Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
File:                     60xazW-h5qkRKaxCQFeod1WOgFI.mft (raw, json)
Hash identifier:          lUCUXVRytesAdBe/BJiUHXSR25usrvesRmWfZj9W2aQ=
Subject key identifier:   BE:88:57:8E:4F:18:12:24:80:32:E0:62:87:BC:31:3A:5A:C8:BB:31
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Certificate issuer:       /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial:       01A0C6A0E31499155E39016BF876AD3204C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
Manifest number:          0EDB
Signing time:             Tue 22 Sep 2026 01:00:27 +0000
Manifest this update:     Tue 22 Sep 2026 01:00:27 +0000
Manifest next update:     Wed 23 Sep 2026 01:00:27 +0000
Files and hashes:         1: 60xazW-h5qkRKaxCQFeod1WOgFI.crl (hash: 7ScNAJX5rzR0TYvSBFHNg23r+KvwGKvvTLqKn2QbMLs=)
                          2: SaaOxyoRftnC93VwoMwsYhac2Cg.roa (hash: Jyzc6vUApI7lUiCT6AHnK70fIf9nJAWEiYkk+m1RDzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:a0:e3:14:99:15:5e:39:01:6b:f8:76:ad:32:04:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
        Validity
            Not Before: Sep 22 01:00:27 2026 GMT
            Not After : Sep 23 01:00:27 2026 GMT
        Subject: CN=be88578e4f1812248032e06287bc313a5ac8bb31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:5b:fc:9e:55:a3:9d:a6:9d:af:97:37:9e:
                    fb:76:9d:1d:80:79:6d:37:00:4c:40:9f:4a:41:3c:
                    3c:9f:84:d8:69:ee:9b:6d:12:17:ca:44:7c:47:c4:
                    bd:af:44:bc:77:65:4f:16:14:46:1b:18:cb:b3:2c:
                    7e:b9:44:b0:54:60:29:e5:30:c0:e1:6e:90:a5:f3:
                    96:bd:8b:45:cd:76:66:f2:59:d4:7d:34:e0:02:d4:
                    a3:85:f2:39:22:bc:2e:85:cf:df:2f:98:ba:08:a0:
                    20:4e:8f:df:68:50:26:4f:b4:00:c2:68:c4:31:01:
                    4c:6d:5b:b3:b9:da:43:7a:4b:f8:ca:c4:50:d8:04:
                    98:20:18:93:cf:22:af:46:13:37:db:4a:61:e6:6b:
                    cb:6d:38:16:56:66:b7:de:d9:25:96:82:38:c2:f9:
                    99:ab:d2:b5:fd:e8:b5:e5:37:c2:55:1b:4c:df:0e:
                    16:87:9c:b0:73:b7:b9:3a:ed:2b:51:98:a5:a1:45:
                    c7:97:fe:6a:b5:08:4c:f2:e3:b0:ed:5b:be:38:14:
                    c4:d8:54:f1:d4:dc:11:69:48:83:13:24:aa:3c:d7:
                    9c:e7:c6:1b:2c:9a:1f:81:0e:52:e1:ea:2c:b0:37:
                    a8:f5:1a:b9:45:b3:09:c7:cb:67:fc:d3:ec:eb:c3:
                    cf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:88:57:8E:4F:18:12:24:80:32:E0:62:87:BC:31:3A:5A:C8:BB:31
            X509v3 Authority Key Identifier:
                keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d5:df:63:ba:48:1e:ae:46:99:90:72:f2:07:fa:ba:06:1a:
         07:3a:c6:6b:21:3c:b0:d3:9f:9f:2e:f5:2d:d6:44:55:8f:0c:
         e5:c3:db:4c:45:39:4f:c6:d3:3c:cd:2d:cc:21:2c:2a:d4:36:
         59:b6:50:3c:d5:74:c1:c8:12:46:2f:85:b8:ca:74:a7:db:a2:
         40:d0:8b:5f:a9:d7:e0:75:c6:cc:49:9e:4d:0b:85:d4:e9:28:
         4e:be:7a:c6:40:68:a9:36:d0:23:01:6b:50:07:27:f1:9c:21:
         62:75:d7:11:91:2a:f3:76:f4:7d:b9:b0:ef:7a:3e:d5:ef:db:
         6d:c8:d7:48:6e:50:eb:6c:d5:e6:8a:66:17:d8:f5:f5:36:58:
         21:f7:16:08:c7:52:b7:df:01:7b:c7:4a:33:ec:2b:6a:f2:89:
         d6:9a:2b:43:4d:71:99:bf:f8:f3:3f:4e:60:8a:2c:ed:28:bd:
         db:24:b3:dd:88:0f:89:bd:13:7e:bf:7e:85:3c:26:f8:e8:61:
         2d:4c:ab:04:3f:ef:3f:66:b7:b4:3d:8a:91:f7:46:0f:4b:e3:
         a1:01:da:9a:d1:e3:68:76:e0:0f:4d:23:de:7f:dd:aa:43:4d:
         19:a3:db:84:29:36:02:86:be:d5:48:4c:fb:ec:b9:dd:21:2d:
         b1:86:02:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:02:14 2026 by rpki-client