Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
File:                     31EgEGEfkbFilnKKlNGmZbSrdXA.mft (raw, json)
Hash identifier:          mN3hux4k1DmhZyQqdqp+dQzHEuu5sNHN+0GUwJN6VYw=
Subject key identifier:   BF:F6:EE:E5:C8:BA:37:44:07:D3:C0:09:61:23:8A:64:2C:32:79:F2
Authority key identifier: DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70
Certificate issuer:       /CN=df512010611f91b16296728a94d1a665b4ab7570
Certificate serial:       01A0C28E04C9FC8C928962B030543BA527C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
Manifest number:          1A65
Signing time:             Mon 21 Sep 2026 06:01:22 +0000
Manifest this update:     Mon 21 Sep 2026 06:01:22 +0000
Manifest next update:     Tue 22 Sep 2026 06:01:22 +0000
Files and hashes:         1: 31EgEGEfkbFilnKKlNGmZbSrdXA.crl (hash: V11Tu6ET8ZQ3FltzStGg7uIC/NGnuX8n/4WXxkDIK6U=)
                          2: KwvgmxkuN2Vb_g5rfP-r60wn56s.roa (hash: pRgKb7xCV6ebEVi6C792sZZDSzLwlu0u5goqcmXhzF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 06:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c2:8e:04:c9:fc:8c:92:89:62:b0:30:54:3b:a5:27:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df512010611f91b16296728a94d1a665b4ab7570
        Validity
            Not Before: Sep 21 06:01:22 2026 GMT
            Not After : Sep 22 06:01:22 2026 GMT
        Subject: CN=bff6eee5c8ba374407d3c00961238a642c3279f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:82:2c:53:f2:3c:a9:11:df:37:c5:57:43:ef:
                    59:c3:08:0d:8b:96:70:95:a5:a6:e8:96:18:70:57:
                    81:d3:ce:06:23:b3:88:8b:de:5b:5f:fa:50:c7:3c:
                    59:ba:54:0a:3d:54:b6:0e:d2:55:bc:21:3e:a2:87:
                    87:45:e2:ae:cf:9b:c6:3a:34:99:70:ab:26:98:70:
                    a6:38:ca:e4:07:b3:48:13:06:3a:2f:84:b0:74:7e:
                    ef:7c:f2:5b:c6:11:07:fc:29:21:94:48:2f:10:96:
                    2b:ea:b2:1c:3c:90:00:b0:5b:9d:43:a4:7f:49:af:
                    04:c5:39:7f:46:4e:45:02:89:ef:70:98:39:78:84:
                    6e:a7:b6:51:15:f0:19:b9:fb:5b:91:06:df:03:f1:
                    3b:4e:18:b9:3c:cc:ff:d1:2c:62:ea:99:d0:61:7a:
                    b1:3f:56:64:49:3b:68:cb:a0:b0:ae:f2:0a:ee:e7:
                    19:34:e8:09:3d:f9:5b:ae:e1:9b:ec:de:5b:30:91:
                    1b:70:cd:50:75:f3:d2:46:90:52:8f:13:ba:b8:fe:
                    1a:bc:75:79:d2:b0:0b:0a:b1:ea:aa:ec:de:c3:4d:
                    8c:38:e2:78:c4:01:cd:a8:3f:2f:93:70:ab:80:7e:
                    9e:80:83:93:c3:81:e7:00:ce:3b:39:bd:a4:9f:09:
                    b0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F6:EE:E5:C8:BA:37:44:07:D3:C0:09:61:23:8A:64:2C:32:79:F2
            X509v3 Authority Key Identifier:
                keyid:DF:51:20:10:61:1F:91:B1:62:96:72:8A:94:D1:A6:65:B4:AB:75:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/31EgEGEfkbFilnKKlNGmZbSrdXA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/50f7e1-6cbc-4f5a-b2eb-b062e9725b1d/1/31EgEGEfkbFilnKKlNGmZbSrdXA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:34:5c:84:c3:35:4e:75:cf:c8:47:50:e9:fd:be:21:85:23:
         a3:f9:6a:d5:27:dc:89:af:1d:5d:a1:28:17:b6:0d:66:1e:7d:
         c4:c9:4b:18:29:85:51:c7:f4:6f:de:fd:8b:95:af:42:30:3d:
         7e:bb:e2:e8:46:4c:3f:96:41:a3:de:0f:80:14:8a:cd:54:fb:
         d8:80:6a:c5:f4:03:72:64:9f:8d:83:ad:2a:72:3f:f3:60:ec:
         79:fd:db:97:30:64:a3:af:61:da:6b:0d:96:0d:92:8f:8f:78:
         0a:2f:7b:a1:c7:22:3b:1b:95:42:06:7f:ae:54:79:c3:51:b6:
         a1:70:70:38:37:41:d0:49:db:cc:c2:0a:13:f0:27:77:bd:bd:
         35:5a:b5:4c:a1:ec:1e:3b:33:7d:a0:43:98:37:63:c8:9e:c3:
         36:3d:d4:3f:80:68:22:bf:38:e3:42:d6:33:f2:01:45:2a:98:
         30:84:2f:67:ff:89:e3:ec:ee:07:99:91:f6:e0:f6:c2:f6:9f:
         e5:6c:39:58:d6:d5:48:a7:b1:59:37:26:c7:30:e1:67:74:84:
         b0:9e:be:1b:43:93:a4:00:6f:b5:c3:cc:c5:e4:7a:32:52:00:
         e8:5d:94:a9:64:76:e1:3f:f6:cd:8b:ae:b6:be:d9:50:6e:d8:
         d8:36:de:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:45:05 2026 by rpki-client