Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
File:                     Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft (raw, json)
Hash identifier:          lcbTKbUVjtYxOHL1bpc19oHEQS8MvYaY0hhfRBm3HjY=
Subject key identifier:   3E:F5:FC:84:D0:51:96:FF:08:52:F8:B2:02:D4:B5:6C:7D:7A:83:CA
Authority key identifier: 61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8
Certificate issuer:       /CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
Certificate serial:       01A0D0B705A51240CC42867627200BBA35E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
Manifest number:          0EFD
Signing time:             Thu 24 Sep 2026 00:00:50 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:50 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:50 +0000
Files and hashes:         1: Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl (hash: /Ey3YwwJMmOhhqTbJauRFBqonIc95EagT+1gJDiTyNo=)
                          2: pgpahIBh1JVMRLJjJw7ASp6a1Cg.roa (hash: L10pq0OGKRh0sHJ3XX+pOGwbnH1MYXhkG9/kZOYZEMs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b7:05:a5:12:40:cc:42:86:76:27:20:0b:ba:35:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61edfe7a4fc64de529d162df2fed0780c6e5e1a8
        Validity
            Not Before: Sep 24 00:00:50 2026 GMT
            Not After : Sep 25 00:00:50 2026 GMT
        Subject: CN=3ef5fc84d05196ff0852f8b202d4b56c7d7a83ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:34:02:73:42:51:47:cf:d7:1d:98:f7:9a:cb:
                    bd:57:03:5b:93:14:8c:75:83:78:31:0a:e1:a4:8f:
                    13:ee:83:28:e8:d0:bd:eb:81:b1:22:a8:65:2f:fc:
                    48:78:86:ba:be:8c:8a:ea:c7:cb:1c:e8:33:d0:7e:
                    28:ae:bd:cc:7a:67:7d:f7:0c:ab:cc:ff:04:2f:6f:
                    42:3d:9f:9c:10:92:39:e2:61:98:1a:c4:e8:ca:ff:
                    46:d9:15:be:96:16:af:22:09:78:e2:b5:79:4d:bf:
                    e0:64:76:e5:50:15:37:d3:44:92:91:39:8c:26:a6:
                    e4:8a:06:28:d5:62:a1:79:6e:78:a8:3c:d5:b8:d7:
                    df:91:a5:c3:8d:0f:35:7c:4c:53:c1:6e:b4:a3:51:
                    73:42:48:96:3e:eb:16:45:2a:11:6e:19:d7:73:e2:
                    cf:30:fa:1f:0f:3f:f9:55:45:5b:c0:7d:13:42:ad:
                    19:09:0d:cd:c3:bd:f0:33:07:45:49:21:ec:28:60:
                    08:e1:81:fe:70:3f:1b:da:b2:c5:8a:2d:12:51:f9:
                    c6:49:ed:b8:ec:10:75:5f:86:76:5e:56:5d:b2:5f:
                    72:e2:dd:a4:d0:ca:9b:02:b6:81:f8:f2:d1:ed:be:
                    ac:79:f1:3e:86:3b:72:02:30:45:f6:07:ce:fa:c5:
                    ac:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F5:FC:84:D0:51:96:FF:08:52:F8:B2:02:D4:B5:6C:7D:7A:83:CA
            X509v3 Authority Key Identifier:
                keyid:61:ED:FE:7A:4F:C6:4D:E5:29:D1:62:DF:2F:ED:07:80:C6:E5:E1:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b81d08-66c9-4be9-a221-aff871b5b5f7/1/Ye3-ek_GTeUp0WLfL-0HgMbl4ag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:e3:de:97:4e:2f:1c:12:cf:81:99:a1:bd:3b:76:4f:7c:57:
         1b:e9:77:3f:2e:58:de:a8:0a:93:62:d7:e2:1b:e9:b1:e4:a7:
         4a:ee:b8:6b:33:50:71:d8:85:c7:3f:b1:5e:48:f0:98:61:e3:
         79:60:d2:35:e1:1b:4c:e5:52:6f:8b:53:40:8b:22:06:96:1e:
         96:31:7c:2a:ed:db:84:71:94:00:7f:c9:73:fa:57:71:1a:bc:
         69:b7:01:36:ff:83:30:41:f8:55:ee:c9:e3:9e:90:d4:8a:1a:
         34:5a:23:d8:53:5a:fe:38:db:e0:1d:45:29:de:88:94:85:24:
         04:f9:96:8c:63:71:e3:5e:7e:ab:d5:d4:23:f7:58:69:69:38:
         86:aa:04:59:b2:58:87:51:77:e5:75:8a:48:a4:f4:08:e1:9c:
         52:47:6f:e0:e9:a2:0b:c6:59:b5:e0:b5:91:31:c5:36:1c:fc:
         e4:ff:73:08:08:ee:0f:52:2e:af:87:68:a3:f2:76:12:64:cf:
         17:fc:59:5c:18:2e:09:04:06:a6:9a:34:a1:35:1e:98:57:e5:
         ef:09:b4:3f:3b:55:29:0d:bc:0a:cb:55:b2:67:85:a4:9b:86:
         e8:18:a2:3f:a1:d2:8b:3e:60:e9:ae:86:6e:f0:87:3a:57:83:
         5b:55:4e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:09:11 2026 by rpki-client