Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MWcR2l4xw7ZoMpr52bjsWO2gneg.mft
File:                     MWcR2l4xw7ZoMpr52bjsWO2gneg.mft (raw, json)
Hash identifier:          eiBclLegOxOPdzgEGo9GyGYPm6ZJXtWH48Sy2vFUl6w=
Subject key identifier:   D1:03:D8:16:3B:A5:89:A5:D6:9B:7B:F3:B7:B0:69:94:20:00:A6:B6
Authority key identifier: 31:67:11:DA:5E:31:C3:B6:68:32:9A:F9:D9:B8:EC:58:ED:A0:9D:E8
Certificate issuer:       /CN=316711da5e31c3b668329af9d9b8ec58eda09de8
Certificate serial:       01A0C63323D677A4C48AD2C4FDF182C18657
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MWcR2l4xw7ZoMpr52bjsWO2gneg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MWcR2l4xw7ZoMpr52bjsWO2gneg.mft
Manifest number:          1E
Signing time:             Mon 21 Sep 2026 23:00:35 +0000
Manifest this update:     Mon 21 Sep 2026 23:00:35 +0000
Manifest next update:     Tue 22 Sep 2026 23:00:35 +0000
Files and hashes:         1: MUVw74wh52eOaYfgHXDpQj70saQ.roa (hash: r11ipMGCd1Sxy8FxoqT8IS618bT1jFmr3XV+w9hlLhg=)
                          2: MWcR2l4xw7ZoMpr52bjsWO2gneg.crl (hash: HtaKkHVmb1VbPf+tprwKz2eRrTS+oFZl0UL3Ii7rnLw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MWcR2l4xw7ZoMpr52bjsWO2gneg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MWcR2l4xw7ZoMpr52bjsWO2gneg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MWcR2l4xw7ZoMpr52bjsWO2gneg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:33:23:d6:77:a4:c4:8a:d2:c4:fd:f1:82:c1:86:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316711da5e31c3b668329af9d9b8ec58eda09de8
        Validity
            Not Before: Sep 21 23:00:35 2026 GMT
            Not After : Sep 22 23:00:35 2026 GMT
        Subject: CN=d103d8163ba589a5d69b7bf3b7b069942000a6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5d:c2:e5:b5:5b:02:c1:83:ce:2f:53:a2:4e:
                    2a:ec:df:22:eb:6d:54:39:97:8c:4d:15:59:cd:09:
                    fd:e5:88:d9:75:03:39:ab:02:9a:12:31:c2:12:95:
                    59:a1:a8:28:a9:d7:65:34:7b:00:67:67:e0:cb:38:
                    a8:1f:9d:ac:1e:80:2e:16:40:2e:af:b7:81:78:b5:
                    88:59:a1:fd:1c:48:6a:82:02:6c:52:dc:1e:e8:0f:
                    9d:25:5c:41:50:b6:ce:79:69:6e:b7:0c:e9:6f:00:
                    22:ef:1c:0b:b2:3c:3f:2f:cb:a8:3e:cd:94:bf:c1:
                    80:04:18:d2:42:1e:08:66:d8:1c:44:c4:e1:16:6d:
                    de:f1:41:d2:de:fc:dc:9f:41:e3:7b:fb:b5:de:30:
                    61:7b:cd:d6:c1:46:6f:cc:e5:ef:1e:72:e5:0d:0c:
                    e0:27:48:eb:a5:3c:98:f8:19:d8:fd:67:9e:18:7a:
                    f8:95:2f:35:86:ef:94:09:72:14:d6:4c:1c:87:89:
                    fd:3d:24:8c:a1:cf:e9:d4:cb:1c:7c:43:df:3a:59:
                    fb:19:95:11:0d:f1:77:d0:d4:61:f3:99:e0:34:a4:
                    6e:6c:3f:3c:60:c5:15:bd:07:10:f8:26:a0:ba:48:
                    20:80:40:bd:ff:6c:c1:b8:68:07:78:a5:3b:1c:08:
                    26:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:03:D8:16:3B:A5:89:A5:D6:9B:7B:F3:B7:B0:69:94:20:00:A6:B6
            X509v3 Authority Key Identifier:
                keyid:31:67:11:DA:5E:31:C3:B6:68:32:9A:F9:D9:B8:EC:58:ED:A0:9D:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWcR2l4xw7ZoMpr52bjsWO2gneg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MWcR2l4xw7ZoMpr52bjsWO2gneg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e2b713-d3c8-4cb2-9a2f-1620c757ec9f/1/MWcR2l4xw7ZoMpr52bjsWO2gneg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:fa:11:7e:74:63:68:be:43:73:13:8a:88:90:c6:9a:d4:55:
         07:30:1c:ad:3f:2e:34:77:87:65:f2:c5:78:bf:22:30:0c:5d:
         49:d9:4e:be:ea:f4:5f:29:f2:2c:07:79:91:b2:e4:15:d7:62:
         02:62:b2:36:31:23:27:1a:42:93:58:26:b7:c8:00:06:50:63:
         3c:3b:a8:59:1c:15:48:70:fb:e9:47:5f:79:5a:38:fb:98:60:
         90:56:3f:96:25:16:62:ae:ed:52:81:81:77:3c:5d:79:56:d0:
         e5:26:7d:ed:d8:e5:4d:39:0b:22:10:cb:6b:b2:cd:38:64:55:
         6d:96:49:b8:e8:2e:72:2b:c7:f0:c9:0c:19:7e:19:67:62:2c:
         e2:2b:f8:24:58:a6:9c:7a:c8:87:15:2c:b7:f7:58:fe:95:b0:
         2d:6f:3f:29:26:57:97:56:92:01:2a:91:8d:02:20:eb:20:97:
         03:f2:09:ea:33:00:15:88:21:a6:87:99:56:98:84:d4:a9:b8:
         bc:c4:04:96:22:ea:68:12:79:8b:ab:e2:01:17:25:70:c5:8d:
         b9:25:a0:ff:6e:cc:35:79:00:6a:be:04:84:b1:20:43:6d:7e:
         f9:bb:17:5f:d3:ef:89:16:ff:27:9a:1b:47:e1:52:76:ef:1d:
         53:9b:d1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:21:48 2026 by rpki-client