Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
File:                     65M6GrHHFeCzssf_oOEDhFYU03s.mft (raw, json)
Hash identifier:          RKtn897yhOOtegIp7wqtP//6ATqlw1rByygTn3DJoa8=
Subject key identifier:   56:CE:1C:38:FA:A9:85:C5:2A:F9:53:AA:F8:85:1B:54:E0:B6:D1:B3
Authority key identifier: EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B
Certificate issuer:       /CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
Certificate serial:       01A0C7EA886A1F0F74F5423F521B2408CD42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
Manifest number:          08F3
Signing time:             Tue 22 Sep 2026 07:00:31 +0000
Manifest this update:     Tue 22 Sep 2026 07:00:31 +0000
Manifest next update:     Wed 23 Sep 2026 07:00:31 +0000
Files and hashes:         1: 65M6GrHHFeCzssf_oOEDhFYU03s.crl (hash: B+BoMUgczOaFI/zOuxe9Fapi/sxpPSELQaNp4M7u4O8=)
                          2: FqKH_1dEbYHfG_HCWhQNRfoAnxY.roa (hash: ypbscnVK5daBEVMCMSev1UT9NaME9JSvvJDk8LMy6XM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:ea:88:6a:1f:0f:74:f5:42:3f:52:1b:24:08:cd:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb933a1ab1c715e0b3b2c7ffa0e103845614d37b
        Validity
            Not Before: Sep 22 07:00:31 2026 GMT
            Not After : Sep 23 07:00:31 2026 GMT
        Subject: CN=56ce1c38faa985c52af953aaf8851b54e0b6d1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:39:80:9a:2a:4c:e7:e6:33:47:72:5b:01:
                    af:89:9a:9b:f2:5d:c2:08:f0:30:a5:13:43:a1:1d:
                    02:5f:1e:28:77:bf:30:93:83:f3:91:da:ba:da:c0:
                    c9:64:93:6c:2c:21:1a:1a:73:9e:9c:c6:04:bc:f9:
                    99:c8:58:71:c3:8d:b6:da:88:da:58:46:2c:14:25:
                    53:0a:cb:1d:65:4e:12:ae:3c:eb:d6:04:d9:97:2a:
                    ae:a6:c5:99:77:87:39:ca:1e:c5:85:ce:aa:95:7a:
                    4a:2e:fa:d8:68:3b:61:62:e7:8a:51:8f:b7:00:c6:
                    8b:1d:11:e8:1b:ce:83:bb:b1:08:ed:54:ea:b9:dd:
                    8f:ff:7c:70:18:5a:79:9a:51:3b:6f:8f:af:66:e5:
                    6c:43:88:2e:70:19:e5:c9:97:65:3a:98:80:b4:d4:
                    fc:b8:e3:8e:1e:4f:4f:4b:9f:00:1e:a6:62:25:0a:
                    c1:a2:c9:66:5c:06:aa:5f:cb:01:bd:1c:c7:89:c3:
                    97:23:d7:b3:f3:1d:3d:63:82:b3:ef:dc:04:af:93:
                    ae:c0:53:2d:53:89:8d:56:13:5a:58:51:06:6f:34:
                    58:c7:7c:ed:52:f5:f4:41:cf:56:da:49:9d:0e:2d:
                    ce:62:cf:ae:94:d3:7e:aa:9c:e6:0f:ee:ab:e6:f7:
                    da:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:CE:1C:38:FA:A9:85:C5:2A:F9:53:AA:F8:85:1B:54:E0:B6:D1:B3
            X509v3 Authority Key Identifier:
                keyid:EB:93:3A:1A:B1:C7:15:E0:B3:B2:C7:FF:A0:E1:03:84:56:14:D3:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/65M6GrHHFeCzssf_oOEDhFYU03s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4ce3d8-9deb-42bf-894d-2dd6e1113f34/1/65M6GrHHFeCzssf_oOEDhFYU03s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:24:4b:ac:c0:cd:56:e0:78:e7:98:f9:db:42:87:ea:ad:22:
         c8:b7:57:24:39:46:8f:2a:48:97:a6:7e:3f:f3:24:a1:59:e1:
         a9:da:df:00:61:bf:f6:8b:c9:3f:6d:14:b4:36:ac:67:7f:b3:
         0b:34:31:1c:7d:14:87:7a:63:0a:5a:40:9c:2f:cf:78:9a:bf:
         c7:35:01:dc:aa:d9:10:7c:ef:9c:20:2e:0b:35:40:de:78:39:
         b5:1f:54:44:7a:3f:65:79:2d:2e:f0:8a:51:6f:05:50:43:09:
         c4:c4:c4:46:70:41:85:3d:01:97:a5:9c:bf:a3:17:01:54:dd:
         0a:bf:58:ce:60:c9:84:02:4d:04:17:f2:b1:fc:6a:a0:dc:24:
         d3:a9:6c:5d:ca:18:df:ef:66:8d:59:15:54:ea:23:41:40:8c:
         c3:d3:4a:c4:93:55:f5:4c:69:c1:b6:c6:ea:f1:1c:12:ad:43:
         a1:5c:35:75:83:23:3f:8f:f3:6d:89:79:ed:82:00:ac:90:c0:
         af:85:d4:ae:91:6a:22:d2:62:7b:2a:2e:ec:b6:8e:45:66:5e:
         6a:99:7d:3c:69:b3:d2:85:26:78:0f:d1:87:f1:fe:1d:2b:bd:
         1a:51:04:13:0d:4d:7e:95:f6:d9:df:5c:c7:42:59:0d:90:a7:
         64:a1:fd:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:07:55 2026 by rpki-client