Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
File:                     CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft (raw, json)
Hash identifier:          kgEj5XKHTdRgjV27pwb6tZaWSpmYKzgbW65ynyD/eAA=
Subject key identifier:   E3:FB:26:3C:6F:1C:A5:9C:1A:68:09:99:44:3A:C9:F2:A3:DD:EE:E4
Authority key identifier: 09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75
Certificate issuer:       /CN=0979f537b09ebeaddf9878749d1f88753c540c75
Certificate serial:       01A0D07F943A536E92C114CB58B924D0BBF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
Manifest number:          1A68
Signing time:             Wed 23 Sep 2026 23:00:16 +0000
Manifest this update:     Wed 23 Sep 2026 23:00:16 +0000
Manifest next update:     Thu 24 Sep 2026 23:00:16 +0000
Files and hashes:         1: CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl (hash: GuPpOsUTAPY8R1zn85+qPaVZ9ZkCGG3fkcOdcG9MNrk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:7f:94:3a:53:6e:92:c1:14:cb:58:b9:24:d0:bb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0979f537b09ebeaddf9878749d1f88753c540c75
        Validity
            Not Before: Sep 23 23:00:16 2026 GMT
            Not After : Sep 24 23:00:16 2026 GMT
        Subject: CN=e3fb263c6f1ca59c1a680999443ac9f2a3ddeee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:3f:b6:74:29:ff:9c:8a:d5:23:21:3e:d8:
                    0e:a8:2e:4c:1f:12:b4:94:54:2c:81:35:8a:37:62:
                    d8:e0:4c:90:ea:eb:04:79:ed:97:01:92:fb:c2:ab:
                    bf:a8:73:b5:51:e3:02:b2:89:f6:ff:41:b8:4f:53:
                    1e:9e:ea:e7:35:ac:c5:ea:94:12:fb:b6:33:a7:85:
                    8a:9c:05:b9:4f:c9:fa:e5:39:84:c3:6b:f0:43:76:
                    67:77:3a:62:b9:80:ff:fd:03:7a:4f:de:da:29:ec:
                    98:3e:a5:5f:59:96:be:fc:a2:28:4d:8e:02:fc:fc:
                    0d:97:cd:16:fb:d4:d9:c8:a3:1a:79:aa:98:f0:d2:
                    ed:26:08:ce:7f:51:b3:10:07:72:d6:0b:3c:34:0f:
                    23:29:f0:61:86:cb:f5:a2:a5:b9:98:2e:34:b6:ec:
                    49:7b:cc:2b:b3:06:64:6e:6f:db:db:ce:5e:9e:06:
                    84:d9:53:e7:43:4b:5c:7f:79:50:84:df:54:ab:ec:
                    4f:1b:a8:2c:76:d7:dd:a1:86:b0:1a:e8:61:ed:f5:
                    3a:d8:26:2d:a6:9b:59:73:2a:12:a9:ab:9f:2c:9f:
                    f3:42:88:25:0e:56:d6:6a:b2:99:d1:3a:f6:86:97:
                    2d:f4:ca:51:aa:1e:3e:83:db:4b:0a:ad:ef:47:c8:
                    6a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FB:26:3C:6F:1C:A5:9C:1A:68:09:99:44:3A:C9:F2:A3:DD:EE:E4
            X509v3 Authority Key Identifier:
                keyid:09:79:F5:37:B0:9E:BE:AD:DF:98:78:74:9D:1F:88:75:3C:54:0C:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXn1N7Cevq3fmHh0nR-IdTxUDHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/7d8a1a-095e-4186-95e0-082b68b2c02a/1/CXn1N7Cevq3fmHh0nR-IdTxUDHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:53:74:de:59:3c:4f:0c:bc:25:23:8e:06:99:df:e3:93:0a:
         c3:fb:4b:fb:fd:3d:67:9a:f4:7f:55:8c:d9:a5:e2:75:ee:a1:
         8a:24:d7:e3:27:49:b9:50:b8:af:8a:25:b5:a0:ad:fe:86:76:
         22:1e:b4:4f:11:76:ed:dc:26:0a:e4:3c:68:d1:65:45:c0:75:
         f1:50:d2:bc:8c:a7:5f:d4:af:e6:5c:40:f9:e4:fc:1e:54:b4:
         ce:67:fb:cd:19:1f:a0:da:af:b4:dd:81:9e:22:2f:85:7e:e0:
         da:8d:fa:fb:85:b5:1a:14:3d:87:f5:e7:9c:26:7f:c4:25:c2:
         c1:e5:d1:c1:75:c1:a6:99:04:bf:ba:ce:38:54:9d:8e:45:28:
         f6:e6:9c:c5:07:5f:fa:b7:f6:78:2f:5f:50:f7:ea:e7:47:22:
         cd:d3:eb:99:1b:d7:bf:2e:de:43:78:91:a2:a6:2e:d6:99:f1:
         f5:0a:4c:d9:d4:9d:f1:03:66:83:fb:71:9b:84:53:65:c8:57:
         fc:49:70:b1:1c:2e:22:4b:52:1c:b8:94:ee:26:e7:74:ef:3a:
         f0:88:96:d9:b0:57:1c:d3:0c:75:02:75:3a:a8:9d:0d:91:09:
         06:94:9c:3f:f8:3c:f5:40:50:5e:07:5f:3d:4d:74:7a:4a:37:
         4c:7a:a2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:08:24 2026 by rpki-client