Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
File:                     ehuEnDQHAlATY6H5J-xCQJm5RyY.mft (raw, json)
Hash identifier:          SgyAK7EQxUGVNd1HEPrl7oFgxo1lTYjVHmkSSRn2+pU=
Subject key identifier:   95:DA:D0:0C:B5:A0:18:72:D8:5A:B4:70:B9:05:3A:43:D5:EB:DE:04
Authority key identifier: 7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26
Certificate issuer:       /CN=7a1b849c340702501363a1f927ec424099b94726
Certificate serial:       01A0C6D80F98A779166B575E49063E203678
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
Manifest number:          1A67
Signing time:             Tue 22 Sep 2026 02:00:43 +0000
Manifest this update:     Tue 22 Sep 2026 02:00:43 +0000
Manifest next update:     Wed 23 Sep 2026 02:00:43 +0000
Files and hashes:         1: 7UaBbCaDn-KSS5fLxt56x8jizZs.roa (hash: GSd2jVlV8OoeGmAQ8ge5d6QxeXQZs/RSCSQ5Bh6rcq8=)
                          2: ehuEnDQHAlATY6H5J-xCQJm5RyY.crl (hash: jkXFKCLa4/2vXrFJT5QK82jZ6mYBP1tB+HndU/z5hsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c6:d8:0f:98:a7:79:16:6b:57:5e:49:06:3e:20:36:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a1b849c340702501363a1f927ec424099b94726
        Validity
            Not Before: Sep 22 02:00:43 2026 GMT
            Not After : Sep 23 02:00:43 2026 GMT
        Subject: CN=95dad00cb5a01872d85ab470b9053a43d5ebde04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8d:c3:41:71:00:a0:05:da:22:1f:38:d6:47:
                    d8:86:de:f3:f2:47:b8:9e:d5:d5:61:91:62:78:9a:
                    9b:71:19:0e:dc:3a:c4:6d:27:ec:f5:c9:9f:94:fa:
                    43:19:90:b9:3c:09:36:27:e7:9e:2c:34:f6:f6:93:
                    45:e4:18:11:73:df:ad:12:99:f0:91:75:46:d6:4b:
                    85:c3:26:19:ee:a0:21:e0:dd:9d:a6:ae:6a:4c:dc:
                    2e:0a:34:ab:f0:5b:fa:46:fd:2e:64:bf:6f:ba:08:
                    c5:a8:0a:81:4e:95:ec:31:c7:97:f5:f9:48:ac:02:
                    0b:cc:da:94:bb:11:a9:3d:42:9b:38:dc:79:4e:6c:
                    15:3d:e2:01:cc:48:c0:2b:fe:2c:60:f7:ab:8d:d2:
                    55:3c:45:4e:2a:31:8e:bb:fd:46:9d:d2:2e:aa:07:
                    91:c0:69:c3:5d:67:fd:1c:46:2e:49:23:ec:81:fa:
                    32:ab:28:77:8b:07:df:c9:4c:72:e0:0a:c9:e6:17:
                    db:71:a1:31:6b:83:0b:e2:12:9e:76:cc:72:35:05:
                    2b:bb:f2:ba:5b:31:24:0d:3a:83:de:b7:89:57:ec:
                    28:52:d9:03:4e:62:32:7f:ad:c8:4d:ba:83:4d:a2:
                    10:fb:8b:11:c2:97:25:08:55:89:d9:47:29:78:f9:
                    fc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:DA:D0:0C:B5:A0:18:72:D8:5A:B4:70:B9:05:3A:43:D5:EB:DE:04
            X509v3 Authority Key Identifier:
                keyid:7A:1B:84:9C:34:07:02:50:13:63:A1:F9:27:EC:42:40:99:B9:47:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ehuEnDQHAlATY6H5J-xCQJm5RyY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/277333-e1f3-42ec-a8ac-b1f56a454d82/1/ehuEnDQHAlATY6H5J-xCQJm5RyY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:5f:4a:5d:c2:81:75:e7:11:a4:e6:de:1b:dd:f9:61:47:ed:
         a4:ca:b6:6b:57:df:17:42:d4:97:69:99:b0:46:a8:5c:d7:52:
         d1:b8:0a:8c:84:0f:68:aa:b2:d7:10:34:bb:f6:aa:12:ef:62:
         e2:31:58:69:fd:9a:52:16:b3:13:86:eb:3e:9a:22:ca:60:79:
         e9:2e:21:d3:0b:c0:d0:a7:e4:f5:f4:ce:6f:41:0e:ce:d8:27:
         cb:25:7f:24:60:c6:08:e6:e1:52:fa:99:9f:ee:f9:1c:89:33:
         0b:7c:11:ad:dd:af:f9:a7:4a:05:5a:af:ce:74:a5:0e:f3:8a:
         45:c8:be:1c:b4:52:f1:1d:e0:9e:1c:40:31:5d:d6:00:e2:07:
         62:18:d8:ab:0c:98:9a:32:79:9b:3b:51:45:c0:30:8b:c5:0a:
         7c:89:99:4c:90:30:52:0c:fe:5d:c6:cd:de:e2:76:7d:67:e5:
         2e:1a:b3:0c:62:0d:c0:3e:43:a1:cf:d7:e9:58:09:e0:1f:fc:
         84:6d:6a:c1:5e:b0:20:eb:66:59:f6:7f:e5:5f:d0:b9:70:90:
         c4:f2:50:cd:25:a2:15:33:b9:14:52:97:08:d9:3c:80:57:b7:
         44:f7:65:c0:e2:58:35:7d:fe:34:64:fa:4a:d9:b7:6e:58:66:
         8b:45:cf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:35:12 2026 by rpki-client