Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
File:                     1-UPazrEkL_c3jI93uUDcUM03Qiw.mft (raw, json)
Hash identifier:          i42FfjqVIIonspG+CQmMj89qbMKNdWf5i0eP/s8JflQ=
Subject key identifier:   E2:79:67:B9:2F:92:6F:5F:F8:46:ED:F2:55:23:30:19:FE:E8:A1:71
Authority key identifier: F9:43:DA:CE:B1:24:2F:F7:37:8C:8F:77:B9:40:DC:50:CD:37:42:2C
Certificate issuer:       /CN=f943daceb1242ff7378c8f77b940dc50cd37422c
Certificate serial:       01A0CEC7EFC136AECE55F762BC18B07A5434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
Manifest number:          02A3
Signing time:             Wed 23 Sep 2026 15:00:04 +0000
Manifest this update:     Wed 23 Sep 2026 15:00:04 +0000
Manifest next update:     Thu 24 Sep 2026 15:00:04 +0000
Files and hashes:         1: 1-UPazrEkL_c3jI93uUDcUM03Qiw.crl (hash: GLE3o1gjinoSfzhPS7P6QU4mNewn3mUY/2SVz8ustAU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:c7:ef:c1:36:ae:ce:55:f7:62:bc:18:b0:7a:54:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f943daceb1242ff7378c8f77b940dc50cd37422c
        Validity
            Not Before: Sep 23 15:00:04 2026 GMT
            Not After : Sep 24 15:00:04 2026 GMT
        Subject: CN=e27967b92f926f5ff846edf255233019fee8a171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a0:b3:da:54:35:ef:b2:de:e0:74:6a:62:b9:
                    f2:dc:e3:04:3a:27:e4:2e:f8:88:58:96:d1:66:c6:
                    d1:ba:08:34:b1:56:fd:9a:3c:32:59:ae:a0:06:80:
                    af:12:97:a8:7c:72:16:aa:ca:6c:f2:a1:ad:de:e1:
                    22:bf:6d:e7:28:ad:5c:6d:9f:3a:27:e5:0f:44:fc:
                    95:6e:84:2c:42:aa:3d:70:17:6d:f4:9b:60:c5:02:
                    b4:1d:49:8b:32:9f:94:e5:09:5b:99:da:bb:f3:c6:
                    15:e3:17:dc:12:4b:32:c0:31:df:2e:55:b4:34:02:
                    c6:14:e4:22:8f:bd:7a:2f:f4:81:b3:77:0a:21:9a:
                    b7:58:d2:b2:48:70:b6:17:3a:44:b8:48:dd:3e:8e:
                    f7:98:9e:43:34:80:0b:b6:f2:ac:d8:06:36:83:0a:
                    1d:15:27:3d:71:d3:af:f6:24:64:5f:92:79:6e:54:
                    0b:37:e3:52:66:e6:44:34:b0:d6:a4:7b:f8:5b:b3:
                    8e:c4:a7:97:52:38:f7:ab:d5:1e:c6:55:f4:49:58:
                    f9:89:1e:18:af:e4:89:98:90:da:80:88:ee:72:5f:
                    6c:ce:d1:d8:f7:7e:61:1f:f7:24:8b:02:ff:02:c4:
                    33:db:4b:8e:77:5a:d3:fc:90:da:ea:c5:da:a6:e1:
                    02:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:79:67:B9:2F:92:6F:5F:F8:46:ED:F2:55:23:30:19:FE:E8:A1:71
            X509v3 Authority Key Identifier:
                keyid:F9:43:DA:CE:B1:24:2F:F7:37:8C:8F:77:B9:40:DC:50:CD:37:42:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-UPazrEkL_c3jI93uUDcUM03Qiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/00f213-21ec-4c3b-b900-dac5f8a0944e/1/1-UPazrEkL_c3jI93uUDcUM03Qiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:50:e5:67:c3:19:f8:19:1a:f1:6f:e3:ce:f2:20:b1:cf:15:
         89:b9:49:e1:1d:ef:21:b4:e4:53:30:46:7c:1c:1c:c6:3d:15:
         f5:0d:cf:9d:bb:c5:9f:c3:a8:e4:46:e0:16:c0:11:29:fc:73:
         31:cd:ea:1d:6d:40:dc:c1:16:a9:76:e8:be:58:6f:32:a6:d9:
         11:07:d9:7f:07:3c:4c:f5:58:95:9f:9d:37:69:a9:60:aa:3b:
         ca:f2:1a:d6:e6:e2:35:79:66:a4:44:d0:7e:74:b6:cc:ce:e4:
         69:7f:05:df:a1:97:f8:25:06:12:0a:c7:a2:7f:49:3d:a5:3a:
         ff:51:c9:f0:13:aa:ac:27:8a:df:4c:79:da:62:ce:59:01:47:
         a3:49:61:e6:63:8c:16:f5:92:ac:93:90:ef:8a:dd:91:2d:ba:
         3b:7e:e5:ef:6a:9c:a2:c8:a9:31:36:1a:a8:cf:e4:f6:e1:3f:
         f6:93:a7:cb:34:6e:42:f8:f0:f7:e9:56:db:fd:8f:11:81:a4:
         a9:ab:15:36:b0:a2:ad:30:d4:15:f9:e3:8a:c1:1c:76:fd:8d:
         f9:ce:6f:a0:3c:4d:5e:33:17:e9:48:67:8e:0d:21:38:a5:27:
         11:d5:97:df:61:06:37:05:b2:58:f4:94:81:f2:51:9e:3e:c3:
         ad:fa:bd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 19:43:31 2026 by rpki-client