Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
File:                     71hLUR2WpK5sljABl_hPlqOvwkY.mft (raw, json)
Hash identifier:          yNAC2AaSuDcasU40+wjj6ukJFMwi9uzMnypAPBpvAKA=
Subject key identifier:   55:99:77:FD:ED:49:61:18:09:5F:D4:3F:C3:BF:C7:51:86:B3:43:47
Authority key identifier: EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46
Certificate issuer:       /CN=ef584b511d96a4ae6c96300197f84f96a3afc246
Certificate serial:       01A0D9F1D81725114C934A920C809AE8335A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
Manifest number:          1151
Signing time:             Fri 25 Sep 2026 19:01:40 +0000
Manifest this update:     Fri 25 Sep 2026 19:01:40 +0000
Manifest next update:     Sat 26 Sep 2026 19:01:40 +0000
Files and hashes:         1: 71hLUR2WpK5sljABl_hPlqOvwkY.crl (hash: 5M/pS+ZF33/F3O2R5+v/2OC+5Fb8u0o58y47w6ojzFA=)
                          2: VyE6DesxM1H-hav0gDjcdVAVU4s.roa (hash: fCSRySt/k47Xd3pTSkERi1iNanOCOBE7CKIzsNuCBZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:f1:d8:17:25:11:4c:93:4a:92:0c:80:9a:e8:33:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef584b511d96a4ae6c96300197f84f96a3afc246
        Validity
            Not Before: Sep 25 19:01:40 2026 GMT
            Not After : Sep 26 19:01:40 2026 GMT
        Subject: CN=559977fded496118095fd43fc3bfc75186b34347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ff:82:e1:01:6f:ce:b9:08:74:dd:ff:9e:93:
                    dd:9c:99:f3:f9:80:3e:38:14:9c:86:db:e3:9f:a8:
                    40:92:4e:b8:0f:8a:a7:c7:7f:8f:6e:93:ab:5e:1a:
                    4b:18:9e:b0:04:cc:8b:67:6d:f5:5d:88:17:98:3f:
                    ee:80:55:aa:95:17:38:57:6b:bd:40:0e:85:2a:6a:
                    af:f1:85:13:02:fc:d0:b4:fb:46:c8:33:d6:22:9a:
                    90:fd:32:bc:64:3e:76:ae:c1:25:96:c3:1e:29:a2:
                    12:b5:6a:6c:69:6d:aa:d6:18:fd:d5:f8:47:f7:c7:
                    14:17:6c:83:57:8d:6d:fe:2d:9f:b9:90:58:c2:5f:
                    43:40:53:6f:cf:32:fb:3c:2f:d2:b1:2f:cf:44:0c:
                    f5:1d:a8:f4:8b:3d:b7:02:57:40:84:a9:a8:3f:e5:
                    3e:a1:16:4d:35:ec:25:cf:a2:68:e4:85:53:08:35:
                    d7:62:44:8d:6e:49:17:26:91:bd:35:fc:8a:ec:be:
                    0d:59:f5:dd:eb:81:ef:57:c8:99:15:76:c8:7c:fd:
                    84:06:c4:d7:41:1c:5e:40:56:bf:7e:c9:50:37:1b:
                    e7:27:82:12:0d:32:4c:b3:23:a2:ec:09:25:49:88:
                    dd:74:49:26:f6:04:05:af:e8:bb:96:d3:df:78:80:
                    80:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:99:77:FD:ED:49:61:18:09:5F:D4:3F:C3:BF:C7:51:86:B3:43:47
            X509v3 Authority Key Identifier:
                keyid:EF:58:4B:51:1D:96:A4:AE:6C:96:30:01:97:F8:4F:96:A3:AF:C2:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71hLUR2WpK5sljABl_hPlqOvwkY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d6cb0-0396-4f2b-aec3-47e3049830b0/1/71hLUR2WpK5sljABl_hPlqOvwkY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:42:c3:cf:80:31:45:a3:09:c2:70:93:87:18:36:db:0b:7b:
         43:1f:43:6e:91:9e:6d:a8:36:08:be:8f:e4:11:3f:6c:d8:0c:
         32:e1:e1:be:b3:9e:eb:e7:ba:7d:5d:78:ea:7a:10:ce:99:41:
         45:b1:cb:e4:a9:9e:45:8b:bb:a7:d3:8c:62:66:7c:15:a7:85:
         d3:69:8b:c7:ed:df:76:a6:68:84:4e:bd:a2:63:c7:f9:4d:3e:
         fc:27:67:40:e6:aa:39:e8:4b:4e:11:30:36:a8:3e:01:45:b3:
         c4:9d:32:fa:9c:3f:15:51:dd:81:38:a7:d4:91:39:0e:cc:f2:
         f8:7d:a4:51:9c:9c:07:0d:df:7c:76:51:df:e6:3f:f8:1a:c9:
         40:82:ec:29:d7:2d:d5:56:bd:cb:43:8f:99:49:af:e2:63:92:
         65:6a:7b:d1:39:f4:a3:4c:5d:43:62:8d:cd:8d:4e:0d:9d:cd:
         32:d7:fa:c4:a7:68:3a:d6:fa:fe:95:f8:44:78:87:df:03:04:
         a7:24:46:bb:e2:41:8f:17:2c:3d:45:dd:97:92:68:b8:22:ce:
         d8:f1:1b:9b:ce:84:a9:1e:02:b1:97:8f:c5:75:f4:ab:48:37:
         5b:a0:67:41:21:f5:0d:73:c4:c2:fb:63:56:04:b6:11:55:9e:
         60:45:90:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:55:51 2026 by rpki-client