Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
File:                     7uTEl10mDZew0zxNbNDVh_EMIqA.mft (raw, json)
Hash identifier:          afC+UAT5OkATL/E5mZk+fV/VEe0p8DWL+OLyy6Cwv7w=
Subject key identifier:   0A:B5:36:07:AD:3E:49:37:70:7C:31:37:A5:C4:FA:F8:C9:50:BA:45
Authority key identifier: EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0
Certificate issuer:       /CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
Certificate serial:       01A0D192FC32057B604BF752491998DA0CE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
Manifest number:          1A59
Signing time:             Thu 24 Sep 2026 04:01:05 +0000
Manifest this update:     Thu 24 Sep 2026 04:01:05 +0000
Manifest next update:     Fri 25 Sep 2026 04:01:05 +0000
Files and hashes:         1: 7uTEl10mDZew0zxNbNDVh_EMIqA.crl (hash: lQoANwdBZ4QfPO5uz7AY75COOLjRCa1y5RjOfK/MgHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 04:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:92:fc:32:05:7b:60:4b:f7:52:49:19:98:da:0c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eee4c4975d260d97b0d33c4d6cd0d587f10c22a0
        Validity
            Not Before: Sep 24 04:01:05 2026 GMT
            Not After : Sep 25 04:01:05 2026 GMT
        Subject: CN=0ab53607ad3e4937707c3137a5c4faf8c950ba45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:91:0e:55:b9:86:df:f2:56:93:f5:6b:e8:22:
                    93:98:8d:82:cc:8a:0f:ee:6f:2f:f6:08:92:d3:c2:
                    84:5f:8e:8a:43:02:6f:ef:2a:5b:99:f2:f5:7c:1d:
                    ec:07:87:2d:f5:a3:8b:5b:4b:8a:9c:df:87:76:1d:
                    da:63:74:1b:ba:12:72:f9:56:d6:65:d7:9b:e0:f9:
                    bd:ad:ac:46:46:39:e6:c0:1b:9c:ac:9c:a7:da:fc:
                    c9:a8:7e:a4:be:2d:15:79:12:46:70:56:fb:26:96:
                    69:a2:25:4d:73:22:7f:68:ee:c6:17:e6:41:e5:ee:
                    d9:4e:5a:bc:2f:b1:96:ad:95:bd:79:36:bf:91:4e:
                    e8:ca:fa:85:73:ac:2c:8e:3d:5c:85:f7:da:fb:7a:
                    2d:e7:94:e0:20:f7:a9:85:25:50:fd:f6:7c:14:09:
                    3c:e3:52:b6:fb:a1:5e:87:85:4c:c6:01:37:2e:7b:
                    dd:61:09:98:e6:75:57:81:27:50:ed:0a:40:1a:55:
                    55:e6:7d:b0:ef:9e:43:b0:c3:6f:0a:01:63:61:da:
                    0f:80:fa:8f:da:e1:59:aa:cb:37:db:56:78:ae:87:
                    7a:44:02:25:7e:c6:b0:0b:80:44:1f:cb:28:fd:d5:
                    40:3f:58:13:f8:d5:fa:98:ae:b6:d6:c9:2a:f2:26:
                    14:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:B5:36:07:AD:3E:49:37:70:7C:31:37:A5:C4:FA:F8:C9:50:BA:45
            X509v3 Authority Key Identifier:
                keyid:EE:E4:C4:97:5D:26:0D:97:B0:D3:3C:4D:6C:D0:D5:87:F1:0C:22:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7uTEl10mDZew0zxNbNDVh_EMIqA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e84bfc-8a36-4409-8dcc-432d3fb0fc22/1/7uTEl10mDZew0zxNbNDVh_EMIqA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:b3:25:97:cd:be:9c:10:bf:94:fc:44:db:ff:1b:b2:98:0b:
         06:3b:67:3c:35:3d:ab:18:97:89:50:90:9c:58:1a:b7:a7:d0:
         bf:e1:2d:9d:cf:05:af:1c:64:27:42:5f:69:6b:34:03:2b:75:
         88:5d:08:e2:1c:23:b3:72:96:36:61:88:e7:09:fe:44:eb:06:
         20:29:bb:be:11:f7:8d:ae:54:95:c7:13:98:49:e5:16:ea:49:
         77:6c:99:fd:0b:76:ac:fa:50:af:a3:be:f5:bd:14:b4:c0:78:
         55:54:78:83:2b:d7:5d:06:e7:ca:26:19:1e:1d:3b:fb:20:86:
         67:20:1b:17:dc:42:2b:f0:fb:b9:ed:cb:2b:d2:36:82:91:7f:
         50:6c:32:48:ce:a6:3b:92:8c:51:99:ad:76:e4:ec:9a:d0:2d:
         97:56:c2:f8:9d:02:af:30:b1:7f:83:d6:9e:2d:65:ac:1c:c1:
         1b:04:bb:c7:d5:66:65:d4:11:fe:38:0a:2b:10:45:4e:45:ca:
         a9:34:5d:dd:f5:65:b2:23:80:fb:d1:10:7b:1b:8c:70:a1:39:
         31:81:fe:36:47:90:57:84:43:88:9f:a0:2e:7e:da:1e:f2:20:
         ef:06:ca:50:3e:42:d8:5b:32:e1:10:03:13:60:01:7a:fd:27:
         05:de:ce:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:06:39 2026 by rpki-client