Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/2d9db4-5707-41ee-b221-95d7a611ca56/1/eFdKfQ1O092jCAk9qvH6vuk4UPA.mft
File:                     eFdKfQ1O092jCAk9qvH6vuk4UPA.mft (raw, json)
Hash identifier:          2mc5hvbVdThQ7CRRuN/rD7BxiR6vAzQje19nwJHWcpM=
Subject key identifier:   00:61:B3:46:30:C9:C0:2C:4E:B3:60:4F:03:E1:FD:2E:47:BD:5A:74
Authority key identifier: 78:57:4A:7D:0D:4E:D3:DD:A3:08:09:3D:AA:F1:FA:BE:E9:38:50:F0
Certificate issuer:       /CN=78574a7d0d4ed3dda308093daaf1fabee93850f0
Certificate serial:       01A0BE42766460CC3BC0F10F60215544489E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eFdKfQ1O092jCAk9qvH6vuk4UPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/2d9db4-5707-41ee-b221-95d7a611ca56/1/eFdKfQ1O092jCAk9qvH6vuk4UPA.mft
Manifest number:          6E
Signing time:             Sun 20 Sep 2026 10:00:21 +0000
Manifest this update:     Sun 20 Sep 2026 10:00:21 +0000
Manifest next update:     Mon 21 Sep 2026 10:00:21 +0000
Files and hashes:         1: eFdKfQ1O092jCAk9qvH6vuk4UPA.crl (hash: e4oWzaaqbh3ScJSNxHKtnKtCgQ3GtW3p5DsV6JuCVBU=)
                          2: uWINjLXyzzz15SveFToMSSh06YY.asa (hash: 1vVDwziBAybLEC7T2mThcbiNw1ELRtkLd7LQgJmOVxQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/2d9db4-5707-41ee-b221-95d7a611ca56/1/eFdKfQ1O092jCAk9qvH6vuk4UPA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/2d9db4-5707-41ee-b221-95d7a611ca56/1/eFdKfQ1O092jCAk9qvH6vuk4UPA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eFdKfQ1O092jCAk9qvH6vuk4UPA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:42:76:64:60:cc:3b:c0:f1:0f:60:21:55:44:48:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78574a7d0d4ed3dda308093daaf1fabee93850f0
        Validity
            Not Before: Sep 20 10:00:21 2026 GMT
            Not After : Sep 21 10:00:21 2026 GMT
        Subject: CN=0061b34630c9c02c4eb3604f03e1fd2e47bd5a74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c0:3c:fc:c8:64:99:54:b2:f9:9f:a8:63:bc:
                    31:e5:1c:c9:f1:fe:90:21:0d:cd:a4:3e:8b:86:d2:
                    f8:04:64:72:dd:f1:50:0a:27:7c:70:c3:81:89:64:
                    a9:81:24:22:34:73:44:96:0e:d0:41:13:b4:74:fd:
                    69:e3:74:99:d0:e0:37:f2:06:40:ba:a3:f1:c4:4a:
                    96:82:36:e7:de:bc:82:fc:67:89:08:04:89:da:26:
                    ed:6c:ac:16:f1:5e:e1:12:27:df:41:ab:8a:98:72:
                    93:45:8b:8f:af:fc:aa:78:e0:ff:6c:e2:a7:09:36:
                    9d:64:38:3f:6a:56:2a:ce:eb:52:26:09:ac:b4:65:
                    35:e6:74:59:4d:fe:ef:14:a1:ee:0e:30:6b:3e:af:
                    f4:e4:63:c8:53:41:4a:3b:8b:4a:9d:57:02:23:0d:
                    2b:ee:bb:17:ed:77:40:1a:c9:53:03:2d:60:63:6d:
                    31:06:e3:8e:e0:31:5f:f1:5d:9c:04:40:d8:69:40:
                    62:79:30:44:14:ce:0a:84:9a:7e:cb:7f:29:cc:fd:
                    25:19:a5:1d:d7:fa:97:3e:19:e1:8b:67:36:cf:ff:
                    55:60:5e:bf:9d:6a:9d:c7:64:7e:df:6d:4e:11:ff:
                    f5:96:21:14:8d:2b:74:84:70:94:2d:5f:e0:23:de:
                    d1:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:61:B3:46:30:C9:C0:2C:4E:B3:60:4F:03:E1:FD:2E:47:BD:5A:74
            X509v3 Authority Key Identifier:
                keyid:78:57:4A:7D:0D:4E:D3:DD:A3:08:09:3D:AA:F1:FA:BE:E9:38:50:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eFdKfQ1O092jCAk9qvH6vuk4UPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2d9db4-5707-41ee-b221-95d7a611ca56/1/eFdKfQ1O092jCAk9qvH6vuk4UPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2d9db4-5707-41ee-b221-95d7a611ca56/1/eFdKfQ1O092jCAk9qvH6vuk4UPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:ca:83:c7:01:d7:40:d6:e7:d3:15:8c:7b:4e:ea:89:60:ef:
         a5:3e:8c:59:f0:41:1d:0a:30:1c:b3:c1:96:99:5f:06:54:d8:
         93:3e:c2:12:69:8d:c3:86:04:d3:aa:9e:5e:44:1b:11:55:4f:
         9f:01:09:4e:06:48:4f:1a:03:9b:63:a1:74:7c:96:89:c6:99:
         98:4f:b7:1e:5d:ba:65:4d:1b:38:27:e0:a2:44:bd:7b:05:9c:
         70:bb:49:eb:0f:67:c7:a9:51:12:f6:5c:44:71:3d:2d:ee:ee:
         a4:6a:5e:b5:5f:54:1c:14:c2:96:6a:c2:a9:c9:63:ac:9f:e1:
         d8:fc:03:4b:32:47:df:82:5c:8a:34:40:5d:98:cb:99:88:70:
         f2:3c:10:e2:b2:b8:d8:e5:c5:20:71:6b:9f:36:cc:ca:ee:4e:
         88:3e:29:65:3c:2c:99:87:1b:70:24:27:7d:33:42:1f:61:71:
         28:f7:72:5c:0d:82:ee:d1:1f:ca:ab:11:ff:9b:74:85:45:3a:
         74:64:ba:44:49:d1:b3:f2:83:2d:ed:e3:48:e8:1f:09:ef:b0:
         23:a8:49:4d:e2:75:d7:a6:4f:d9:ac:59:fc:61:91:eb:b9:d5:
         5e:ec:5e:ce:78:39:be:ad:d6:7c:68:c9:ec:bc:88:cd:72:18:
         8d:42:42:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:16:13 2026 by rpki-client