Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
File:                     0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft (raw, json)
Hash identifier:          mPsOScs3BbYkoLDhbBDHixlje1wNWFWfqHErtzoEqew=
Subject key identifier:   F4:4C:06:9B:6E:43:9C:1D:04:54:67:94:8A:3F:07:C6:DC:87:85:29
Authority key identifier: D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE
Certificate issuer:       /CN=d04265fb11c2a220bc350718673e0704d1edadde
Certificate serial:       01A0CEFF07ADD8D8D219C9F16C16B78437D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
Manifest number:          1596
Signing time:             Wed 23 Sep 2026 16:00:15 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:15 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:15 +0000
Files and hashes:         1: 0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl (hash: H6Vv+wKrvWqZLWsbPZDp5eJ0MaSI8Sucmxllhu5ZzbM=)
                          2: CxjvBT6i6ORn-LgV2GBf20kjEYw.asa (hash: BzUmnePwH8qqVa3rp1UNOBEk9Rs5woiSczy+DZk7nog=)
                          3: _OzM8w4FoR9ccCbQv3-snmY5IPs.asa (hash: MiIqtXDMPv3SC27FerQ7njWvgkVA9z0GFX+NGxq8AW0=)
                          4: an9hiLBXueLZ3NEcOw9p4FcCxvc.roa (hash: xhMio/+0Ambyy6cAJzP9lIpu104tRtCUBWmevhvYmvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 16:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:07:ad:d8:d8:d2:19:c9:f1:6c:16:b7:84:37:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d04265fb11c2a220bc350718673e0704d1edadde
        Validity
            Not Before: Sep 23 16:00:15 2026 GMT
            Not After : Sep 24 16:00:15 2026 GMT
        Subject: CN=f44c069b6e439c1d045467948a3f07c6dc878529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:eb:db:b0:24:3a:64:14:44:76:24:e0:ab:
                    b7:da:f4:ef:fa:e6:06:98:28:59:8b:89:dc:8e:17:
                    3e:10:c6:36:49:26:29:a7:f4:4c:4d:24:9c:2d:65:
                    af:71:c1:4b:fa:d7:c4:dc:7d:41:88:6c:d9:12:82:
                    4d:aa:78:f5:f1:dc:c3:d1:bf:42:8e:dd:fa:a3:af:
                    26:a0:9d:5f:5e:7f:67:0d:26:73:34:d6:ee:fc:ed:
                    b1:a0:01:ff:68:d6:28:c7:26:4c:ff:88:4c:f2:d3:
                    ab:cd:64:9f:5a:b9:df:03:e1:6b:d9:7e:77:e5:fd:
                    b2:44:33:15:84:d5:96:db:59:67:86:98:cd:5e:6c:
                    57:a7:bc:4f:52:e6:31:86:99:28:a6:8b:2b:4b:88:
                    73:01:ec:b8:b8:fc:9f:9c:50:03:5d:27:66:97:fd:
                    61:20:1a:0a:40:b2:1b:82:7a:88:60:ff:80:40:74:
                    bc:e2:43:2b:c9:b4:de:17:95:e8:13:dc:4f:b5:35:
                    fb:e5:3d:00:74:0f:8f:4e:a0:e1:93:90:6d:d3:19:
                    93:90:ac:f5:34:ae:d1:b4:d0:c1:72:56:97:73:7e:
                    08:17:90:b9:b9:a0:b3:7b:10:ae:33:ab:4c:9b:ba:
                    95:fa:6d:76:d8:6f:1f:3c:e2:7a:ed:b2:57:f8:e6:
                    76:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:4C:06:9B:6E:43:9C:1D:04:54:67:94:8A:3F:07:C6:DC:87:85:29
            X509v3 Authority Key Identifier:
                keyid:D0:42:65:FB:11:C2:A2:20:BC:35:07:18:67:3E:07:04:D1:ED:AD:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EJl-xHCoiC8NQcYZz4HBNHtrd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/fa73f8-33e0-4032-84ec-a96ef6f6435c/1/0EJl-xHCoiC8NQcYZz4HBNHtrd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ec:9c:81:cf:f4:35:32:18:58:a7:c1:f9:53:d3:75:1c:31:
         7e:bb:31:23:2f:99:0e:2c:f8:0a:81:c1:58:b2:81:88:a6:51:
         41:2f:74:9b:d2:31:86:03:a0:67:ef:92:0d:14:40:07:9e:2f:
         1a:3f:d2:ce:1f:21:25:92:d7:56:31:11:8c:68:03:7d:8d:43:
         cf:bf:d8:fa:1a:6c:55:c2:8f:b3:d7:c7:6c:99:41:48:e4:7f:
         3b:db:01:76:9f:06:0c:a7:5d:10:f0:1a:06:fb:3a:f1:fc:c3:
         8c:ab:83:1c:9b:3e:ba:ed:2b:6d:99:be:20:be:10:a1:8d:4f:
         da:d3:65:61:8f:34:4e:3c:c3:00:64:c1:88:0a:f2:69:ac:0e:
         54:52:c6:b6:56:a4:8a:af:27:4b:97:a1:20:7f:46:ae:d7:ca:
         61:a9:dd:8d:a4:1a:9c:47:3e:bb:11:d0:73:7a:b0:d2:71:a3:
         be:75:a5:d6:9e:36:f4:3a:b1:55:8f:d9:58:17:90:43:28:b2:
         2a:16:05:08:cd:29:76:0f:08:57:a1:fc:7a:2a:ba:e9:5b:01:
         40:f8:54:9e:5a:19:d3:52:61:ce:90:bc:0d:bf:96:a0:89:d2:
         d2:af:8b:ba:26:6c:b3:45:72:40:6c:12:62:9d:95:85:76:c1:
         dd:77:4d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:00:36 2026 by rpki-client