Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
File:                     68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft (raw, json)
Hash identifier:          m2/AGzOG13PPZHlU/SdgFuHS99Oii2QjK9eWCog4aSg=
Subject key identifier:   60:B5:00:F5:5F:01:AA:77:E3:37:4F:83:C2:3B:AC:66:55:BB:32:86
Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
Certificate issuer:       /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Certificate serial:       01A0D1C991FD08EF58C5CED11C6126F7AEC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
Manifest number:          1379
Signing time:             Thu 24 Sep 2026 05:00:43 +0000
Manifest this update:     Thu 24 Sep 2026 05:00:43 +0000
Manifest next update:     Fri 25 Sep 2026 05:00:43 +0000
Files and hashes:         1: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl (hash: VqVA1kHq6I+AndQYOvx81Hd5SR394dNPaXr8gJXziBg=)
                          2: srgFShOceYZc8BEx-4KRd7_dBNs.roa (hash: s6LZiMCYlJdzG+ZeLeEfHIvrSApv9TQoNoxc3N5VXmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:c9:91:fd:08:ef:58:c5:ce:d1:1c:61:26:f7:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
        Validity
            Not Before: Sep 24 05:00:43 2026 GMT
            Not After : Sep 25 05:00:43 2026 GMT
        Subject: CN=60b500f55f01aa77e3374f83c23bac6655bb3286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:02:d9:07:af:f7:a0:df:3e:67:16:c3:47:ee:
                    8e:8d:ca:69:51:90:77:b3:89:f8:92:3d:f6:ea:a2:
                    dc:99:c9:d7:f0:b9:a1:ab:3b:9a:cf:b9:ea:51:59:
                    a8:a5:72:b4:3f:4c:53:56:09:04:a1:6f:3a:47:fc:
                    95:1f:ce:c8:08:93:ac:9c:38:58:22:2e:75:ea:2e:
                    8d:2c:9e:3a:98:7b:1b:94:a2:9a:b0:08:d0:18:9d:
                    36:f0:03:bb:56:3a:48:f2:9c:4f:f0:60:b1:25:31:
                    c6:21:8d:0a:7f:00:ac:70:c2:df:07:22:1c:74:a4:
                    c5:ea:bc:0e:4d:09:57:15:f7:79:ba:2e:37:d7:90:
                    3e:8c:23:b4:ab:59:90:74:55:80:7a:26:6d:66:38:
                    08:29:e2:b1:32:b2:31:90:d1:79:c4:33:04:6a:5e:
                    2b:0c:b2:00:b9:27:60:af:8f:02:c2:9b:1c:65:68:
                    ba:da:c1:0b:17:95:e3:fe:1e:e5:55:a9:8f:b1:c2:
                    6d:da:4e:78:de:c9:bc:b2:3d:b0:e3:56:1b:90:89:
                    28:83:dc:c3:57:c1:3a:dd:71:b0:15:8d:4d:fe:f9:
                    27:03:1a:5e:db:ae:c5:26:2a:69:b4:72:4d:92:26:
                    99:24:6b:f7:3f:9a:0e:c4:7e:f6:13:0e:de:d0:51:
                    3b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:B5:00:F5:5F:01:AA:77:E3:37:4F:83:C2:3B:AC:66:55:BB:32:86
            X509v3 Authority Key Identifier:
                keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:83:b7:1c:74:d7:e7:b9:9c:bd:de:e0:88:a3:a6:b5:e1:1b:
         f4:7b:5c:8f:c8:eb:2e:ed:f1:18:58:06:44:1b:89:06:79:e3:
         01:53:6a:ba:df:ae:4e:4a:f0:4e:73:49:76:93:c9:ce:7c:5f:
         0b:ba:61:f6:bd:01:87:ff:2a:8d:93:f7:1e:34:fd:41:ad:7c:
         d8:22:ce:a4:59:6e:97:7e:21:a3:bb:99:73:7f:82:7c:a3:c9:
         0e:41:bf:86:24:06:a1:9a:b7:22:5b:53:0b:91:f7:59:b6:28:
         9b:5d:a2:57:d6:ff:e7:a1:51:49:ad:09:6c:b7:02:06:8d:50:
         57:e1:ef:8c:63:b2:1a:0f:d0:3b:2d:04:6c:f8:10:b2:fd:cf:
         29:c3:40:02:cd:50:4e:bd:d1:be:08:c2:40:a7:af:01:57:86:
         05:ab:98:ad:a4:88:a2:90:86:4c:1e:bf:ac:86:62:ce:37:7e:
         56:d4:6f:40:e7:fc:97:0c:49:65:1c:f3:26:37:55:e5:ab:95:
         41:92:3a:50:93:27:1f:7c:43:c9:23:35:02:90:c3:5c:e0:56:
         09:ff:37:39:96:1d:10:c8:d7:4d:78:ba:28:5a:95:86:07:fc:
         5f:7e:fe:95:ad:91:22:19:df:42:c6:30:95:c0:95:4c:eb:0a:
         07:55:f5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:02:52 2026 by rpki-client