Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
File:                     65YJgugr-emHVEUAkwjefsvQXFQ.mft (raw, json)
Hash identifier:          pV4Ta6jSj7oH0g93GidwFJ7X4POu1WGGGOL9XpSLF4A=
Subject key identifier:   CC:0A:4A:A2:01:34:77:C3:BF:DB:D5:F4:F5:38:8A:03:1C:9C:34:27
Authority key identifier: EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54
Certificate issuer:       /CN=eb960982e82bf9e9875445009308de7ecbd05c54
Certificate serial:       01A0C444E0BA5C56236B865EDB8EF4A59D96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
Manifest number:          0F99
Signing time:             Mon 21 Sep 2026 14:00:43 +0000
Manifest this update:     Mon 21 Sep 2026 14:00:43 +0000
Manifest next update:     Tue 22 Sep 2026 14:00:43 +0000
Files and hashes:         1: 3NE1-ierdloX8nhN3iBkvRLmeck.roa (hash: gQY+8HGUw14ADa6TeHXGdaEBXGR4Hxky1qeV/2hoxfs=)
                          2: 65YJgugr-emHVEUAkwjefsvQXFQ.crl (hash: So/t8DPbxu780UVH9r0LOvUS0PHS69+kg3vrcvFyQnk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:44:e0:ba:5c:56:23:6b:86:5e:db:8e:f4:a5:9d:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb960982e82bf9e9875445009308de7ecbd05c54
        Validity
            Not Before: Sep 21 14:00:43 2026 GMT
            Not After : Sep 22 14:00:43 2026 GMT
        Subject: CN=cc0a4aa2013477c3bfdbd5f4f5388a031c9c3427
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:52:f0:4b:09:88:5e:ce:e0:24:62:2f:d5:da:
                    4c:4f:0a:97:ef:23:14:e7:51:52:a8:a3:28:2f:ee:
                    77:9c:9b:d2:36:97:47:12:29:ed:7f:0c:2a:78:25:
                    3f:56:ad:91:7f:fe:d6:2a:82:cc:04:b5:1d:57:93:
                    e4:30:25:7b:e5:46:46:48:d1:39:ec:69:f1:db:32:
                    76:3b:47:f0:24:14:22:0d:9a:fa:21:1a:60:4a:10:
                    73:7d:b6:f0:c9:24:7b:5f:ba:70:0a:e6:c4:88:ec:
                    71:51:e7:c5:dc:6d:fb:9e:df:4f:0e:11:55:15:70:
                    71:96:29:99:dc:92:ee:dd:5d:63:50:dd:3c:75:15:
                    4d:fa:e7:37:b1:e1:c3:f5:90:f7:95:87:37:2d:bd:
                    1a:30:b2:ee:30:af:ff:58:02:9d:80:83:20:a2:80:
                    b7:cb:dc:a9:b7:0a:71:4e:2d:8c:c2:9f:79:74:5a:
                    dd:d6:d0:90:f1:01:83:31:ad:d5:eb:d8:bf:c0:ff:
                    e2:15:1c:d9:0a:e8:83:20:42:fe:49:81:80:3d:72:
                    4a:0e:8e:8d:18:ab:b7:89:ae:62:22:d6:79:56:1e:
                    f4:2f:e4:85:6e:3f:10:ea:00:31:72:2b:0e:d1:66:
                    1a:12:52:54:8f:8a:38:07:3e:93:60:a3:95:bb:ff:
                    2a:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:0A:4A:A2:01:34:77:C3:BF:DB:D5:F4:F5:38:8A:03:1C:9C:34:27
            X509v3 Authority Key Identifier:
                keyid:EB:96:09:82:E8:2B:F9:E9:87:54:45:00:93:08:DE:7E:CB:D0:5C:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65YJgugr-emHVEUAkwjefsvQXFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/59a72f-09a4-41c5-80b7-cadfcef0b5c4/1/65YJgugr-emHVEUAkwjefsvQXFQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ec:e9:f3:73:40:1d:61:01:83:87:8b:11:56:92:7a:87:2b:
         7b:6d:bc:37:53:3c:f3:70:d9:97:3d:ab:47:3d:c8:58:11:89:
         cf:e7:88:d0:f0:54:99:c6:19:dd:0e:f2:2f:69:f6:74:d8:c5:
         ce:30:2e:93:71:f3:dc:69:3f:d0:65:09:be:93:be:38:a0:74:
         40:b8:df:c1:20:68:72:c9:6d:09:68:bd:20:8d:16:a5:13:9e:
         15:d3:a8:16:9c:f4:c9:9e:47:2d:74:4c:6b:6c:19:eb:f4:55:
         45:31:c3:75:41:af:1b:64:5f:66:3d:01:53:78:5b:30:56:6c:
         51:55:a7:f1:af:b3:eb:a4:77:1a:cc:cd:f5:f8:13:27:91:1d:
         fc:3c:eb:78:69:64:76:43:01:ba:a1:8a:d8:96:78:1d:f2:02:
         0c:04:08:ba:e4:43:dc:d8:9d:83:8e:93:15:89:c4:16:7c:9b:
         ad:90:e2:c7:14:04:86:4c:0d:43:b7:72:8e:a9:fa:cd:4d:5e:
         0d:32:24:a8:bc:b8:b5:28:39:b0:49:26:3f:d6:d7:2c:89:07:
         24:62:dc:6f:9f:7e:4f:b6:9f:d1:9f:1f:66:c8:50:f7:91:a6:
         6c:ed:e3:13:32:b0:65:6f:74:4c:8f:6e:11:6d:62:c9:f5:72:
         c3:f7:90:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:47:39 2026 by rpki-client