Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
File:                     mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft (raw, json)
Hash identifier:          5lmvZhR1OQuPiNr6o4BQCkI7c+rKKjodJN4RfK0eeyw=
Subject key identifier:   D1:63:24:D0:17:DC:C5:B7:06:AC:A6:C7:6C:1E:90:F5:BE:AE:52:99
Authority key identifier: 98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC
Certificate issuer:       /CN=98466aec752928b6d4865b99e8608c4aec4b78ac
Certificate serial:       01A0DF4F3894A1E587820A847B218A9A4C09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
Manifest number:          0455
Signing time:             Sat 26 Sep 2026 20:01:45 +0000
Manifest this update:     Sat 26 Sep 2026 20:01:45 +0000
Manifest next update:     Sun 27 Sep 2026 20:01:45 +0000
Files and hashes:         1: mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl (hash: 1LXsx5Q1dQksGTRxsARFdZX6XeQDZE1dvrr1sPwmdgo=)
                          2: nXPV6vL9Myf87iwdt8oMBUpIgzI.asa (hash: jq25H7X+5Q2wBhKdDZk+7MpbH+S6ejGtNRjeRxPO9HA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 20:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:df:4f:38:94:a1:e5:87:82:0a:84:7b:21:8a:9a:4c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98466aec752928b6d4865b99e8608c4aec4b78ac
        Validity
            Not Before: Sep 26 20:01:45 2026 GMT
            Not After : Sep 27 20:01:45 2026 GMT
        Subject: CN=d16324d017dcc5b706aca6c76c1e90f5beae5299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:60:af:b0:ce:b2:4b:94:06:30:84:bd:df:8f:
                    97:c0:74:92:a3:66:f9:71:7b:e5:67:b6:38:0c:f3:
                    f6:f6:24:21:da:08:ea:30:d3:ed:d5:12:0e:fe:ef:
                    61:31:fa:00:6b:22:5a:1b:76:ee:db:fb:db:21:b6:
                    80:5b:2c:84:04:b4:3c:95:93:f0:01:af:05:43:48:
                    dc:00:c9:9a:f1:3f:a7:ab:d2:82:c2:d2:86:83:72:
                    e1:b9:47:ec:79:dc:c1:e1:9f:7b:46:f6:36:fb:a7:
                    c5:67:4d:90:a9:67:02:cd:8b:29:96:b6:4a:a1:c7:
                    df:66:02:bb:1a:18:2f:55:f5:f1:a0:9e:f9:b9:34:
                    17:3a:60:48:1b:92:38:39:75:0c:a7:2b:1f:76:00:
                    43:58:f6:50:fa:e6:69:ff:af:24:ec:4f:2e:28:04:
                    03:0f:35:34:c1:f4:9b:fb:1f:d4:bc:22:65:78:5e:
                    8c:4b:73:6c:76:c1:b2:0f:1c:fd:65:8e:b1:0f:4f:
                    af:70:57:a1:3d:e9:6b:07:b8:a3:c5:31:90:84:bb:
                    c9:9e:84:b5:e4:25:9b:5a:27:b7:84:ac:7e:e3:c9:
                    9d:b9:a6:86:4d:ac:22:3d:e8:9b:46:29:04:d1:34:
                    3b:e8:cc:97:3f:c9:16:24:f4:1b:51:5c:90:83:4a:
                    68:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:63:24:D0:17:DC:C5:B7:06:AC:A6:C7:6C:1E:90:F5:BE:AE:52:99
            X509v3 Authority Key Identifier:
                keyid:98:46:6A:EC:75:29:28:B6:D4:86:5B:99:E8:60:8C:4A:EC:4B:78:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEZq7HUpKLbUhluZ6GCMSuxLeKw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/abf0f5-3b03-42a4-aded-fd0c27fc113a/1/mEZq7HUpKLbUhluZ6GCMSuxLeKw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:84:ea:0f:53:da:12:d7:ac:06:64:a1:d7:0a:50:05:eb:9d:
         ff:0c:00:da:92:d1:90:97:e9:5f:03:97:3d:16:4d:32:53:0f:
         a3:3c:d6:b5:c8:37:60:4f:74:18:8b:4e:6c:ae:82:f3:3b:27:
         81:c0:8e:b7:e3:36:7f:6d:e6:5a:37:a8:66:56:16:d3:92:ee:
         80:07:94:aa:0c:05:e3:5c:ae:2e:47:4f:69:e0:b5:e0:7d:e8:
         fa:78:fe:19:7e:d5:e1:fc:6d:7f:21:b9:5c:79:87:61:85:87:
         4b:e8:c4:8b:49:3e:a5:e6:cd:64:cf:41:f7:b7:75:1d:1a:65:
         53:b2:64:8f:f3:c2:3b:0d:f4:a5:55:a1:44:3b:7b:90:87:f7:
         c9:e2:ba:b5:ac:dc:1a:67:b7:ce:70:5e:32:0d:2f:97:b5:21:
         bb:4e:60:85:51:a1:5b:96:27:3a:8d:de:18:9c:ba:9f:4b:1a:
         85:11:02:af:b6:8b:41:45:94:05:8e:d3:34:b6:26:9a:3e:d2:
         bd:ef:a9:ed:ce:b0:c9:0d:65:2f:3e:1b:4b:5e:b7:7e:df:7d:
         1e:4a:81:c7:21:d2:3e:ef:3d:c0:b5:29:7b:d6:f3:3c:cc:f5:
         68:60:59:ff:01:10:8c:69:ef:65:96:1c:d6:c3:b0:26:cb:95:
         57:c1:11:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:51:29 2026 by rpki-client