Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft
File:                     EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft (raw, json)
Hash identifier:          Da3x8nJNkECvakxzv1y/yWT6bkiTdRjmq7JHRGRUTMg=
Subject key identifier:   48:1C:56:A5:FE:97:A2:7A:B4:23:18:36:47:BB:18:63:FE:99:C0:9E
Authority key identifier: 11:D1:7E:20:42:2F:59:B6:D8:BD:2D:83:07:C1:D7:BF:D8:F0:F5:84
Certificate issuer:       /CN=11d17e20422f59b6d8bd2d8307c1d7bfd8f0f584
Certificate serial:       01A0C669A69D55D2ECC1167EF4C4C3808F1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft
Manifest number:          E0
Signing time:             Tue 22 Sep 2026 00:00:07 +0000
Manifest this update:     Tue 22 Sep 2026 00:00:07 +0000
Manifest next update:     Wed 23 Sep 2026 00:00:07 +0000
Files and hashes:         1: EdF-IEIvWbbYvS2DB8HXv9jw9YQ.crl (hash: TD12DXLANDLSZyWO8UHeWIQ34iTjDyxWGaPIm1+MHfQ=)
                          2: bVwbGhBG_CV5IoXeX_1AI4ewEyM.roa (hash: +XMoZ7qLxuL8LJi3clBJZFqP7IHlVTCAAs0BMOcjgWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:69:a6:9d:55:d2:ec:c1:16:7e:f4:c4:c3:80:8f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d17e20422f59b6d8bd2d8307c1d7bfd8f0f584
        Validity
            Not Before: Sep 22 00:00:07 2026 GMT
            Not After : Sep 23 00:00:07 2026 GMT
        Subject: CN=481c56a5fe97a27ab423183647bb1863fe99c09e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b2:f0:fe:f7:ad:98:a0:26:36:75:e6:0a:82:
                    ba:b6:45:59:2c:3d:58:29:24:dc:f4:76:f1:83:b5:
                    f5:ed:e7:50:c2:2e:00:99:4b:56:ac:9b:99:21:95:
                    87:b6:b7:1e:f0:c7:6c:8f:d5:21:26:f6:a8:68:ca:
                    c9:d9:fa:5a:e2:3e:97:b8:b6:68:78:0c:74:3c:28:
                    8f:a4:18:bc:33:36:c4:07:bb:25:4d:7f:4b:62:6c:
                    af:f6:01:46:04:9c:a2:ab:58:7b:e3:06:89:6f:b1:
                    92:e9:35:7b:48:8f:7d:3f:44:a6:b5:59:cd:30:31:
                    ca:5f:e6:d2:e2:a7:c9:2f:07:1b:f2:60:1c:97:92:
                    96:47:de:91:2a:b3:fe:97:72:75:9f:79:3f:b6:98:
                    1e:64:98:07:27:9a:ef:95:68:a6:bb:66:0d:de:39:
                    a6:5c:18:c3:0f:a5:b7:f1:3b:40:a8:96:9d:41:1a:
                    92:20:33:ae:6f:20:b9:74:72:b8:19:9b:7b:88:39:
                    ba:b6:6c:5b:e3:e4:32:97:94:6e:b4:f2:d8:dd:ae:
                    a2:ca:ef:8a:09:04:c5:87:4b:69:67:5a:52:63:96:
                    13:14:f5:03:5a:e4:63:60:cb:7a:69:0a:75:62:29:
                    65:23:0b:08:e0:c6:2c:17:5a:bd:51:ec:17:67:2e:
                    fe:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1C:56:A5:FE:97:A2:7A:B4:23:18:36:47:BB:18:63:FE:99:C0:9E
            X509v3 Authority Key Identifier:
                keyid:11:D1:7E:20:42:2F:59:B6:D8:BD:2D:83:07:C1:D7:BF:D8:F0:F5:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f70e1a-732e-4e6b-b3b5-f562b8974d8b/1/EdF-IEIvWbbYvS2DB8HXv9jw9YQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:d3:ad:9f:04:d3:87:a8:07:38:42:47:95:32:8a:cb:f2:13:
         67:ce:af:b8:dd:63:f8:e6:14:87:f2:a9:87:74:c7:43:11:0f:
         d4:98:d4:a4:20:f3:76:e5:0a:c9:e0:ac:a9:e6:ca:79:15:1a:
         4f:c6:9c:b8:7e:e5:5e:12:21:a6:33:e2:0b:8c:9b:8b:c6:7c:
         f2:72:84:65:f0:26:7a:24:22:4a:62:a4:e4:35:9a:60:1b:47:
         7f:99:5d:50:28:0f:8e:19:97:b3:f9:4b:cf:6c:64:2e:9c:06:
         8f:4a:ab:c2:50:c7:4a:1c:90:4a:8c:08:47:ed:5c:8a:0d:57:
         fc:dd:6e:46:d2:b9:a7:e7:0d:38:ab:d2:7b:1f:21:00:bb:77:
         a5:d2:cb:67:ce:6f:68:fb:e5:2a:6f:01:d9:b9:ce:30:a1:33:
         6d:3a:54:d0:a3:2f:ef:22:45:d2:d3:e0:27:4e:44:f5:8e:b3:
         69:d0:5e:13:90:e1:60:87:5c:78:6c:58:3d:98:54:c4:c4:ef:
         db:ad:54:68:33:04:4e:d4:a1:b3:de:12:84:9d:69:d5:d1:84:
         f0:83:7a:f4:37:33:b5:db:4b:50:4a:db:f0:cd:e1:42:5e:3d:
         51:21:ae:f5:29:b5:f2:6a:3d:89:ef:e8:a2:72:73:40:f6:ce:
         63:50:5f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:05:17 2026 by rpki-client