Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/2430f2-5f5e-43f3-b341-bbceacaf756f/1/E8KNTm6rLVST9iUm0dCvmbc1TbU.mft
File:                     E8KNTm6rLVST9iUm0dCvmbc1TbU.mft (raw, json)
Hash identifier:          lX7E3NBN47igxV0nIC2Jpz0gW1pDTQAGp3zaVZ4rsS0=
Subject key identifier:   F2:35:C5:87:71:EF:E7:29:A5:18:DD:E4:3B:BA:B4:94:44:EE:8F:6C
Authority key identifier: 13:C2:8D:4E:6E:AB:2D:54:93:F6:25:26:D1:D0:AF:99:B7:35:4D:B5
Certificate issuer:       /CN=13c28d4e6eab2d5493f62526d1d0af99b7354db5
Certificate serial:       01A1E05F5E9CE43A1F9D18C8FC15314A4EC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E8KNTm6rLVST9iUm0dCvmbc1TbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/2430f2-5f5e-43f3-b341-bbceacaf756f/1/E8KNTm6rLVST9iUm0dCvmbc1TbU.mft
Manifest number:          81
Signing time:             Sun 15 Nov 2026 18:01:48 +0000
Manifest this update:     Sun 15 Nov 2026 18:01:48 +0000
Manifest next update:     Mon 16 Nov 2026 18:01:48 +0000
Files and hashes:         1: E8KNTm6rLVST9iUm0dCvmbc1TbU.crl (hash: sWKh+/M3BDY11uGIQHlkAs4oJeJ86vlPeqeK/gAZBcU=)
                          2: pLRxZ1yLANV0Ag3k-MFvAVmTMdA.asa (hash: bdglNJQ3Y+TYe08dTAuTGDUbdnYgyMjTBRRAohd7Vfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/2430f2-5f5e-43f3-b341-bbceacaf756f/1/E8KNTm6rLVST9iUm0dCvmbc1TbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/2430f2-5f5e-43f3-b341-bbceacaf756f/1/E8KNTm6rLVST9iUm0dCvmbc1TbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E8KNTm6rLVST9iUm0dCvmbc1TbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:e0:5f:5e:9c:e4:3a:1f:9d:18:c8:fc:15:31:4a:4e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13c28d4e6eab2d5493f62526d1d0af99b7354db5
        Validity
            Not Before: Nov 15 18:01:48 2026 GMT
            Not After : Nov 16 18:01:48 2026 GMT
        Subject: CN=f235c58771efe729a518dde43bbab49444ee8f6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:e4:75:c0:00:dc:cf:59:9f:30:1f:40:1e:
                    b4:4d:aa:06:05:b9:4f:aa:54:1e:72:cd:82:3d:a1:
                    af:b3:6c:68:55:df:67:9e:dd:7f:b9:05:6f:f7:06:
                    d5:61:7c:d4:ea:e1:f4:a0:90:b5:e4:ee:16:75:b2:
                    87:f0:fe:12:d6:af:bd:dc:d1:4f:43:d2:56:90:d4:
                    55:c4:c9:aa:90:2a:63:c1:42:44:20:08:10:cc:e2:
                    8b:fe:35:67:27:c1:2f:1e:1e:d2:3c:de:70:d0:75:
                    a0:5e:7f:01:c2:91:06:17:17:e5:78:e5:79:6e:83:
                    3b:83:8e:27:ab:31:08:3b:ab:b4:6f:95:fe:e5:0c:
                    f3:2f:2b:ea:71:14:b7:e7:d5:3a:41:fd:29:69:9d:
                    62:33:5b:67:be:b6:44:64:e8:ba:99:e0:d6:da:d5:
                    f2:49:43:a0:43:4f:6b:d4:eb:b0:47:4a:bd:3a:e0:
                    7c:1e:90:48:ed:11:74:ac:60:85:49:e1:40:9a:87:
                    1a:ab:ed:d4:68:c4:29:99:8a:3c:a9:a4:74:21:a3:
                    ec:61:09:f0:5d:02:53:ab:b1:70:d8:23:77:3d:a0:
                    49:70:e0:e7:6c:5e:ac:2b:df:29:ea:3f:fb:e2:22:
                    bd:d9:16:a2:b9:67:b1:6d:d1:d0:37:93:d8:35:3a:
                    7d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:35:C5:87:71:EF:E7:29:A5:18:DD:E4:3B:BA:B4:94:44:EE:8F:6C
