Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft
File:                     11ugWU0GWrciRlz6MF7_jUFhf6g.mft (raw, json)
Hash identifier:          LVNDd+/otKtfWvoYFPb8AX/2q5xGBEvywTEJd3XxMiE=
Subject key identifier:   EC:13:E3:3C:F8:D9:D0:C5:A0:70:C0:69:90:4B:F3:7F:76:92:63:E5
Authority key identifier: D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8
Certificate issuer:       /CN=d75ba0594d065ab722465cfa305eff8d41617fa8
Certificate serial:       01A0DA96AA63B05BE82A98E59FF0186B9B1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft
Manifest number:          1127
Signing time:             Fri 25 Sep 2026 22:01:41 +0000
Manifest this update:     Fri 25 Sep 2026 22:01:41 +0000
Manifest next update:     Sat 26 Sep 2026 22:01:41 +0000
Files and hashes:         1: 11ugWU0GWrciRlz6MF7_jUFhf6g.crl (hash: 5JZeuYYS2RWu2R1CzrA9vl9roK570zVTxF7a/qm+0no=)
                          2: Fjq3mkPKrbk3RsZ3yEGKBS9j2hk.roa (hash: /klg+2watJuJzDdXKU5bRhHxFfZdYYFwf9mvG57YuS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 22:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:96:aa:63:b0:5b:e8:2a:98:e5:9f:f0:18:6b:9b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d75ba0594d065ab722465cfa305eff8d41617fa8
        Validity
            Not Before: Sep 25 22:01:41 2026 GMT
            Not After : Sep 26 22:01:41 2026 GMT
        Subject: CN=ec13e33cf8d9d0c5a070c069904bf37f769263e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:27:99:02:8d:2e:57:ee:5b:fd:51:3b:ff:
                    56:95:d8:45:99:2c:67:46:8b:63:5a:e5:d3:a6:24:
                    d6:94:a1:6a:f2:85:89:46:47:0a:02:1f:fb:dd:4f:
                    24:67:61:a3:30:b2:45:98:6f:80:91:6b:37:b9:d0:
                    33:37:23:03:56:ca:0a:d3:08:d5:e6:81:17:52:b1:
                    f5:e2:48:ba:bc:7f:45:04:9a:c3:78:6f:08:83:3c:
                    46:6e:3c:aa:12:50:7a:14:a7:5d:5a:f0:32:e8:75:
                    bc:e2:e1:fd:ba:18:0c:01:a7:16:9b:94:2f:6a:85:
                    e8:29:27:0b:c3:d8:6a:27:2e:b9:b7:89:3f:15:1c:
                    e2:2a:f8:57:57:1d:4c:64:be:41:78:c1:d5:86:81:
                    29:b0:d6:d1:38:aa:f5:15:c5:2d:1a:2f:a8:c1:23:
                    5e:00:3c:d4:9e:8c:ac:e1:8f:b9:46:bf:56:bf:cd:
                    31:0c:ba:74:fd:fe:23:aa:89:71:7a:83:82:3c:4c:
                    7b:d4:52:22:9c:0e:e6:18:29:b7:98:9e:4e:6b:d1:
                    a5:54:5a:ee:0e:ab:ab:3b:0a:14:0c:a3:e2:80:85:
                    5e:dc:97:fd:ab:e1:93:4f:12:88:62:6c:32:a9:27:
                    a6:91:fa:b7:cd:7d:bd:9b:e1:4c:61:65:de:1c:e4:
                    8f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:13:E3:3C:F8:D9:D0:C5:A0:70:C0:69:90:4B:F3:7F:76:92:63:E5
            X509v3 Authority Key Identifier:
                keyid:D7:5B:A0:59:4D:06:5A:B7:22:46:5C:FA:30:5E:FF:8D:41:61:7F:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ugWU0GWrciRlz6MF7_jUFhf6g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/a6ca0f-5489-43a1-a1a5-2def38e45ba0/1/11ugWU0GWrciRlz6MF7_jUFhf6g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:be:e2:b2:49:e7:e8:24:d5:03:51:d4:82:5c:ce:d6:43:08:
         8d:29:b4:b2:05:cd:2a:3c:45:9e:95:16:c6:47:93:36:15:60:
         cb:b8:46:10:8b:97:47:d3:17:19:3a:46:be:74:99:2e:d8:c3:
         0c:81:31:30:4a:9a:c8:3d:25:c2:80:7c:6c:b1:94:bd:8e:27:
         33:77:fa:d3:67:be:52:10:aa:b9:67:86:79:1a:f7:5e:d3:be:
         57:3b:13:ea:85:f4:eb:2c:fb:17:79:62:70:80:cf:c6:98:07:
         57:c3:89:da:55:36:c6:0d:0b:d0:f7:cf:ad:f9:66:7a:da:58:
         88:80:e7:bf:1b:4d:36:ae:29:a2:ae:cb:ea:35:c2:c0:f7:bd:
         1f:3b:05:b0:de:a1:ce:5e:f7:fc:0a:8d:7d:db:13:4e:bc:ca:
         55:cc:79:54:64:69:46:1c:cd:7b:4a:eb:e1:34:72:3a:20:ea:
         71:f9:d7:cd:8b:6b:0e:6a:ac:c4:e8:08:22:e2:34:93:88:6e:
         c4:5d:f9:c3:4b:5b:bb:6c:91:20:ef:a5:0c:a7:33:18:b4:ab:
         2c:87:8a:fb:e5:3d:c7:54:43:a4:64:c2:31:16:01:dc:df:63:
         f6:d9:98:7b:06:70:cd:9a:2f:dd:07:d9:95:d8:50:7e:aa:a2:
         0c:80:68:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:33:29 2026 by rpki-client