Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
File:                     E11E-QKeG110PPzlgR7-Xib4yGI.mft (raw, json)
Hash identifier:          rUT2H5Dh9a4InzDO9u0rkTV/O4oUa8MVEO0O1egj6kw=
Subject key identifier:   69:FE:73:2C:4E:41:90:C3:7E:76:59:06:B8:00:E5:8F:58:7F:E9:CD
Authority key identifier: 13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62
Certificate issuer:       /CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
Certificate serial:       01A0C8584637B52B756683FA7ED7FDE0F910
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
Manifest number:          09A0
Signing time:             Tue 22 Sep 2026 09:00:23 +0000
Manifest this update:     Tue 22 Sep 2026 09:00:23 +0000
Manifest next update:     Wed 23 Sep 2026 09:00:23 +0000
Files and hashes:         1: E11E-QKeG110PPzlgR7-Xib4yGI.crl (hash: 4hlY+KSOxNaQPvdo8bXOLWHt6+NAZXnHX5PG6u8E+Ac=)
                          2: G790ctvfB8H7olkvHbj2C62gXak.roa (hash: 719eZlvdoP18xjD6bNkykAF0yzH6SUelF8SSBbaOpiI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 09:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:58:46:37:b5:2b:75:66:83:fa:7e:d7:fd:e0:f9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135d44f9029e1b5d743cfce5811efe5e26f8c862
        Validity
            Not Before: Sep 22 09:00:23 2026 GMT
            Not After : Sep 23 09:00:23 2026 GMT
        Subject: CN=69fe732c4e4190c37e765906b800e58f587fe9cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ee:c0:9e:f2:bb:19:b1:d2:08:17:3f:03:35:
                    73:bb:e5:f8:14:0d:fc:6f:05:91:b0:09:62:3b:f6:
                    20:c3:d5:47:1f:90:dd:fd:f9:fc:43:85:0d:29:5b:
                    68:ee:bb:91:d9:0c:11:d7:9b:14:66:92:40:96:33:
                    1b:38:48:d8:a9:cb:08:58:38:03:cd:f4:f4:ec:77:
                    18:08:0b:7b:2a:c8:e2:06:5a:98:2e:2d:b3:0a:44:
                    d0:e2:38:13:69:bc:a4:07:f3:14:08:87:ef:58:4b:
                    0d:16:2c:e6:38:1f:2b:2a:3e:03:05:f8:d3:5f:44:
                    d2:62:c2:50:ec:5e:1f:99:9b:39:db:47:20:e7:a8:
                    2c:a3:2a:e7:49:90:3a:1b:3b:9d:f6:0b:9a:65:ca:
                    67:21:51:10:ca:f1:e9:1f:fc:1b:98:ee:91:b4:5c:
                    dc:d0:73:84:31:8d:b6:e6:47:7f:96:09:ab:1d:b5:
                    9d:cf:92:1a:70:a3:ef:b0:1d:87:eb:26:e0:77:f5:
                    6e:50:b6:9c:60:15:15:d3:c4:11:4a:3f:99:7c:9c:
                    12:ee:15:ce:d1:19:e7:51:a8:2e:04:ad:0c:42:42:
                    cb:13:86:6e:2d:f2:c2:09:e6:1d:75:a5:7c:64:02:
                    8c:19:cd:4f:fa:c5:dc:bf:b6:58:49:04:71:f3:00:
                    e1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FE:73:2C:4E:41:90:C3:7E:76:59:06:B8:00:E5:8F:58:7F:E9:CD
            X509v3 Authority Key Identifier:
                keyid:13:5D:44:F9:02:9E:1B:5D:74:3C:FC:E5:81:1E:FE:5E:26:F8:C8:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E11E-QKeG110PPzlgR7-Xib4yGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/67a9fb-a85b-431d-afb5-d0d33b1668a5/1/E11E-QKeG110PPzlgR7-Xib4yGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:df:84:54:27:5e:a4:dc:03:87:3a:22:25:fb:58:71:ec:fe:
         4e:16:10:95:6c:64:67:d6:c8:70:52:b1:be:89:8b:d5:b3:96:
         62:9b:5f:0e:08:f7:94:04:41:bb:ad:af:02:bd:ab:a8:95:89:
         19:90:f5:6a:52:3c:b8:57:32:5f:a9:57:4f:39:3c:32:05:9a:
         9b:64:b7:c4:38:1c:ee:c9:cf:cc:e1:05:98:dd:ca:a6:b4:b0:
         8c:27:f1:c7:3d:04:19:41:9c:89:e0:57:17:0f:d8:27:ec:3d:
         47:13:f6:75:b3:be:10:a8:25:7a:4e:9d:16:5f:73:96:df:75:
         a4:45:17:57:c1:e2:4a:e1:49:47:39:22:94:3c:98:27:e4:e7:
         96:04:bc:9e:eb:03:00:9a:46:6d:7f:75:c2:9e:93:b9:7a:6a:
         b2:4f:60:91:16:2f:0b:37:45:79:ce:10:b9:95:99:5b:b6:05:
         d9:77:e7:c6:57:a6:9f:8e:22:ca:ea:22:f6:e1:bc:0a:d5:ff:
         79:93:d7:ae:94:f5:0c:54:71:76:57:e4:e8:54:fa:09:e3:9e:
         e7:16:4c:7c:ab:50:fe:db:a4:e6:24:c3:72:17:16:4c:b4:72:
         b5:b3:08:c3:17:3b:d8:78:d7:c2:d8:17:da:fa:fd:1c:7b:03:
         dd:22:55:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:09:05 2026 by rpki-client