Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
File:                     9ejja-HboHNZA4K7H__zF2U5ANE.mft (raw, json)
Hash identifier:          ecQSGENZMQcAtMMqHI2YuqZj30lwPudcrWTtJpI6R2E=
Subject key identifier:   A5:92:C6:12:0A:FC:8D:A2:D6:50:C7:EE:99:9A:7F:8D:24:5A:51:6C
Authority key identifier: F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1
Certificate issuer:       /CN=f5e8e36be1dba073590382bb1ffff317653900d1
Certificate serial:       01A0C28D2B467D01F0AF144E82C722EAF20C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
Manifest number:          1252
Signing time:             Mon 21 Sep 2026 06:00:26 +0000
Manifest this update:     Mon 21 Sep 2026 06:00:26 +0000
Manifest next update:     Tue 22 Sep 2026 06:00:26 +0000
Files and hashes:         1: 9ejja-HboHNZA4K7H__zF2U5ANE.crl (hash: ubaAEX0u+dXiSJx0VcWMMMrSHO/6/f67kibXffJsO+w=)
                          2: SWVnyA5WjBDcWwF_MRnjuEfhPno.roa (hash: vX+fvHGK4FoX/xsn9TXZWN2j9aU+Kb5GX9r/V61bABY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8d:2b:46:7d:01:f0:af:14:4e:82:c7:22:ea:f2:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5e8e36be1dba073590382bb1ffff317653900d1
        Validity
            Not Before: Sep 21 06:00:26 2026 GMT
            Not After : Sep 22 06:00:26 2026 GMT
        Subject: CN=a592c6120afc8da2d650c7ee999a7f8d245a516c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:48:62:42:4b:34:28:05:55:c7:3a:e3:7e:84:
                    01:9e:55:c0:b5:f6:ec:12:85:6e:db:b3:09:2c:66:
                    3e:1f:e7:f7:8a:4b:c5:60:e9:ef:d9:bd:63:27:6a:
                    81:0a:19:c9:78:62:85:bc:3a:94:b2:f6:3c:76:1c:
                    7f:f2:65:a7:9d:24:d6:38:f4:ad:20:e4:3d:0e:b7:
                    13:03:50:3c:74:9a:0b:ad:c6:7e:b5:99:6c:b4:ef:
                    6e:23:f3:e3:56:6d:6f:3e:dc:f0:7d:d8:81:f9:bb:
                    56:c6:13:a8:18:23:61:68:b9:ee:5a:59:d8:d6:06:
                    6e:57:80:83:00:63:42:47:d3:0d:20:25:2a:b2:79:
                    d1:ac:88:a6:03:ff:65:ca:e6:d5:d3:b7:e8:4e:cd:
                    20:80:93:87:8c:82:81:a3:87:5b:58:9a:3d:02:59:
                    5e:ac:da:80:5a:e2:6c:bd:5c:d5:05:03:60:31:72:
                    19:c7:93:7b:3b:65:2e:5a:e9:f9:e2:e5:f0:ca:ca:
                    8f:4a:5d:da:80:4d:e5:87:50:7b:9d:6a:a2:2b:ed:
                    09:75:67:aa:7b:d9:ad:50:9d:4f:c5:f5:d6:72:27:
                    c3:be:c8:49:78:3e:5a:db:02:b7:6a:6e:bf:0a:50:
                    ec:c2:b4:cb:a8:dd:18:2f:0c:d2:84:2a:6a:9d:97:
                    ed:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:92:C6:12:0A:FC:8D:A2:D6:50:C7:EE:99:9A:7F:8D:24:5A:51:6C
            X509v3 Authority Key Identifier:
                keyid:F5:E8:E3:6B:E1:DB:A0:73:59:03:82:BB:1F:FF:F3:17:65:39:00:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ejja-HboHNZA4K7H__zF2U5ANE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1ec1d7-aced-4eaa-978c-2a990f2850fb/1/9ejja-HboHNZA4K7H__zF2U5ANE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:12:c1:1a:3c:f6:26:7a:8a:41:38:7b:0a:dc:ef:8e:be:6c:
         ee:68:7d:3d:b5:37:03:c8:a2:00:76:76:05:ba:bc:89:63:a0:
         1d:71:97:e9:61:34:6e:5d:4a:81:0e:7f:21:93:10:00:36:74:
         fa:ac:97:c5:9d:94:72:b0:7f:b9:35:4d:e0:de:92:fd:73:2d:
         bb:f6:81:c3:9f:ae:fc:25:26:47:7c:6b:1a:b8:8b:58:dd:49:
         fe:6c:4e:6c:f0:d6:c4:5a:a5:b4:15:93:82:2e:08:2f:dc:9b:
         45:21:0a:82:43:b3:59:b7:ce:6e:7c:23:3f:9b:5e:0d:22:af:
         45:5c:a7:9b:62:1d:14:19:c1:76:9f:45:26:e5:89:1d:e9:7c:
         c8:bc:ef:79:9a:e9:52:03:4b:09:7b:a1:c1:5e:86:ac:35:46:
         5e:c0:8e:84:3b:ae:7f:31:7f:88:52:cd:db:bc:df:9d:c3:b8:
         8c:09:75:d8:d8:83:ed:3a:2a:7e:a9:df:87:ff:9b:59:01:c0:
         a3:e1:0e:45:53:fd:27:f0:22:d5:bf:56:68:8a:c2:02:d6:26:
         56:49:0e:77:df:6b:e2:2e:4b:47:19:75:b6:dd:d2:26:e2:48:
         03:8f:42:6d:24:38:fc:ec:0a:67:2b:fb:24:af:33:d2:1d:86:
         3c:29:5d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:17:58 2026 by rpki-client