Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.mft
File:                     70z25cdLCj5rtoX6mtM8oOYPLDo.mft (raw, json)
Hash identifier:          nE0gELLyw8NiEOklCKv6MIfgivS5X2RXsWzcqPbC2Kw=
Subject key identifier:   BE:16:0A:6F:45:1C:4A:D9:F1:3D:E7:84:AB:CA:8B:42:14:AA:75:4C
Authority key identifier: EF:4C:F6:E5:C7:4B:0A:3E:6B:B6:85:FA:9A:D3:3C:A0:E6:0F:2C:3A
Certificate issuer:       /CN=ef4cf6e5c74b0a3e6bb685fa9ad33ca0e60f2c3a
Certificate serial:       01A12E0E542A023B1CDE688C35932F2FB32C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/70z25cdLCj5rtoX6mtM8oOYPLDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.mft
Manifest number:          0136
Signing time:             Mon 12 Oct 2026 03:00:53 +0000
Manifest this update:     Mon 12 Oct 2026 03:00:53 +0000
Manifest next update:     Tue 13 Oct 2026 03:00:53 +0000
Files and hashes:         1: 70z25cdLCj5rtoX6mtM8oOYPLDo.crl (hash: b3XrU2qJ+mmZA6m6lGyuYcICuQTRnzaid80OGq3xsfE=)
                          2: kb3m0Yfbi-ZgB-6hn18ll05A-X4.roa (hash: fodgj8GUyM4we+LaVMAoPNWS1kAAEkhv8qbasN62+Jg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/70z25cdLCj5rtoX6mtM8oOYPLDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2e:0e:54:2a:02:3b:1c:de:68:8c:35:93:2f:2f:b3:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef4cf6e5c74b0a3e6bb685fa9ad33ca0e60f2c3a
        Validity
            Not Before: Oct 12 03:00:53 2026 GMT
            Not After : Oct 13 03:00:53 2026 GMT
        Subject: CN=be160a6f451c4ad9f13de784abca8b4214aa754c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c8:b5:a5:b7:bf:9a:9b:52:09:e9:3d:e8:69:
                    a8:59:aa:ab:1f:4f:9a:c2:37:48:70:2f:01:cd:25:
                    bb:a2:0d:74:fb:7e:08:5d:5c:48:2f:ad:48:d9:34:
                    74:06:04:24:f6:b8:fb:46:29:36:e2:be:10:e1:3e:
                    cd:93:2c:5a:73:57:7c:fe:36:ee:1d:c0:53:03:d2:
                    95:2d:14:59:86:01:b2:bb:a1:2c:0c:4d:3a:4d:9b:
                    63:d1:3b:63:03:42:16:30:a6:ac:de:79:d6:d4:08:
                    00:0c:2e:71:fa:e4:f8:8e:82:e8:60:09:ac:ff:c9:
                    76:1b:1a:e0:76:6e:e9:78:66:77:e1:ec:cc:22:72:
                    59:5f:e6:0e:be:13:68:b8:29:9a:15:8c:91:26:ec:
                    94:b9:0f:4e:4c:61:16:f2:aa:de:db:ea:6e:36:37:
                    32:01:cc:78:1a:08:cd:c9:43:1c:47:71:23:08:e4:
                    2b:20:72:83:45:95:49:a9:e3:56:c2:e9:f9:cd:26:
                    f1:e8:e3:59:2b:cd:86:c8:fc:f5:80:a8:e0:e8:77:
                    a4:3a:ad:21:01:1a:bc:5d:16:d5:be:71:fa:b6:c6:
                    93:33:98:5d:b6:15:b9:39:7e:9b:67:84:0f:bd:29:
                    27:73:20:5e:a1:e4:ec:e8:e8:ab:e8:15:5e:90:5c:
                    6c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:16:0A:6F:45:1C:4A:D9:F1:3D:E7:84:AB:CA:8B:42:14:AA:75:4C
            X509v3 Authority Key Identifier:
                keyid:EF:4C:F6:E5:C7:4B:0A:3E:6B:B6:85:FA:9A:D3:3C:A0:E6:0F:2C:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70z25cdLCj5rtoX6mtM8oOYPLDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/0b1514-f4bd-456b-93a5-8c6a12a0f786/1/70z25cdLCj5rtoX6mtM8oOYPLDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:69:fa:90:cc:00:af:28:08:8d:45:a5:d1:0d:57:f1:ad:41:
         0b:d9:5b:dd:da:d7:e3:2b:52:95:b2:59:12:37:e3:7a:3e:08:
         6f:04:90:7d:26:62:b0:1d:a1:6b:93:de:75:2d:69:d3:58:4c:
         17:d2:a3:8d:07:28:05:11:42:19:43:0d:21:a9:45:fd:4f:7d:
         b6:3b:4c:1b:db:7f:d5:a3:b8:66:1f:03:d4:5c:5d:23:c5:87:
         9f:2d:3e:7e:4d:a4:c5:40:fa:c4:d6:99:98:74:38:09:29:ea:
         86:94:23:9b:d5:d6:0a:1c:03:2d:59:41:a7:cc:21:cd:57:d3:
         f0:33:ad:69:ae:11:88:f8:2a:04:80:81:6b:3c:df:64:15:a7:
         4c:4c:02:3d:da:3e:67:9d:0a:34:94:b6:72:04:17:a9:9e:94:
         be:6a:83:fb:d5:8e:49:9b:94:54:81:8e:1f:52:1a:f2:a0:e6:
         a4:21:b1:ab:98:d9:1d:44:0e:48:d1:b1:af:cd:ae:0e:92:ee:
         36:c1:8d:70:fc:69:6f:56:ff:fb:b4:3b:3f:23:eb:05:20:eb:
         e5:35:04:39:8f:7c:10:ac:39:2b:31:f3:36:58:3e:93:77:95:
         3b:c9:ed:a4:d6:9d:e1:fe:29:e0:0d:63:b2:fe:de:a0:8d:a2:
         45:70:9b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 06:47:41 2026 by rpki-client