Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
File:                     E0nM7_Skij2rAkBn4XYNv1hlD9o.mft (raw, json)
Hash identifier:          1WgE6mi7Y25Ulzyb/yo6AHJ2feqqPbjX0S7PpEmrEmA=
Subject key identifier:   A7:9B:19:54:08:A1:C2:C4:33:CE:2F:AC:96:41:C6:54:3F:48:0E:D5
Authority key identifier: 13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA
Certificate issuer:       /CN=1349cceff4a48a3dab024067e1760dbf58650fda
Certificate serial:       01A0D9BA7B15B670B5E5A31C231EA4D82700
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
Manifest number:          10F4
Signing time:             Fri 25 Sep 2026 18:01:12 +0000
Manifest this update:     Fri 25 Sep 2026 18:01:12 +0000
Manifest next update:     Sat 26 Sep 2026 18:01:12 +0000
Files and hashes:         1: E0nM7_Skij2rAkBn4XYNv1hlD9o.crl (hash: mJ6sBVmLBYJmJHXzUv6qgWQcfss2k9/OzYlsqyykZ6Y=)
                          2: tiPSu8Y-m7bFT2Q5p7YlDzHrV6E.roa (hash: rj77DrlmC39KWKVNN8waQm35MPNGKCIe/g9stIOU5to=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:ba:7b:15:b6:70:b5:e5:a3:1c:23:1e:a4:d8:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1349cceff4a48a3dab024067e1760dbf58650fda
        Validity
            Not Before: Sep 25 18:01:12 2026 GMT
            Not After : Sep 26 18:01:12 2026 GMT
        Subject: CN=a79b195408a1c2c433ce2fac9641c6543f480ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7b:c3:6e:d2:78:13:81:e1:a2:b3:e6:a4:77:
                    2b:e5:e0:60:38:a1:82:bc:92:28:fd:be:2f:3a:ae:
                    72:f4:91:3d:50:74:d4:05:f1:69:61:5e:4b:bb:19:
                    d5:73:db:f3:0f:dd:fd:36:39:cd:2f:ab:99:79:fe:
                    17:53:e2:5e:c2:62:61:f4:5c:37:e7:24:a9:e7:e9:
                    3b:2f:b1:77:8c:b2:a4:e5:91:4d:88:c1:ff:2b:90:
                    1e:bc:a5:e1:1e:d3:31:01:ff:23:bd:8f:bf:e7:9c:
                    d0:77:0c:40:fc:06:3e:0b:a0:5b:be:d4:15:4b:d8:
                    b7:c0:d4:8b:8b:6f:e2:dc:18:30:85:9d:76:a9:47:
                    7e:33:09:72:11:7d:ab:b0:5d:0c:02:ca:ca:0a:a2:
                    e4:19:b5:d4:97:2c:3d:db:4c:12:e3:06:b6:44:49:
                    15:ed:88:49:1f:0d:83:17:21:58:96:c9:3f:d9:a8:
                    a7:9b:b4:9b:55:74:7b:8f:59:d4:b2:64:1d:7b:96:
                    78:e0:dc:77:52:af:69:a7:cb:29:b1:15:6a:48:ef:
                    b1:4e:6c:f3:21:10:b0:53:8b:dd:60:c1:f6:43:62:
                    86:9e:63:f7:e8:c5:2e:c4:90:39:13:6c:c2:72:67:
                    c6:69:5b:02:74:26:99:7c:e7:92:f7:9d:c6:f2:5c:
                    96:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9B:19:54:08:A1:C2:C4:33:CE:2F:AC:96:41:C6:54:3F:48:0E:D5
            X509v3 Authority Key Identifier:
                keyid:13:49:CC:EF:F4:A4:8A:3D:AB:02:40:67:E1:76:0D:BF:58:65:0F:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0nM7_Skij2rAkBn4XYNv1hlD9o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a306d0-4a20-4bcf-848e-d2ae2c336328/1/E0nM7_Skij2rAkBn4XYNv1hlD9o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:44:4c:e9:3e:a6:57:2e:4a:be:c8:cb:7c:32:90:03:b1:39:
         f6:e0:bc:bf:c4:e8:6d:f4:ae:b7:a3:0d:2c:fd:9e:24:01:8d:
         f5:12:76:0b:4b:a8:59:92:5f:49:b4:ac:15:cc:30:64:df:f6:
         e1:ba:f6:b1:61:c9:85:1c:05:74:8e:85:57:ba:d2:58:f4:bf:
         93:dd:41:e9:a3:fe:e7:cb:68:ac:39:91:a6:19:56:4f:c4:6b:
         6e:a4:bf:52:4b:15:d1:83:2c:7f:9c:35:9b:ec:0a:12:86:ce:
         08:25:5b:31:3b:18:34:b4:38:59:48:72:be:db:90:5c:a9:e0:
         04:e7:df:d0:fa:23:b5:8b:82:3a:36:68:6f:a7:3f:bc:ae:a9:
         25:57:f1:27:6c:b2:c2:94:da:6b:45:b5:95:5d:d6:ec:c1:b5:
         14:0b:e5:67:c6:c8:1a:4b:d8:b4:bf:18:61:7f:38:cf:44:2b:
         60:89:2d:e4:63:14:8d:2c:97:8f:b0:04:d8:99:3f:1f:1b:38:
         f9:b8:97:56:e6:c2:9d:ed:1e:5f:50:85:87:21:05:59:27:aa:
         b2:00:0b:5b:88:8e:bf:1c:c1:54:5c:20:3d:e5:10:d5:49:e8:
         da:53:97:03:b7:ab:54:a5:44:b8:86:e0:e4:d6:96:e9:1e:28:
         91:9d:8b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:52:43 2026 by rpki-client