Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
File:                     69xd5v5ftQVVoFyXxbDdR369C_U.mft (raw, json)
Hash identifier:          OQ7qYo3TKaebvfiIO7LWisrQOAnMAPh87HD1B3xF4Is=
Subject key identifier:   C2:88:46:2C:F2:2E:1A:87:BA:AC:26:F6:52:9F:08:77:7C:48:38:84
Authority key identifier: EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5
Certificate issuer:       /CN=ebdc5de6fe5fb50555a05c97c5b0dd477ebd0bf5
Certificate serial:       01A0E2F567597F9550761FD7E6B23D3B6E22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
Manifest number:          1A70
Signing time:             Sun 27 Sep 2026 13:02:08 +0000
Manifest this update:     Sun 27 Sep 2026 13:02:08 +0000
Manifest next update:     Mon 28 Sep 2026 13:02:08 +0000
Files and hashes:         1: 69xd5v5ftQVVoFyXxbDdR369C_U.crl (hash: UIv2A5V24ZghlYir6Nnr3XIq1XZNS04tmInz2PG+0FU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 13:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e2:f5:67:59:7f:95:50:76:1f:d7:e6:b2:3d:3b:6e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebdc5de6fe5fb50555a05c97c5b0dd477ebd0bf5
        Validity
            Not Before: Sep 27 13:02:08 2026 GMT
            Not After : Sep 28 13:02:08 2026 GMT
        Subject: CN=c288462cf22e1a87baac26f6529f08777c483884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:62:78:17:79:24:f1:f9:ce:83:0f:66:60:e4:
                    b1:10:ac:ac:ff:a0:52:20:d5:e4:19:c7:08:dd:27:
                    9f:cf:39:22:f3:6c:eb:e0:01:72:ca:fd:a1:eb:9f:
                    54:6c:12:cf:13:4d:6a:6e:dc:8b:f2:11:63:46:1f:
                    06:8a:19:db:9c:ad:f7:50:27:82:26:85:2b:be:54:
                    6b:f9:c7:6e:e6:7b:0f:8f:70:b1:4d:fe:e7:88:93:
                    9d:c9:a9:b9:87:16:f3:ac:5e:aa:0f:fa:de:d7:f0:
                    ac:51:90:f7:2e:5e:17:e7:2f:5b:c6:28:46:f6:c9:
                    b3:1e:62:09:b0:fa:e0:da:d6:76:b8:05:11:f3:d7:
                    a4:81:46:fe:08:b3:6f:7b:7e:46:dd:b2:cd:c2:cd:
                    be:a0:ac:ac:27:a6:a0:ab:e3:7b:08:82:d0:fd:f1:
                    55:46:aa:11:45:48:40:61:54:f0:fb:10:66:4b:d3:
                    2d:14:84:63:ef:87:39:59:0a:19:bc:7b:9e:5b:c0:
                    28:72:85:e0:8d:9d:d5:73:fa:92:e6:24:20:91:6c:
                    8c:d9:19:02:f8:c2:e9:45:01:4d:90:fc:4d:a4:2f:
                    fb:66:f6:99:a2:b6:00:b6:7e:75:7b:39:02:03:71:
                    01:d9:94:58:ac:c9:94:8a:70:01:de:0e:32:ff:c7:
                    cf:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:88:46:2C:F2:2E:1A:87:BA:AC:26:F6:52:9F:08:77:7C:48:38:84
            X509v3 Authority Key Identifier:
                keyid:EB:DC:5D:E6:FE:5F:B5:05:55:A0:5C:97:C5:B0:DD:47:7E:BD:0B:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69xd5v5ftQVVoFyXxbDdR369C_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4a668-fbd6-4553-ae9f-0bbb2381ba88/1/69xd5v5ftQVVoFyXxbDdR369C_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6e:97:fb:fb:80:d6:26:62:01:59:5e:85:4b:80:9f:b1:df:
         1d:d2:70:c4:5a:7d:74:47:51:fe:8a:b1:b9:c5:a9:62:b6:ea:
         50:71:eb:c9:e3:79:56:9c:62:db:a5:87:4c:5d:93:25:ea:31:
         72:d0:16:63:cb:f0:39:51:57:57:c5:f1:29:f5:1c:71:da:94:
         da:9d:d6:0f:62:da:76:7e:de:49:e8:c3:e6:3d:e1:8e:7d:f6:
         33:36:38:83:56:ca:5a:93:ea:60:a2:25:a8:6a:d2:7f:a0:8e:
         46:54:60:36:e3:1d:e7:3d:9f:6e:86:23:d4:4b:ce:16:2a:ea:
         de:7c:d2:b2:c8:04:f4:ca:14:fc:df:ab:68:c7:ff:1b:11:f3:
         e1:d2:04:58:4b:73:fb:42:ee:55:87:ef:d7:6a:ce:98:6a:3d:
         0c:25:3f:96:79:35:26:33:c7:4d:41:4d:e6:6a:b8:2c:6a:20:
         6d:fc:48:76:5c:9f:45:46:8b:2e:f7:e3:43:f1:5a:a8:48:06:
         4e:ee:17:ec:f1:9a:2b:d1:d6:93:c0:e7:21:ab:c2:64:37:9f:
         75:96:4b:1e:4c:45:c1:77:30:b7:0a:be:c6:e1:93:c6:6d:01:
         93:ca:2a:bf:ed:66:16:7e:08:90:75:40:e9:80:7f:68:97:e9:
         5a:55:cf:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 00:54:44 2026 by rpki-client