Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
File:                     eIW8vdwL57G92jasnwzsQn8Tey4.mft (raw, json)
Hash identifier:          YDlzm/yW8yx1el5tcGVCNavhjd3yhOyHLgwoKCGZ/ZE=
Subject key identifier:   E8:72:BC:FE:1D:1E:4A:27:4F:07:94:4D:5A:F3:5D:F9:D2:BF:A1:0F
Authority key identifier: 78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E
Certificate issuer:       /CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e
Certificate serial:       01A0C09EEFABCCAC991E71D9E5F8744F0273
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
Manifest number:          0288
Signing time:             Sun 20 Sep 2026 21:00:36 +0000
Manifest this update:     Sun 20 Sep 2026 21:00:36 +0000
Manifest next update:     Mon 21 Sep 2026 21:00:36 +0000
Files and hashes:         1: eIW8vdwL57G92jasnwzsQn8Tey4.crl (hash: l8MoMl5wKixo3IY4vkq8uawJgbvESmEBRdGrnmvVwpI=)
                          2: mG4EijAvnONRj78ap4took9k5k0.asa (hash: LCkjOsZJgCsTlelMgbV8nr5RF7I7nsemSo0VuD8o6KQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:9e:ef:ab:cc:ac:99:1e:71:d9:e5:f8:74:4f:02:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7885bcbddc0be7b1bdda36ac9f0cec427f137b2e
        Validity
            Not Before: Sep 20 21:00:36 2026 GMT
            Not After : Sep 21 21:00:36 2026 GMT
        Subject: CN=e872bcfe1d1e4a274f07944d5af35df9d2bfa10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:34:12:1a:ab:b8:26:78:68:21:22:c1:61:
                    78:34:67:73:23:b5:bf:de:97:0c:ba:9d:02:29:23:
                    65:a7:72:aa:59:a1:cf:24:6f:b2:51:f9:28:96:04:
                    07:3e:81:b1:99:97:61:9d:90:76:1b:41:50:f3:1a:
                    82:8a:4b:ef:cf:13:80:7e:92:ac:80:3f:ca:91:a8:
                    3a:ee:bd:36:c5:d8:40:83:81:33:7f:07:f3:09:fb:
                    d0:9d:3b:99:f4:c7:5b:0b:3d:ae:50:2f:65:c8:20:
                    0c:c9:e7:0e:cf:e8:42:fa:c8:74:0f:d8:0c:7e:1e:
                    68:6c:1b:c4:08:86:a3:01:7d:b5:73:d0:cb:70:e7:
                    df:59:42:01:53:a2:74:e1:21:78:2a:d1:bd:85:09:
                    3c:f5:82:4c:1d:e5:46:5d:0c:d1:fa:0c:83:4e:95:
                    c7:fd:44:37:69:04:c7:ca:54:bc:4e:8a:4f:9a:17:
                    a4:b8:f8:90:64:b6:33:63:3e:58:e9:6d:71:80:34:
                    6c:2f:bb:fc:7e:ff:9e:ad:68:2a:c0:9a:42:e0:04:
                    21:05:50:bc:69:d9:f7:91:58:ff:1f:da:0b:ce:2b:
                    21:f7:2c:95:f5:df:f8:12:2f:93:18:f2:fb:8f:84:
                    de:88:33:62:b8:ae:ad:99:6d:43:21:e3:7c:59:92:
                    53:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:72:BC:FE:1D:1E:4A:27:4F:07:94:4D:5A:F3:5D:F9:D2:BF:A1:0F
            X509v3 Authority Key Identifier:
                keyid:78:85:BC:BD:DC:0B:E7:B1:BD:DA:36:AC:9F:0C:EC:42:7F:13:7B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIW8vdwL57G92jasnwzsQn8Tey4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c96cef-fbdd-44de-b13d-4fc7b6c7a4c2/1/eIW8vdwL57G92jasnwzsQn8Tey4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f1:1e:c7:6b:3d:11:fb:90:a4:49:3a:1f:1d:97:69:9f:13:
         9d:1a:07:6f:39:7c:dd:c3:72:71:f3:64:8d:85:0a:53:b5:b2:
         df:46:5c:c1:58:86:fe:70:e0:33:05:c1:5f:97:1b:f7:33:d1:
         cf:22:d6:fb:24:b9:08:1e:23:e2:40:4e:dc:da:f4:db:5b:6f:
         7f:62:eb:d5:bc:e2:d6:f7:3a:55:c8:cf:f1:3e:7d:d4:0a:77:
         ff:55:30:8a:41:26:b8:14:20:e3:2b:6d:05:76:69:36:a5:a7:
         47:ce:ca:17:8a:da:2d:20:2f:54:d3:f9:ca:5b:49:fa:17:d8:
         d3:e3:6b:b7:8d:a3:1a:56:09:6b:b6:34:03:33:bc:e8:34:15:
         1d:48:76:5e:cf:bf:a6:c1:6c:a2:da:01:cc:3d:da:59:73:ca:
         5f:a2:85:2e:e0:9e:52:13:f8:3c:84:d3:e2:51:19:0f:bf:46:
         b1:34:54:56:3f:b0:d4:0b:41:6d:e4:1f:44:8d:f0:90:34:99:
         f4:c8:2e:3c:9c:6c:fd:b8:40:ac:1c:ed:99:36:10:8f:9d:07:
         c4:b6:81:59:e9:dd:2a:4e:16:bd:07:cd:80:8d:5f:62:f4:4d:
         43:6c:dc:11:a2:36:1c:64:1f:b1:ad:81:e3:22:b9:7b:b2:4c:
         b9:14:ef:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:15:14 2026 by rpki-client