Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
File:                     12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json)
Hash identifier:          lMO2q5WFYGymvrp48Q2ExnraA2SUwxdyB5ltjSwdMaw=
Subject key identifier:   B4:9F:AA:9F:85:69:DA:5E:60:83:C4:F4:28:7E:CB:4E:B0:3E:3F:53
Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Certificate issuer:       /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Certificate serial:       01A0D0B6E232536939DA93409F4CFD3D3E78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
Manifest number:          19FC
Signing time:             Thu 24 Sep 2026 00:00:41 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:41 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:41 +0000
Files and hashes:         1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: xcobizRZ4IMsRtPE9UpDooZXZyWAy+g1Yl8L9hoQRew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:27:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b6:e2:32:53:69:39:da:93:40:9f:4c:fd:3d:3e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
        Validity
            Not Before: Sep 24 00:00:41 2026 GMT
            Not After : Sep 25 00:00:41 2026 GMT
        Subject: CN=b49faa9f8569da5e6083c4f4287ecb4eb03e3f53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:fd:82:d6:28:ea:66:97:29:a9:2c:9a:46:
                    7d:3d:d4:12:3b:d3:eb:6a:64:46:46:d3:17:6e:4e:
                    e1:51:68:ca:bd:77:49:15:1e:29:0c:91:da:1e:28:
                    86:2a:49:79:89:83:14:f7:d6:34:2e:f1:38:17:1e:
                    83:03:70:07:02:f1:0a:79:5f:dc:35:ed:54:0d:4b:
                    8b:92:56:45:4f:dd:cd:03:fd:36:1c:fd:ef:1a:51:
                    5d:ca:45:c1:df:f6:fd:10:5c:34:41:d4:20:c8:4a:
                    f0:66:8d:21:d2:eb:ac:09:6a:7e:4f:07:85:02:e2:
                    1d:b3:69:f4:38:2c:99:a7:a3:90:e6:3c:14:0b:4e:
                    4d:ad:00:22:92:02:e2:bf:17:24:4e:a8:e2:1f:30:
                    f6:02:84:d8:80:98:53:d1:76:56:50:c4:bc:df:06:
                    ec:21:6c:b3:c2:9f:f1:ba:9d:e5:98:41:9e:df:c6:
                    7d:ce:96:9d:8d:93:3d:5c:35:3f:81:65:24:32:5f:
                    61:ff:86:d8:b1:e3:e0:e8:dd:8c:31:61:4f:9d:a8:
                    af:82:9a:33:a3:96:0e:2f:82:17:c5:31:80:33:4f:
                    e9:bf:5c:dd:94:86:ac:a6:10:0f:f0:04:51:2f:53:
                    1a:5b:24:25:d2:1f:f6:e1:e6:d5:93:0c:3a:1f:ac:
                    f6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9F:AA:9F:85:69:DA:5E:60:83:C4:F4:28:7E:CB:4E:B0:3E:3F:53
            X509v3 Authority Key Identifier:
                keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:16:f3:d6:6f:ce:73:d9:39:ec:cf:c4:f8:d7:2a:c7:e3:74:
         4d:dc:ef:05:55:39:6e:67:27:53:49:21:ff:2f:9a:56:6b:48:
         c1:cb:99:b5:95:9e:1b:16:65:45:2b:13:a8:21:a5:49:8c:c9:
         e5:90:1a:f7:d4:bb:05:95:54:21:9e:d2:2c:4f:e4:60:f0:ef:
         f9:71:6d:8d:73:ad:6d:a2:25:3b:4d:e4:87:3c:b0:84:05:fb:
         a9:00:2a:20:7e:8c:23:78:ca:d1:67:07:e0:76:7f:4f:17:d4:
         da:31:40:f6:84:76:e0:be:de:8f:ff:60:c8:49:3d:6b:8c:71:
         fc:08:d5:8e:21:a7:2c:fe:d1:9a:b7:38:12:8d:1b:f2:52:a3:
         fe:99:fb:b8:4b:8a:a3:ff:51:95:dd:72:3e:8f:4e:fb:eb:d6:
         70:29:60:2d:9b:c4:73:9e:50:45:e8:5a:8b:07:fe:fe:f0:61:
         68:a6:b3:af:2b:3c:7a:53:53:bb:51:43:7d:91:96:ab:46:ee:
         c1:11:03:bd:48:a9:5e:cc:c8:0a:f5:86:31:8a:3c:cb:3f:c5:
         d7:85:08:10:cf:07:fa:cf:4a:27:cc:ff:a8:1f:94:6e:b7:b4:
         cf:57:f0:33:66:cf:7a:f6:22:10:ad:67:a8:2c:ca:52:86:b2:
         50:0e:67:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:56:43 2026 by rpki-client