Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
File:                     793Ia4IAX_jHwmSi4GcDemCLSB8.mft (raw, json)
Hash identifier:          R1WMMeNYDQxrzNpBKfidv2DyyfhSSVZHG9rcwc/b/LM=
Subject key identifier:   65:35:DA:23:03:53:04:95:35:0E:A2:27:34:4A:A4:B3:F7:11:92:54
Authority key identifier: EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F
Certificate issuer:       /CN=efddc86b82005ff8c7c264a2e067037a608b481f
Certificate serial:       01A0CDB5F07C58AA27815791E30F1D04F4DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
Manifest number:          1A66
Signing time:             Wed 23 Sep 2026 10:00:47 +0000
Manifest this update:     Wed 23 Sep 2026 10:00:47 +0000
Manifest next update:     Thu 24 Sep 2026 10:00:47 +0000
Files and hashes:         1: 793Ia4IAX_jHwmSi4GcDemCLSB8.crl (hash: iVshIK/niwbKPXn0joMIG9R6gGsFPYeo1YTZF7Ppf40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 10:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cd:b5:f0:7c:58:aa:27:81:57:91:e3:0f:1d:04:f4:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efddc86b82005ff8c7c264a2e067037a608b481f
        Validity
            Not Before: Sep 23 10:00:47 2026 GMT
            Not After : Sep 24 10:00:47 2026 GMT
        Subject: CN=6535da2303530495350ea227344aa4b3f7119254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:97:42:48:57:90:c2:00:d6:f1:a5:38:1e:22:
                    83:01:57:9a:e8:71:c0:78:16:7f:22:28:19:c7:d7:
                    02:22:22:0e:ee:ab:55:71:9f:ba:dd:fe:1a:f8:aa:
                    46:cf:84:42:c7:8b:fa:fd:7d:96:ab:39:85:c8:fe:
                    28:42:0d:28:09:1c:88:c4:ce:64:d8:04:96:8a:7c:
                    e6:c2:cd:fc:f7:9d:f5:29:c7:c6:49:ca:d6:db:50:
                    87:0b:55:22:16:be:2c:e3:57:60:6a:f2:54:a4:8b:
                    0c:5e:ca:80:6a:90:65:55:4d:39:14:65:d7:f2:4c:
                    ab:42:b5:5d:2c:41:b7:62:b0:3d:80:7d:e5:19:f8:
                    40:1f:a3:55:48:21:3f:14:78:b7:02:ae:a6:83:5c:
                    2a:9e:90:84:a3:94:16:5a:36:4b:c2:28:3c:05:b8:
                    8e:9c:50:ef:79:3e:05:e9:dd:87:06:03:eb:04:69:
                    c8:21:7b:b3:f0:f7:30:eb:e4:d0:15:fe:16:a1:a4:
                    95:33:26:1c:c8:27:f8:73:aa:4e:51:be:84:be:0e:
                    d4:02:96:5b:88:93:bd:3e:7c:7c:56:15:77:f2:c7:
                    38:ea:d2:3c:4d:62:b3:b8:ff:f3:ba:c4:8d:81:ba:
                    89:30:2d:df:99:87:e1:0c:f1:6f:d2:29:67:20:fe:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:35:DA:23:03:53:04:95:35:0E:A2:27:34:4A:A4:B3:F7:11:92:54
            X509v3 Authority Key Identifier:
                keyid:EF:DD:C8:6B:82:00:5F:F8:C7:C2:64:A2:E0:67:03:7A:60:8B:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/793Ia4IAX_jHwmSi4GcDemCLSB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/789851-57c2-4a58-a06c-3eb1488ce8e1/1/793Ia4IAX_jHwmSi4GcDemCLSB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:7f:e8:82:76:a2:8b:8b:76:30:7e:09:12:b1:d9:6b:77:85:
         26:50:d8:ee:09:34:e8:58:1c:fa:09:15:6d:3d:7d:94:2f:22:
         3c:d1:ad:36:e2:69:26:bb:2c:33:0e:48:3b:41:d5:d7:7c:7e:
         6c:b0:bb:3e:2f:d9:41:90:87:9b:0b:eb:0a:86:91:0e:f0:94:
         cd:9c:74:db:8a:d3:a3:40:e6:f6:80:e6:48:49:2c:4f:2d:68:
         a6:a2:06:b4:bf:72:b7:f7:62:34:a9:86:10:dd:dc:53:b1:81:
         6d:ba:d1:71:a5:3c:7d:b1:e1:49:df:0e:36:8f:dd:c0:da:db:
         37:24:9b:f8:05:03:f8:e5:d2:3b:bb:aa:19:2b:d9:bd:f3:4c:
         59:5a:c0:28:69:df:ef:12:62:f8:c2:c3:83:c4:b8:ed:3f:cd:
         98:fd:7c:27:fd:c7:fd:80:4f:5a:69:e9:36:47:29:84:89:b3:
         39:98:9b:51:c8:12:ae:a8:48:8f:1c:8c:cd:3c:47:a4:78:0c:
         ae:a7:60:cb:8d:b3:a4:f3:ac:f7:05:0a:61:55:28:d6:4f:b1:
         1b:bc:1e:58:3d:ff:78:59:7a:2e:19:64:58:cd:6b:2e:39:3d:
         29:af:15:09:ad:4c:77:60:93:a5:4c:15:9c:0a:be:15:ad:26:
         b6:e3:6d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:26:50 2026 by rpki-client