            X509v3 Authority Key Identifier:
                keyid:13:C2:8D:4E:6E:AB:2D:54:93:F6:25:26:D1:D0:AF:99:B7:35:4D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8KNTm6rLVST9iUm0dCvmbc1TbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2430f2-5f5e-43f3-b341-bbceacaf756f/1/E8KNTm6rLVST9iUm0dCvmbc1TbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2430f2-5f5e-43f3-b341-bbceacaf756f/1/E8KNTm6rLVST9iUm0dCvmbc1TbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:39:f1:0d:04:75:14:68:e8:b5:c8:0f:da:a0:ec:43:a6:da:
         e2:61:69:e1:20:af:45:0e:71:e6:a9:d9:53:84:c8:6e:dc:ac:
         1b:4f:5e:9e:f9:a8:b2:8f:9a:cd:43:ea:a6:1c:27:4b:d8:f8:
         18:9f:43:f4:8f:12:76:de:22:e5:d1:63:4d:64:cb:95:85:ec:
         db:14:a4:05:44:45:57:7e:fd:e8:7c:13:7d:5a:83:02:a3:81:
         68:e2:6b:d0:b9:d6:47:5e:a2:5a:10:2d:c2:ab:d0:46:9e:5e:
         a8:a1:3a:3d:a3:96:2c:8b:e6:f3:fc:c0:16:f5:31:91:b1:27:
         a8:5e:11:bf:d3:49:35:2a:fd:cd:53:b5:a3:b5:77:1e:27:e9:
         8a:9f:28:99:8a:96:e7:73:cb:f7:82:c6:80:08:ff:04:c9:2d:
         0e:fc:5e:2c:06:87:44:21:8c:f6:d3:02:a8:20:62:32:5e:48:
         25:49:b3:d3:21:e7:4e:f1:e5:f9:7d:72:52:1c:4e:8c:77:fc:
         67:3b:a3:92:ab:a7:10:a8:94:d1:8a:5f:c2:b4:f9:a8:d2:8c:
         c5:9a:d9:01:f1:1a:f4:f2:70:9b:a6:c5:6a:74:33:91:35:73:
         0f:60:aa:27:c2:b9:db:3f:b2:24:78:84:6d:29:34:ca:ad:65:
         dc:3f:78:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHgX16c5DofnRjI/BUxSk7FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzYzI4ZDRlNmVhYjJkNTQ5M2Y2MjUyNmQxZDBhZjk5Yjcz
NTRkYjUwHhcNMjYxMTE1MTgwMTQ4WhcNMjYxMTE2MTgwMTQ4WjAzMTEwLwYDVQQD
EyhmMjM1YzU4NzcxZWZlNzI5YTUxOGRkZTQzYmJhYjQ5NDQ0ZWU4ZjZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfHkdcAA3M9ZnzAfQB60TaoGBblP
qlQecs2CPaGvs2xoVd9nnt1/uQVv9wbVYXzU6uH0oJC15O4WdbKH8P4S1q+93NFP
Q9JWkNRVxMmqkCpjwUJEIAgQzOKL/jVnJ8EvHh7SPN5w0HWgXn8BwpEGFxfleOV5
boM7g44nqzEIO6u0b5X+5QzzLyvqcRS359U6Qf0paZ1iM1tnvrZEZOi6meDW2tXy
SUOgQ09r1OuwR0q9OuB8HpBI7RF0rGCFSeFAmocaq+3UaMQpmYo8qaR0IaPsYQnw
XQJTq7Fw2CN3PaBJcODnbF6sK98p6j/74iK92RaiuWexbdHQN5PYNTp9+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPI1xYdx7+cppRjd5Du6tJRE7o9sMB8GA1UdIwQY
MBaAFBPCjU5uqy1Uk/YlJtHQr5m3NU21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRThLTlRtNnJMVlNUOWlVbTBkQ3ZtYmMxVGJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8yNDMwZjItNWY1ZS00M2YzLWIzNDEt
YmJjZWFjYWY3NTZmLzEvRThLTlRtNnJMVlNUOWlVbTBkQ3ZtYmMxVGJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8yNDMwZjItNWY1ZS00M2YzLWIzNDEtYmJjZWFjYWY3NTZm
LzEvRThLTlRtNnJMVlNUOWlVbTBkQ3ZtYmMxVGJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATznxDQR1
FGjotcgP2qDsQ6ba4mFp4SCvRQ5x5qnZU4TIbtysG09envmoso+azUPqphwnS9j4
GJ9D9I8Sdt4i5dFjTWTLlYXs2xSkBURFV3796HwTfVqDAqOBaOJr0LnWR16iWhAt
wqvQRp5eqKE6PaOWLIvm8/zAFvUxkbEnqF4Rv9NJNSr9zVO1o7V3Hifpip8omYqW
53PL94LGgAj/BMktDvxeLAaHRCGM9tMCqCBiMl5IJUmz0yHnTvHl+X1yUhxOjHf8
ZzujkqunEKiU0YpfwrT5qNKMxZrZAfEa9PJwm6bFanQzkTVzD2CqJ8K52z+yJHiE
bSk0yq1l3D946A==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:28 2026 by rpki-client