76:63:8f:b3:ed:19:3a:dc:72:a0:2b:84:
         d2:cd:c8:76:28:7a:4b:75:68:da:bf:0f:22:cb:4b:ac:c8:63:
         25:c8:14:66:67:3c:32:8b:33:0b:b2:34:b2:c2:74:0d:5a:78:
         5a:59:60:b5:0a:dc:33:20:ff:59:c2:1f:76:aa:8a:58:ca:87:
         9f:f2:2c:fb:56:6d:e7:aa:46:ba:48:91:14:01:aa:af:59:7a:
         47:ce:ce:e0:81:2b:a3:e9:ca:56:8d:92:6c:fc:70:45:f8:88:
         aa:f5:5e:56:0a:6a:b7:9b:54:2f:37:b9:b3:e3:33:41:f9:ec:
         70:4c:da:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:14:11 2026 by rpki-client