Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
File:                     etB83meC_U_FaIV-hIRlW1AkhxA.mft (raw, json)
Hash identifier:          myYfZo/PZChX1A/xDo35APHF7Tfuhqgp3gVVLxrdkiI=
Subject key identifier:   AB:43:A8:F1:FD:8F:3A:53:25:03:30:B4:F3:0D:2B:AF:06:93:7E:07
Authority key identifier: 7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10
Certificate issuer:       /CN=7ad07cde6782fd4fc568857e8484655b50248710
Certificate serial:       01A0CE5AD9C8461E4614370B36976C0132DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
Manifest number:          087F
Signing time:             Wed 23 Sep 2026 13:00:55 +0000
Manifest this update:     Wed 23 Sep 2026 13:00:55 +0000
Manifest next update:     Thu 24 Sep 2026 13:00:55 +0000
Files and hashes:         1: eCo9qXRcDZLgJlgoHLS9NExTbx4.roa (hash: BYg8Ba7NDfA7mgNndMx+S8c/mZhCBPail+1jI3QYxnk=)
                          2: etB83meC_U_FaIV-hIRlW1AkhxA.crl (hash: pSojYF8OT2tlTVwsyKLmUIDb/mHlsakaSQuzGJccnbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:5a:d9:c8:46:1e:46:14:37:0b:36:97:6c:01:32:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ad07cde6782fd4fc568857e8484655b50248710
        Validity
            Not Before: Sep 23 13:00:55 2026 GMT
            Not After : Sep 24 13:00:55 2026 GMT
        Subject: CN=ab43a8f1fd8f3a53250330b4f30d2baf06937e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:28:0c:f4:b5:51:4c:c0:16:6e:6b:f6:e3:be:
                    78:33:ce:49:92:46:e5:6d:32:72:3a:23:75:3a:47:
                    4f:a4:9d:28:6d:1e:e3:59:54:aa:77:7d:a8:20:6d:
                    d0:21:2e:53:a1:d4:b5:2a:13:e3:b1:ec:40:60:4e:
                    bf:a3:39:1a:db:43:81:d6:a7:c2:70:5a:02:a8:1d:
                    18:b6:ea:6c:ca:61:b8:61:ba:9a:40:d5:06:4d:77:
                    1d:4d:82:1f:c8:dc:ff:98:8b:5a:34:c9:a1:08:04:
                    7f:c3:ac:02:c1:41:9e:cd:cd:66:50:37:fe:7d:33:
                    18:0c:9a:e1:b0:2f:fa:09:d5:f5:58:a1:43:7c:8c:
                    d9:4f:39:6b:fc:51:66:ae:e5:64:e6:d8:2c:da:34:
                    db:ef:2b:f2:7a:c9:a3:33:de:62:37:4e:10:21:72:
                    08:a0:4d:e8:ab:fc:dc:b8:2f:6e:8a:76:80:13:36:
                    f2:44:76:53:e8:7f:8f:f7:eb:2b:83:96:67:96:19:
                    19:24:b1:bb:18:b3:1a:07:60:6a:4c:ba:9b:de:fb:
                    2b:8a:f8:b6:99:6b:fb:46:4c:35:92:c8:8d:a8:f9:
                    45:59:2e:da:41:64:cb:52:e2:e3:4c:0f:74:74:6e:
                    4a:70:fe:82:66:12:0f:4b:f7:f1:2d:1d:a4:25:68:
                    af:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:43:A8:F1:FD:8F:3A:53:25:03:30:B4:F3:0D:2B:AF:06:93:7E:07
            X509v3 Authority Key Identifier:
                keyid:7A:D0:7C:DE:67:82:FD:4F:C5:68:85:7E:84:84:65:5B:50:24:87:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/etB83meC_U_FaIV-hIRlW1AkhxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/c95baf-01b8-479f-90bd-05a1d5cb8eeb/1/etB83meC_U_FaIV-hIRlW1AkhxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a5:04:b1:d6:08:c0:77:74:73:0c:0d:c0:a9:19:79:ca:d4:
         10:b5:08:ed:42:99:b3:8a:66:01:75:1b:eb:30:44:46:98:ca:
         b6:43:f6:1b:89:2c:87:7c:8e:03:ea:50:a6:54:68:80:7a:ce:
         d5:de:68:71:9f:8b:29:d9:68:9f:3e:f9:40:63:7f:93:75:87:
         6b:25:bd:a4:88:15:90:79:a3:89:ce:55:f7:85:20:fa:76:f2:
         27:a3:27:04:59:2e:55:e9:ca:1a:00:b3:02:76:0c:b7:b4:93:
         62:2b:11:a3:77:f7:64:7e:bc:6c:9f:bc:d5:4b:f2:b4:e9:f9:
         86:78:b6:ed:93:ea:78:74:b1:20:69:39:c0:8a:23:28:e2:ed:
         50:04:d6:17:e4:3b:df:33:87:fc:21:fc:dd:cd:3d:ef:d0:a4:
         cf:32:26:92:39:fe:c9:77:a9:ae:cb:2f:6d:db:57:6f:5f:67:
         90:56:87:21:c8:68:e3:76:5e:6e:0f:6c:86:97:a1:0f:ca:b9:
         8b:08:64:ec:6a:a9:0e:a9:1f:c3:8f:0e:49:eb:67:2a:12:7f:
         23:0b:e8:4c:1f:8d:05:ef:ee:26:42:9b:c2:3e:0a:3a:39:ff:
         f9:8d:9f:90:c7:2c:7a:b8:e4:c5:27:f8:53:c4:1a:dc:7b:ee:
         43:c2:0a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:19:35 2026 by rpki-client