Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
File:                     E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft (raw, json)
Hash identifier:          RZFz/f6qRMJsX9lFIZCkGZjmrkM/k6egqhQUOxywsn4=
Subject key identifier:   92:E2:EB:A5:23:2D:09:A7:55:53:83:18:D1:44:05:1E:0E:1E:68:EF
Authority key identifier: 13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47
Certificate issuer:       /CN=13764a52c85e07e33749743d23a5a24d096df147
Certificate serial:       01A0BE432E8171BC5B71D2D6153EFABDB7AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
Manifest number:          1A61
Signing time:             Sun 20 Sep 2026 10:01:08 +0000
Manifest this update:     Sun 20 Sep 2026 10:01:08 +0000
Manifest next update:     Mon 21 Sep 2026 10:01:08 +0000
Files and hashes:         1: 3dIucZ8jH7dlGBbm6_dHTseku08.roa (hash: thGZsX4bRwQc9L89QWKDx2WpmoY2kq/BhxHDeJ8x19o=)
                          2: E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl (hash: 4hdlAeZoq0FS6Ewf8hn0qm7cAKX/MB+goOTpA2yQiq8=)
                          3: eLXP7X4R8paf6qetH-S-yG7m0GI.roa (hash: DTI6i/30Ta7/3+UJsMxfg9gmEzqq5ZSc/OuIWUWuCuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 10:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:43:2e:81:71:bc:5b:71:d2:d6:15:3e:fa:bd:b7:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13764a52c85e07e33749743d23a5a24d096df147
        Validity
            Not Before: Sep 20 10:01:08 2026 GMT
            Not After : Sep 21 10:01:08 2026 GMT
        Subject: CN=92e2eba5232d09a755538318d144051e0e1e68ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:ce:b6:38:2d:58:06:5c:73:f5:da:f2:e0:
                    b5:b2:8d:1e:26:74:fb:27:a2:d1:1f:00:b4:ec:a2:
                    cc:90:51:df:91:d6:ec:2c:b7:04:d7:04:c4:ea:50:
                    49:ad:48:3a:f1:12:e1:a4:11:f6:73:ca:6d:ae:fb:
                    14:b1:c9:b7:53:c5:aa:bd:db:2a:1d:80:37:be:2c:
                    7c:31:ef:50:ac:3e:24:f3:b1:7c:ea:a0:7c:42:54:
                    da:db:da:50:b9:88:92:b2:e8:b2:7d:46:8e:0f:3d:
                    da:6c:64:12:b4:4b:8a:39:48:e5:14:dd:ce:aa:2c:
                    e0:87:0e:6f:ef:0b:98:78:f9:1d:9e:f9:69:cb:93:
                    22:75:3e:39:2a:23:81:0d:81:13:1d:99:b1:6b:bd:
                    11:15:15:63:c2:5a:90:ce:07:18:cd:12:1b:fc:a1:
                    00:44:1d:6e:12:18:c2:b1:ef:67:69:55:1a:02:ec:
                    0e:31:f7:49:22:a2:67:fb:78:aa:e1:51:69:1f:b3:
                    f3:17:a4:df:1b:08:af:0e:d7:23:b6:95:80:5b:25:
                    8d:1c:51:b9:00:7f:62:f3:f1:1e:a9:c1:87:6a:7e:
                    52:6a:8e:4d:ff:51:7b:4a:f9:87:d8:8e:1c:ee:d9:
                    1a:18:28:17:9d:79:1c:74:a1:f2:ba:1c:75:ae:c1:
                    64:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E2:EB:A5:23:2D:09:A7:55:53:83:18:D1:44:05:1E:0E:1E:68:EF
            X509v3 Authority Key Identifier:
                keyid:13:76:4A:52:C8:5E:07:E3:37:49:74:3D:23:A5:A2:4D:09:6D:F1:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/e4e531-6bee-4189-ba7c-203e45616306/1/E3ZKUsheB-M3SXQ9I6WiTQlt8Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:36:74:8f:29:ff:45:bc:ab:6e:e6:a7:69:93:67:96:af:fe:
         a8:3a:6a:5b:91:70:57:cb:28:5e:12:8a:5d:21:c4:44:2b:14:
         16:0b:cc:db:14:17:7e:61:39:65:8e:4b:f1:a2:e7:61:ed:06:
         1a:b0:d9:d9:b4:8d:4a:31:ab:48:83:d9:04:fe:82:de:a1:97:
         75:ce:25:d4:e9:11:f6:e6:77:24:7c:da:75:79:3c:7d:14:0f:
         ab:35:94:c5:b4:3d:b5:2a:57:cc:6a:52:01:16:17:48:6e:3b:
         98:93:2a:d1:c7:77:c1:28:07:e9:bb:b8:41:49:f8:ca:19:6b:
         d9:6f:a9:08:f8:1a:89:64:6b:c2:46:17:b3:00:01:c5:a3:97:
         3f:74:87:ab:5d:79:c0:7d:d7:56:1a:e8:cc:18:28:6d:f0:36:
         02:c5:3c:ad:31:d5:31:06:cd:51:4b:e7:53:fd:83:bf:b2:ab:
         92:59:c4:48:f4:38:4b:27:53:62:f7:21:07:ce:dc:b4:97:10:
         9f:0c:de:bf:ce:c2:ab:25:fd:19:eb:31:20:0e:58:5c:e9:9b:
         3c:6f:f4:5e:e0:35:0f:bb:e8:fa:3b:d9:24:c2:78:ba:bb:dd:
         a7:9a:26:e6:82:81:f5:55:3c:94:6b:45:42:d2:1a:15:fb:c9:
         e5:ae:e7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:35:07 2026 by rpki-client