Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft
File:                     51qM71_SqPGFr_WajG692YNjrGc.mft (raw, json)
Hash identifier:          ve7l5VsmeFxFagdVoBuPHiu+ntqHhZqhZB4y29v0j2g=
Subject key identifier:   F8:90:96:66:A0:DF:8F:D4:23:EA:F4:15:49:11:3C:49:7A:68:3A:14
Authority key identifier: E7:5A:8C:EF:5F:D2:A8:F1:85:AF:F5:9A:8C:6E:BD:D9:83:63:AC:67
Certificate issuer:       /CN=e75a8cef5fd2a8f185aff59a8c6ebdd98363ac67
Certificate serial:       01A0CF365AFA94C1DE4FE4057D99495FE495
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft
Manifest number:          0CDE
Signing time:             Wed 23 Sep 2026 17:00:40 +0000
Manifest this update:     Wed 23 Sep 2026 17:00:40 +0000
Manifest next update:     Thu 24 Sep 2026 17:00:40 +0000
Files and hashes:         1: 51qM71_SqPGFr_WajG692YNjrGc.crl (hash: QlX8TWZx98hvGai+cd2L20BpjSNiqKDyaATuHqk1l3A=)
                          2: NSaVqXW-BYNVKVrMtAdLzttEo10.roa (hash: KZjofyx19Ipt9TS6sfl4V56sa17bROc+lLGgg3vy/tg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:36:5a:fa:94:c1:de:4f:e4:05:7d:99:49:5f:e4:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e75a8cef5fd2a8f185aff59a8c6ebdd98363ac67
        Validity
            Not Before: Sep 23 17:00:40 2026 GMT
            Not After : Sep 24 17:00:40 2026 GMT
        Subject: CN=f8909666a0df8fd423eaf41549113c497a683a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8d:4f:71:1e:35:2a:68:dc:23:b9:2f:61:44:
                    b4:24:1c:f9:5c:94:7c:f1:3c:65:79:91:5f:a5:a1:
                    f5:62:ce:9a:3c:ee:b5:28:62:7c:df:a4:52:1d:fe:
                    1d:12:17:c4:68:f2:9b:5f:f3:c9:c4:db:f9:6b:01:
                    41:5c:45:1d:17:59:17:43:f6:23:64:f6:b7:e8:b5:
                    bd:c1:c0:0a:91:53:1e:e0:4a:3d:75:c3:03:fc:7c:
                    b7:07:f3:9f:c2:34:78:7f:c3:40:a4:1f:ef:ea:24:
                    72:a2:3f:bc:94:6e:3d:ad:19:5f:a4:2c:08:f1:5e:
                    e2:25:a1:5d:1a:33:01:ab:b5:d9:fe:7b:20:60:d7:
                    fe:38:1e:62:c1:a2:f7:f4:a7:9f:2d:7e:90:ea:1c:
                    a1:76:f6:22:3c:6a:c2:02:46:a5:55:87:06:ca:5b:
                    86:4f:b2:ac:ca:6e:a0:4f:61:af:44:3b:30:c7:9c:
                    c3:d0:41:7b:00:a7:87:26:d8:99:41:48:18:c1:48:
                    a1:7a:34:94:bf:4b:10:6a:54:e1:6c:10:89:be:33:
                    3c:28:53:d2:c3:ff:db:10:f5:d4:ad:17:99:cb:0a:
                    01:8a:30:33:77:8d:5a:93:60:9c:86:0f:06:1e:c1:
                    7b:62:26:34:c8:f0:1a:b4:d0:50:a8:04:e7:49:d9:
                    0a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:90:96:66:A0:DF:8F:D4:23:EA:F4:15:49:11:3C:49:7A:68:3A:14
            X509v3 Authority Key Identifier:
                keyid:E7:5A:8C:EF:5F:D2:A8:F1:85:AF:F5:9A:8C:6E:BD:D9:83:63:AC:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51qM71_SqPGFr_WajG692YNjrGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d4e2b3-aff8-49cd-9c7e-97d8d44e10ce/1/51qM71_SqPGFr_WajG692YNjrGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:17:76:aa:49:0f:b1:cc:30:96:65:1f:1b:ab:74:92:fd:98:
         46:ee:54:3d:6b:50:aa:9e:01:39:28:3a:92:65:6c:36:65:24:
         c1:dc:e7:6c:f5:a8:3f:4e:39:1f:7d:73:18:c8:2b:31:c8:b9:
         b5:58:15:9e:68:b5:ca:ee:d4:f9:62:ee:0e:f1:a4:ab:bb:7f:
         57:45:75:4c:77:28:4e:f6:92:b0:f2:84:af:a5:49:cc:52:0b:
         5f:a8:97:33:82:a1:7a:5c:69:db:5d:3c:79:8c:6e:87:43:08:
         c0:05:7e:16:ac:f8:07:12:10:f4:c0:26:a0:47:34:2e:41:23:
         1a:48:f3:c8:c5:d2:db:ea:bb:de:ea:a1:48:84:34:c6:ac:f0:
         11:ff:10:e2:21:7a:8d:d3:17:9a:95:63:1b:ac:23:f4:fc:ad:
         e7:c6:5f:b6:eb:46:b1:6a:57:32:37:7f:4f:10:aa:59:79:d7:
         74:d9:8b:f2:e6:b8:f9:85:32:4f:06:40:5d:e4:5b:1c:ad:45:
         91:95:07:25:08:21:2b:ef:2a:f3:43:2e:a7:64:f4:d9:40:9a:
         f4:ea:aa:d3:f7:7c:11:df:e5:93:58:bf:d4:52:eb:ee:5a:c9:
         92:9f:6b:93:c2:13:f4:e3:09:3d:46:37:14:2b:2a:c0:5c:35:
         04:05:be:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:49:10 2026 by rpki-client