Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
File:                     ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft (raw, json)
Hash identifier:          rrkJ6t6veyCxjylnzm8VuBsH7v8gAzgxywYT16B2K5I=
Subject key identifier:   8D:C6:5D:C0:2E:35:F3:D9:C5:38:30:44:D1:3B:7D:6C:8C:6F:88:EE
Authority key identifier: 45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A
Certificate issuer:       /CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
Certificate serial:       01A0C47CB6D19A78431EC036A9FEF04DA10B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
Manifest number:          0A58
Signing time:             Mon 21 Sep 2026 15:01:42 +0000
Manifest this update:     Mon 21 Sep 2026 15:01:42 +0000
Manifest next update:     Tue 22 Sep 2026 15:01:42 +0000
Files and hashes:         1: ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl (hash: gndxbMhPswH8/FKaAqs8IhlEYTbC4USxO+PXG1uTLfE=)
                          2: hK5lLAYeEFCKLEcmlgGIxpgeFig.roa (hash: ya0PEJnK8zefLN3DEt7Na6bo0IiHLAvZHRV5UX0rkk8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7c:b6:d1:9a:78:43:1e:c0:36:a9:fe:f0:4d:a1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45e6985c8dac8cc6772b7fd39c3a75644c25a25a
        Validity
            Not Before: Sep 21 15:01:42 2026 GMT
            Not After : Sep 22 15:01:42 2026 GMT
        Subject: CN=8dc65dc02e35f3d9c5383044d13b7d6c8c6f88ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ef:19:c6:a4:05:f9:cf:bf:1e:d7:bd:37:14:
                    e8:47:b8:3f:11:0e:24:c4:7f:ab:c3:23:31:91:5d:
                    70:2c:df:6a:08:a7:8e:e7:7d:d6:f9:3c:8d:4f:ca:
                    18:1a:a1:92:5a:ed:45:de:c5:76:09:80:f4:cb:54:
                    78:66:38:67:13:19:43:8e:6c:c8:b0:f2:4c:69:8e:
                    f3:0e:99:0d:60:3b:d6:6e:33:2e:3a:73:85:77:3b:
                    ce:d3:4d:9d:bf:49:47:b3:10:21:d3:b1:b8:d4:4f:
                    0c:42:a1:9a:78:46:fb:0f:9c:8e:7f:24:21:6a:4b:
                    a3:ea:7f:38:28:b2:d5:75:35:37:05:75:a4:bf:5e:
                    e9:da:87:d1:7c:bd:20:f2:c3:7d:cc:8d:d2:ca:38:
                    8e:53:51:82:fb:36:36:90:e4:52:6c:f3:bb:2e:59:
                    a4:cb:48:a4:b3:5c:9e:0f:10:46:9d:57:37:85:06:
                    e1:81:0c:03:17:a6:5e:12:d3:0c:b0:7a:fc:46:d4:
                    2f:c6:be:a4:4a:ff:99:d5:2f:7a:01:bb:6e:bd:28:
                    f7:57:be:0a:92:ba:57:b1:b2:82:d5:d6:8a:b8:c0:
                    31:ac:ba:83:71:99:fd:b8:d6:fc:22:6d:7e:70:38:
                    4e:e7:40:47:5e:46:58:e7:ab:5f:17:d1:bc:f7:67:
                    28:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:C6:5D:C0:2E:35:F3:D9:C5:38:30:44:D1:3B:7D:6C:8C:6F:88:EE
            X509v3 Authority Key Identifier:
                keyid:45:E6:98:5C:8D:AC:8C:C6:77:2B:7F:D3:9C:3A:75:64:4C:25:A2:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/64c4a7-361a-4829-a462-6924257530b0/1/ReaYXI2sjMZ3K3_TnDp1ZEwlolo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:55:71:f2:28:1f:52:d4:d1:77:53:b0:d5:89:68:04:1d:27:
         57:e6:65:b0:a0:09:a7:83:ce:04:2c:18:04:4d:60:73:b7:c1:
         b1:12:39:33:36:41:51:cc:fb:a2:3b:b2:54:bc:e4:8f:a7:d5:
         75:b4:b7:e5:ee:39:54:33:fa:d4:ff:d0:82:24:ce:b3:7c:ea:
         8e:35:5a:fb:af:37:af:41:e2:7e:73:68:14:df:25:60:81:94:
         9d:ac:f8:66:0a:fd:e3:67:20:fe:9f:6f:68:63:a1:2d:25:61:
         a2:16:c8:8c:17:4e:2b:3d:57:4d:72:9d:83:ce:e9:3e:d5:6a:
         06:44:92:d6:6d:c1:89:29:91:6c:b0:c3:25:21:39:0c:55:2b:
         97:f4:42:fa:e7:36:21:e1:21:a3:5b:9d:60:a7:5f:6b:ff:42:
         21:2c:4b:7b:98:d6:7f:e5:00:38:a4:0c:b0:23:52:e6:97:86:
         5d:50:01:8c:09:96:84:ed:0a:c8:bc:74:2d:53:15:97:98:0e:
         1f:69:f0:5c:83:dc:2b:0d:e1:b9:ee:f3:a7:f1:91:63:9c:79:
         99:59:a8:47:37:ea:33:d3:b6:57:12:76:29:ec:7e:27:47:fb:
         fa:b6:78:7a:1c:af:14:66:0a:67:5f:c3:a9:dc:1e:25:18:5b:
         19:13:ba:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:00:06 2026 by rpki-client