Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
File:                     EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft (raw, json)
Hash identifier:          uEZB8tj/EolfZteDpkdSA2BqVSmxG1vXpHUGWoJ7JEg=
Subject key identifier:   C8:02:00:DB:08:F8:53:7B:6A:C3:03:61:C0:DB:67:C0:67:DE:9D:FA
Authority key identifier: 12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64
Certificate issuer:       /CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
Certificate serial:       01A0CF6CE8F1DF045C379CCD50ECFF08F7F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
Manifest number:          0B6D
Signing time:             Wed 23 Sep 2026 18:00:16 +0000
Manifest this update:     Wed 23 Sep 2026 18:00:16 +0000
Manifest next update:     Thu 24 Sep 2026 18:00:16 +0000
Files and hashes:         1: EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl (hash: 9vbR2kTspLhuXaF5x0i7D99r2W2uKaM9o3uEuAEXn+w=)
                          2: oaAkI4u-q1sNX4XewPVfZpBZbiQ.roa (hash: CN/AvchRlL8gZqtJDbJknMgG+JNTjA+0pvGllBDxlpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:6c:e8:f1:df:04:5c:37:9c:cd:50:ec:ff:08:f7:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12133a6523e2ed0a0c9a36ea8a7c6f0e72a5dd64
        Validity
            Not Before: Sep 23 18:00:16 2026 GMT
            Not After : Sep 24 18:00:16 2026 GMT
        Subject: CN=c80200db08f8537b6ac30361c0db67c067de9dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:3a:44:3e:67:1b:84:1d:06:06:54:63:f8:10:
                    9f:02:cf:31:1b:7b:9e:d9:e6:4e:c2:64:21:4a:c8:
                    13:d8:eb:cc:7e:70:07:e5:b3:76:73:80:0f:80:42:
                    47:d2:c2:05:a6:b6:3d:4a:5a:46:2d:0b:0c:80:82:
                    9b:ad:50:a0:21:8c:b6:b7:b2:f4:1a:74:97:be:fe:
                    3d:03:99:82:e3:27:43:02:bb:b6:f8:b3:82:6b:57:
                    b5:7f:04:4a:04:a0:90:fd:bc:c9:9c:14:cc:21:44:
                    00:a0:23:9d:16:7e:8a:88:7b:4b:5c:2b:b8:22:0d:
                    ec:a2:9a:8e:ff:be:95:17:eb:b2:c9:71:53:7c:7b:
                    ed:bf:94:03:41:47:e1:4a:94:11:31:c1:8d:25:42:
                    88:d2:85:ba:22:34:f3:de:f0:3d:54:0d:c5:ea:93:
                    f3:b8:4e:0f:13:32:3d:74:db:f7:3e:c5:c0:69:5d:
                    26:6b:6a:19:21:dd:b6:84:10:9e:a0:4e:1b:01:a4:
                    66:0f:14:9b:a6:d5:0b:79:9d:05:60:17:2d:60:35:
                    b3:61:d4:a4:40:e5:b0:ec:13:f3:eb:b1:8d:76:ca:
                    33:7b:d9:da:f6:6f:ed:5e:c6:e0:a4:09:2d:94:36:
                    46:89:1a:f5:c1:24:74:7e:4a:f3:b6:26:cc:e7:45:
                    84:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:02:00:DB:08:F8:53:7B:6A:C3:03:61:C0:DB:67:C0:67:DE:9D:FA
            X509v3 Authority Key Identifier:
                keyid:12:13:3A:65:23:E2:ED:0A:0C:9A:36:EA:8A:7C:6F:0E:72:A5:DD:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/934ec3-b76a-40d0-8a3a-824729ab4b9a/1/EhM6ZSPi7QoMmjbqinxvDnKl3WQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:22:90:54:b1:25:0d:2d:95:46:a1:a7:77:f9:9e:bf:80:32:
         ae:fa:29:8e:ff:28:d3:87:90:78:f6:fa:3a:60:7d:a6:2b:e4:
         20:ba:bb:2d:0e:8b:ed:2f:13:95:a1:d2:5a:12:35:2b:73:8a:
         80:e9:45:9a:36:68:0a:a2:2c:84:ec:e3:e9:4a:e3:3d:8b:d7:
         15:61:5f:de:44:c5:ce:bd:fb:d5:f0:c0:b9:12:e1:f6:9b:d9:
         5c:e1:94:68:75:b1:3f:6a:d5:1f:47:06:82:36:76:ca:97:17:
         bc:da:27:bb:13:e9:84:fb:30:a1:a0:0a:8d:00:1a:7f:22:86:
         e9:f7:f4:40:84:81:86:5c:59:1b:7c:e9:50:8a:39:de:ec:d7:
         03:f6:11:c7:da:0d:07:21:5a:99:c6:7e:7d:ba:cf:7f:a4:36:
         d2:70:87:39:29:ab:62:bb:b1:37:fb:4b:db:c9:d8:ff:f7:a2:
         50:a0:93:fb:35:50:3c:52:b7:4a:28:83:56:44:1c:4c:f6:9e:
         72:06:53:cd:f2:29:92:31:81:b9:74:93:be:f8:cd:a0:ce:af:
         96:b4:83:e9:fa:e2:b3:2c:56:7c:33:76:23:43:b0:ef:b1:c2:
         5d:46:8e:3f:24:36:61:8e:e5:be:e7:d3:c2:58:b9:fa:02:c2:
         ae:1a:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:08:52 2026 by rpki-client