Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
File:                     EewaDmTqhLaaQHzz8qklOIq07LQ.mft (raw, json)
Hash identifier:          cNbtL3LRtsNUxFvqx4/HpgJ/Zlc1mqcX72IFRKrOF6A=
Subject key identifier:   4E:77:1B:D7:0F:BB:18:78:9A:66:50:55:0D:23:D5:1A:32:B7:10:26
Authority key identifier: 11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4
Certificate issuer:       /CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
Certificate serial:       01A0F7C46EB63793B6C7FA1B1B449AAFEC5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
Manifest number:          14DD
Signing time:             Thu 01 Oct 2026 14:00:40 +0000
Manifest this update:     Thu 01 Oct 2026 14:00:40 +0000
Manifest next update:     Fri 02 Oct 2026 14:00:40 +0000
Files and hashes:         1: EewaDmTqhLaaQHzz8qklOIq07LQ.crl (hash: FkfEXPjKcKSGycB4S6jg7YnjwCkq/GdR5544ELd/YWo=)
                          2: WCcuNm1t7mDf70aRY_yE4DYEFqk.roa (hash: 4fPNcGaiVXP6fwRQDiv6V6Q2WCKkTwDmgre3GMTPWxg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f7:c4:6e:b6:37:93:b6:c7:fa:1b:1b:44:9a:af:ec:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ec1a0e64ea84b69a407cf3f2a925388ab4ecb4
        Validity
            Not Before: Oct  1 14:00:40 2026 GMT
            Not After : Oct  2 14:00:40 2026 GMT
        Subject: CN=4e771bd70fbb18789a6650550d23d51a32b71026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:99:23:60:91:66:06:58:02:e8:0d:fa:78:75:
                    21:db:da:79:dd:dc:6f:63:7b:6c:c9:56:8f:1f:8b:
                    a2:81:eb:42:1f:0a:19:c3:6d:8a:3b:91:cc:6e:8a:
                    49:ad:df:9d:c7:f1:50:ed:72:66:ae:18:94:78:cd:
                    f8:a5:de:97:3f:cc:7e:85:07:ad:be:14:b2:ab:8e:
                    c8:93:48:58:fb:43:fc:15:82:53:33:85:49:f1:cc:
                    7b:11:7a:1e:cb:08:69:ca:d3:f5:24:27:ce:f1:ad:
                    85:4a:4b:19:f0:31:83:f3:c9:44:24:db:15:a0:9d:
                    9e:ea:aa:0a:d4:c7:e4:3d:fc:1e:8d:68:0d:17:8c:
                    d3:71:12:14:f4:d3:d3:90:a7:87:82:16:e4:f5:82:
                    1a:80:0e:8c:50:16:49:7c:90:a1:a7:97:52:45:0c:
                    f5:65:7b:40:20:d4:9a:94:5b:10:36:4a:c7:0e:87:
                    2c:77:b4:37:cf:a9:ab:73:5d:2e:11:55:a4:16:d9:
                    b5:1d:90:da:ba:0b:d1:fa:75:d5:2d:c5:96:3c:23:
                    8f:a8:ac:81:87:70:70:02:7a:ef:bc:b6:4f:1d:25:
                    fc:95:13:e2:b9:7a:eb:11:71:50:47:5e:d5:f5:c9:
                    eb:ec:b9:77:2d:e2:1f:61:4b:01:ad:28:b8:2d:ff:
                    13:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:77:1B:D7:0F:BB:18:78:9A:66:50:55:0D:23:D5:1A:32:B7:10:26
            X509v3 Authority Key Identifier:
                keyid:11:EC:1A:0E:64:EA:84:B6:9A:40:7C:F3:F2:A9:25:38:8A:B4:EC:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EewaDmTqhLaaQHzz8qklOIq07LQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/0cf745-a4d8-423d-a2d9-8302ed850c87/1/EewaDmTqhLaaQHzz8qklOIq07LQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:4a:13:9a:17:6b:34:63:39:7d:f7:f5:fd:bb:e4:4d:54:7e:
         2e:f5:4b:8e:2e:4b:a2:e2:c4:bd:4e:50:5c:01:0e:dd:ef:fc:
         db:21:f4:f3:3b:98:56:58:4d:73:05:57:6e:d9:65:d2:d1:ce:
         9b:7e:37:e4:53:e1:73:65:97:80:c7:15:bc:18:43:7a:77:e5:
         fa:f5:ea:94:a8:43:8c:5e:b9:59:dd:3e:7a:7f:1e:ca:3a:7a:
         06:0f:e8:88:bc:be:97:61:3d:69:06:75:00:00:ed:5f:23:70:
         79:4b:a2:48:d6:76:33:7e:52:cf:04:1f:cb:64:85:6f:07:da:
         b4:8e:ef:b0:d1:50:8c:ff:d1:f1:ae:69:67:60:79:84:72:ab:
         2c:31:9e:7c:91:aa:09:a9:c7:85:9a:48:01:e3:a7:31:d8:fd:
         32:25:cd:39:c9:81:00:f2:b0:e4:5e:9b:59:f8:50:7b:bd:80:
         1c:f8:7a:e5:21:e1:61:4c:cb:8a:54:6b:9e:90:92:c9:f6:d9:
         13:88:d3:c3:a6:c8:17:17:af:cc:1d:b4:ea:30:b9:99:40:07:
         7f:5a:33:c0:62:c1:18:21:ef:b6:1a:24:b3:52:67:d2:55:83:
         52:1e:40:84:3c:58:f4:ec:b8:e0:ca:55:74:c4:06:16:a0:60:
         7d:ac:6f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 18:41:14 2026 by rpki-client