Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
File:                     0mepGaXTLOov1ByKnhhRC__86NY.mft (raw, json)
Hash identifier:          3RKw6W+tWP1KBo11TKTl8R8Hhd9LfgG+/0Oo4zJM8v4=
Subject key identifier:   AB:6E:9F:7D:92:D7:A5:9C:C0:46:DF:05:A4:ED:5C:E0:92:C0:7E:05
Authority key identifier: D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6
Certificate issuer:       /CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
Certificate serial:       01A0CDB62932B7435DE8BB40D60E23B27AA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
Manifest number:          14D9
Signing time:             Wed 23 Sep 2026 10:01:02 +0000
Manifest this update:     Wed 23 Sep 2026 10:01:02 +0000
Manifest next update:     Thu 24 Sep 2026 10:01:02 +0000
Files and hashes:         1: 0mepGaXTLOov1ByKnhhRC__86NY.crl (hash: bK7G8zteH6IhTdI1ZeVmj8jGCLgg6OQNvJt2Kc1fQPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:b6:29:32:b7:43:5d:e8:bb:40:d6:0e:23:b2:7a:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d267a919a5d32cea2fd41c8a9e18510bfffce8d6
        Validity
            Not Before: Sep 23 10:01:02 2026 GMT
            Not After : Sep 24 10:01:02 2026 GMT
        Subject: CN=ab6e9f7d92d7a59cc046df05a4ed5ce092c07e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:da:85:13:94:60:e5:e6:b8:95:66:44:d7:
                    97:df:d8:82:db:48:f5:4a:9e:0f:f9:a6:fc:47:42:
                    d5:25:3a:8b:ad:28:1c:d2:68:b8:b2:da:4e:6e:5f:
                    14:cc:e7:3e:2e:06:24:b4:46:87:5d:4b:e2:7b:a9:
                    9c:c7:09:5e:a9:b5:61:8a:f3:5c:0f:d0:3d:99:94:
                    e5:0e:ae:43:36:4c:df:12:40:c6:e5:f3:7d:e1:c1:
                    a2:a2:14:e5:bf:35:d7:04:60:fa:c1:9b:b2:64:fe:
                    5a:a9:be:c2:6c:73:23:1d:62:ef:74:79:58:18:b3:
                    0e:ba:6c:2a:06:d2:0a:68:6b:54:86:8d:af:0b:03:
                    1b:7b:c7:cd:5e:25:11:89:66:7f:66:fd:63:fb:bd:
                    a6:f2:88:e5:db:b4:94:4c:81:ef:4c:0e:f8:60:e0:
                    e9:07:ad:a0:5c:91:8b:17:b0:85:1f:02:73:ad:78:
                    f9:a8:69:e6:be:e2:c2:57:de:07:48:04:ac:3a:be:
                    12:ad:d8:9a:2c:c5:8f:d4:f2:b5:32:9e:74:f0:38:
                    a5:b6:7f:bd:c8:04:dd:a4:23:81:de:1e:aa:20:53:
                    bf:f9:7a:9e:d9:99:08:37:2c:61:e7:1b:38:86:ab:
                    81:de:2d:30:6a:82:7c:3b:7d:d1:28:51:46:e0:97:
                    d1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6E:9F:7D:92:D7:A5:9C:C0:46:DF:05:A4:ED:5C:E0:92:C0:7E:05
            X509v3 Authority Key Identifier:
                keyid:D2:67:A9:19:A5:D3:2C:EA:2F:D4:1C:8A:9E:18:51:0B:FF:FC:E8:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mepGaXTLOov1ByKnhhRC__86NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/eeafef-3852-4e36-8c81-9372267cf951/1/0mepGaXTLOov1ByKnhhRC__86NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:30:6e:d8:61:70:4f:e9:1a:55:1b:de:33:33:5d:da:91:f8:
         ea:fa:0c:8b:75:ab:06:f8:4a:bf:3e:d4:c6:00:bf:d4:09:07:
         78:bf:ab:0c:80:78:b9:a5:95:c7:1a:e1:2a:32:dc:72:62:5d:
         49:6f:1c:68:80:e4:4d:bc:6f:51:58:6e:46:15:d5:3c:91:46:
         4d:50:03:36:89:f7:54:85:24:3a:ff:ca:c6:25:e0:23:be:ac:
         0a:55:0a:e1:28:51:db:86:47:40:b5:4e:e4:e2:f0:98:7e:1a:
         ec:5c:a8:71:e1:f4:18:ed:87:72:3b:13:cd:6c:4e:9a:e7:81:
         d4:ca:38:a4:4c:18:3b:7b:5a:69:ba:f4:8c:9a:ab:f4:87:ba:
         56:1f:6f:98:83:d7:9e:6b:92:a3:cd:4f:33:fe:6e:21:86:3a:
         de:0c:59:20:31:49:16:66:6c:d4:35:4f:74:45:b5:a1:33:8e:
         fe:46:32:24:dd:24:81:da:75:89:8d:11:e0:ff:02:8a:49:62:
         7d:54:78:8b:cb:68:6c:a5:0f:ba:2d:db:0f:a6:f1:12:41:fc:
         12:81:d3:84:96:bb:04:b6:d8:54:d8:ff:03:0a:f2:36:f0:21:
         c4:7b:57:ce:16:8b:84:9d:d9:40:7c:17:67:90:82:26:5d:3e:
         24:32:d7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:08:07 2026 by rpki-client