Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/39fd10-cf6a-4b1c-a59c-3132f9d046d5/1/63UBv3rwTh4I6_vbonjg0W1CW9c.mft
File:                     63UBv3rwTh4I6_vbonjg0W1CW9c.mft (raw, json)
Hash identifier:          7s/HyoDTouN06YKBPPwL8kJ0+63nZGVBmyl8niwMXuI=
Subject key identifier:   5C:47:AC:B1:29:62:C5:4D:55:D6:BB:BC:70:03:50:64:0A:73:A0:C0
Authority key identifier: EB:75:01:BF:7A:F0:4E:1E:08:EB:FB:DB:A2:78:E0:D1:6D:42:5B:D7
Certificate issuer:       /CN=eb7501bf7af04e1e08ebfbdba278e0d16d425bd7
Certificate serial:       01A0CE9179865AD4D4298B5D234FCA54D14B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/63UBv3rwTh4I6_vbonjg0W1CW9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/39fd10-cf6a-4b1c-a59c-3132f9d046d5/1/63UBv3rwTh4I6_vbonjg0W1CW9c.mft
Manifest number:          5F
Signing time:             Wed 23 Sep 2026 14:00:35 +0000
Manifest this update:     Wed 23 Sep 2026 14:00:35 +0000
Manifest next update:     Thu 24 Sep 2026 14:00:35 +0000
Files and hashes:         1: 63UBv3rwTh4I6_vbonjg0W1CW9c.crl (hash: qFCrasD3q6veM8UkBxh3GOWJR4TByyYqX91qIe1EK3U=)
                          2: ChNK3fRrKbRSzgw7XzuOU1JR6HE.asa (hash: m4RidxlDF1wU72mLEIHFPcJqrp2HokrCVXREkXVb1YM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/39fd10-cf6a-4b1c-a59c-3132f9d046d5/1/63UBv3rwTh4I6_vbonjg0W1CW9c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/39fd10-cf6a-4b1c-a59c-3132f9d046d5/1/63UBv3rwTh4I6_vbonjg0W1CW9c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/63UBv3rwTh4I6_vbonjg0W1CW9c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:91:79:86:5a:d4:d4:29:8b:5d:23:4f:ca:54:d1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb7501bf7af04e1e08ebfbdba278e0d16d425bd7
        Validity
            Not Before: Sep 23 14:00:35 2026 GMT
            Not After : Sep 24 14:00:35 2026 GMT
        Subject: CN=5c47acb12962c54d55d6bbbc700350640a73a0c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:66:02:6c:d6:b6:4b:64:fe:bb:00:bc:4d:
                    6c:a2:34:53:31:09:ad:9f:37:5c:ca:95:f2:6a:e3:
                    01:c1:d7:64:48:6d:b1:00:bc:2a:d9:fc:5c:fa:97:
                    b9:89:81:5e:9f:27:02:64:11:14:17:16:65:2f:25:
                    bd:1f:76:e1:c3:85:50:fa:57:69:34:3d:22:28:47:
                    de:64:d0:b6:93:59:e9:94:13:ec:c5:0c:f2:df:75:
                    61:6b:c7:f4:6e:e3:38:19:a8:82:f8:b3:d9:ed:49:
                    0c:46:8e:34:25:f7:2a:a1:f9:49:09:ca:06:65:ac:
                    03:30:e0:29:d8:b9:c4:70:1c:5e:45:97:fa:82:23:
                    75:78:bc:41:b3:1b:4a:fb:0e:5e:e3:f3:2e:6b:d1:
                    03:de:db:71:4f:e5:94:a4:e6:37:f2:e6:df:51:12:
                    fa:d6:1d:c5:df:83:e5:4f:b6:6a:ea:46:53:57:58:
                    7d:5b:02:ea:f0:96:16:3d:eb:9e:03:36:d7:5a:f7:
                    13:97:93:6b:f0:f4:92:14:2d:28:04:4f:5c:59:c8:
                    1c:5a:f6:b8:92:48:42:4f:12:d9:00:5b:10:88:ec:
                    cf:c7:5f:51:e0:c3:40:da:47:38:2a:f9:92:12:65:
                    81:eb:de:3a:b2:f3:c6:64:1c:df:16:bd:73:c3:2d:
                    59:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:47:AC:B1:29:62:C5:4D:55:D6:BB:BC:70:03:50:64:0A:73:A0:C0
            X509v3 Authority Key Identifier:
                keyid:EB:75:01:BF:7A:F0:4E:1E:08:EB:FB:DB:A2:78:E0:D1:6D:42:5B:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63UBv3rwTh4I6_vbonjg0W1CW9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39fd10-cf6a-4b1c-a59c-3132f9d046d5/1/63UBv3rwTh4I6_vbonjg0W1CW9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/39fd10-cf6a-4b1c-a59c-3132f9d046d5/1/63UBv3rwTh4I6_vbonjg0W1CW9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:40:95:f9:a5:f9:8c:4a:6e:2e:c8:45:70:8d:5e:9d:0a:a2:
         f5:c8:ee:ff:eb:71:3d:73:d3:5a:93:2d:09:0f:95:83:00:ed:
         bd:8d:1c:49:1a:74:a5:8d:d1:d4:59:dc:22:7c:68:2c:10:66:
         b1:c6:6a:92:b3:d8:00:20:f3:cf:9b:83:8b:20:c1:8e:5d:93:
         95:31:c4:2f:ad:c2:bf:a8:fe:c2:c8:b5:8c:23:39:2c:c8:67:
         6c:38:b7:04:b9:50:a2:d9:e0:3b:22:0d:7e:98:6e:69:13:1d:
         77:63:a0:12:da:ef:53:16:25:c2:d4:cb:f3:62:d9:8d:20:72:
         4a:4e:4f:5d:36:1d:82:45:25:1f:99:2d:f0:a3:16:ca:18:be:
         03:bd:58:0a:03:4a:54:bf:e4:27:a1:74:5d:92:2e:2f:66:cb:
         1c:6b:8c:df:08:b0:fb:06:40:05:f9:60:80:c2:da:a2:ed:7e:
         d2:24:bf:c4:06:9e:5b:46:91:11:f5:1b:36:2f:ec:62:6a:72:
         5c:f1:51:62:17:4c:49:53:c6:e8:16:e3:c0:ff:7e:18:52:dc:
         11:88:6a:46:b9:52:d0:76:1d:3c:81:d5:cc:3f:2b:20:2c:69:
         34:f4:11:60:b9:cc:7b:f3:a8:a3:34:2b:9a:6a:50:7a:ae:c9:
         ee:9d:bb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:54:29 2026 by rpki-client